$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f6ba84-6cf1-30e3-8730-91a81748bba3.roa File: 35f6ba84-6cf1-30e3-8730-91a81748bba3.roa (raw, json) Hash identifier: pQobjvQ+d2NemPZUwh6mvnHhCv/Ee+fXN+C1nrpTWP0= Subject key identifier: 25:7E:4B:72:03:2F:5C:DD:6C:33:E7:2A:11:03:C9:A9:D6:DC:2D:F2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67979F1F61D6784B63224580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f6ba84-6cf1-30e3-8730-91a81748bba3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.199.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:9f:1f:61:d6:78:4b:63:22:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8d9debae-d52a-46d6-a872-4c551a1f90e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:04:6a:eb:4f:04:2b:db:0b:7d:a2:f0:7a:09: 4c:9b:3d:17:14:77:63:5c:8b:4e:41:e3:9e:97:ae: 3f:4c:51:f5:ca:01:2b:bd:8e:82:d4:db:5f:17:2a: 35:42:f8:76:9e:46:ac:61:c0:28:50:9d:be:3b:d0: 99:13:1d:2e:02:65:fa:7b:ea:d0:eb:b1:b0:ef:e6: b4:3d:d3:1b:8c:aa:9e:5f:db:09:95:3c:73:3d:d0: e2:bf:ee:c2:a9:25:54:7d:67:94:ff:a9:f0:81:de: 21:29:94:72:87:5c:e6:36:e6:4a:09:45:a1:be:bc: 16:7e:03:18:c7:74:e8:df:ad:87:c0:bb:a8:20:22: 07:a3:66:0f:1b:6a:82:90:f3:8d:10:16:a1:94:48: 7d:6a:5e:4e:d1:9b:37:7c:6f:07:be:51:29:c2:2b: a5:28:d6:f4:68:32:e3:86:4f:f7:59:66:12:4e:1c: ba:5c:1e:c1:8c:b2:1e:32:ee:bb:8b:c8:1c:9b:d9: 95:04:dc:ab:cf:c5:3a:7c:0a:38:69:fb:f0:77:e4: 40:a0:f4:d0:02:d2:1d:f8:dc:04:5e:ed:43:6e:52: 54:0a:68:46:07:83:48:83:25:dc:e0:40:17:80:2d: b8:fa:4f:ad:d2:f7:54:84:4a:a2:9c:ea:79:5a:59: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7E:4B:72:03:2F:5C:DD:6C:33:E7:2A:11:03:C9:A9:D6:DC:2D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f6ba84-6cf1-30e3-8730-91a81748bba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:83:95:b9:55:32:ed:9b:ba:f0:a0:5f:19:dc:84:47:18:81: a6:5e:43:39:ff:d7:3f:99:c6:b5:c0:25:b8:40:df:95:86:f9: cd:f2:17:4c:4d:a5:73:b8:1d:59:02:cf:18:41:fa:23:fd:df: 8d:dc:91:86:0b:32:eb:90:f4:5b:da:2a:3a:2c:ed:06:d3:51: 40:90:3f:6d:f6:f0:f4:56:c1:b2:99:c3:e5:0d:5a:1b:f9:75: 7b:57:96:de:fa:9b:44:12:bd:31:28:50:0f:f4:45:de:aa:78: a7:a2:45:8b:57:19:76:f0:f5:6f:77:c6:aa:bb:c1:20:ea:dd: fe:07:db:44:dd:68:db:5d:58:1e:40:8b:59:7a:85:4f:cb:0e: 8a:eb:83:14:78:35:38:69:47:e9:e3:d0:6b:94:38:0f:c0:74: de:88:3e:a7:67:5c:70:40:f6:2a:36:09:49:e6:0a:bc:b2:7a: 3a:d2:22:b7:41:83:d0:8b:50:93:e7:94:03:e6:6b:ca:a3:0f: da:92:21:9d:68:d5:37:4a:e1:f2:7e:de:97:69:a0:82:c9:48: 68:84:3f:e0:b5:56:a8:b4:cb:44:fe:13:53:73:e1:7f:7c:df: b8:b2:e3:29:28:9b:36:b1:d8:6c:dc:6b:8a:08:ed:9f:62:9f: 4a:31:49:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl58fYdZ4S2MiRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGQ5ZGViYWUtZDUyYS00NmQ2LWE4NzItNGM1NTFhMWY5MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogRq608EK9sLfaLweglMmz0XFHdjXItOQeOe l64/TFH1ygErvY6C1NtfFyo1Qvh2nkasYcAoUJ2+O9CZEx0uAmX6e+rQ67Gw7+a0 PdMbjKqeX9sJlTxzPdDiv+7CqSVUfWeU/6nwgd4hKZRyh1zmNuZKCUWhvrwWfgMY x3To362HwLuoICIHo2YPG2qCkPONEBahlEh9al5O0Zs3fG8HvlEpwiulKNb0aDLj hk/3WWYSThy6XB7BjLIeMu67i8gcm9mVBNyrz8U6fAo4afvwd+RAoPTQAtId+NwE Xu1DblJUCmhGB4NIgyXc4EAXgC24+k+t0vdUhEqinOp5Wlk1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV+S3IDL1zdbDPnKhEDyanW3C3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVmNmJhODQtNmNmMS0z MGUzLTg3MzAtOTFhODE3NDhiYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8dwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSDlblVMu2buvCgXxnchEcYgaZeQzn/1z+ZxrXAJbhA35WG+c3yF0xN pXO4HVkCzxhB+iP9343ckYYLMuuQ9FvaKjos7QbTUUCQP2328PRWwbKZw+UNWhv5 dXtXlt76m0QSvTEoUA/0Rd6qeKeiRYtXGXbw9W93xqq7wSDq3f4H20TdaNtdWB5A i1l6hU/LDorrgxR4NThpR+nj0GuUOA/AdN6IPqdnXHBA9io2CUnmCryyejrSIrdB g9CLUJPnlAPma8qjD9qSIZ1o1TdK4fJ+3pdpoILJSGiEP+C1Vqi0y0T+E1Nz4X98 37iy4ykomzax2Gzca4oI7Z9in0oxSQE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:14:10 2025 by rpki-client