$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/417527f1-200e-361a-9d61-88d143ec677a.roa File: 417527f1-200e-361a-9d61-88d143ec677a.roa (raw, json) Hash identifier: qCAGTvKTmclpcVzrLHQ8KE5KsrxaWf+I//AMJKHGCl0= Subject key identifier: FA:71:C7:29:C6:65:80:28:2D:56:58:61:49:A9:F9:2E:74:5B:1E:EA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797E3AF89527B1AB6803F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/417527f1-200e-361a-9d61-88d143ec677a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.195.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e3:af:89:52:7b:1a:b6:80:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=25bd89ed-7836-4182-a09f-cd12f86d8338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:3e:71:38:58:cf:5c:ee:41:2e:db:ea:bf: 39:7d:d6:49:91:6b:b0:8d:d0:e8:69:2c:e4:86:8a: e9:6a:51:05:4e:2f:4b:ce:4c:81:2b:e6:73:6c:1d: 9a:63:12:4c:27:ee:45:97:97:6b:bb:ea:57:e9:5c: 9e:22:5a:c1:28:61:d3:e2:c3:7a:26:cf:3e:91:0e: bb:77:97:6f:8c:d9:38:30:28:60:d3:70:47:73:e5: f3:07:d2:34:a7:d0:b9:81:b7:a1:c8:84:43:39:7b: f6:20:ef:ba:d9:0f:85:b2:7a:b5:2e:b1:21:e0:bb: aa:49:1a:ea:a3:7e:13:d4:b7:a8:86:17:d4:ca:13: 07:1b:a5:57:82:c9:ea:b7:b1:12:99:af:36:a2:18: 25:39:21:96:92:7c:fc:3a:2a:4f:89:70:ae:9f:3c: c3:c3:16:b1:4b:a4:fb:d0:ca:28:4c:dd:9c:a9:a7: db:67:9b:f6:1b:8e:2b:86:65:3f:2a:de:27:01:f6: 1f:a5:2c:f5:c9:e0:fe:8d:35:66:15:61:87:d1:8a: 31:31:ac:2b:5a:27:e4:11:9a:71:5b:8a:be:d4:12: be:f8:7a:97:ea:4c:cf:1f:b8:53:82:b2:70:bb:c0: 7b:de:e7:32:e8:3b:a7:47:a3:83:fb:c6:13:c0:aa: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:71:C7:29:C6:65:80:28:2D:56:58:61:49:A9:F9:2E:74:5B:1E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/417527f1-200e-361a-9d61-88d143ec677a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a8:3b:da:45:0e:39:d9:20:c3:96:5f:ed:ea:d9:d8:d5:d5: ff:78:f3:60:c4:dd:60:9f:6d:24:99:2d:62:c7:2d:a9:af:32: b9:9c:57:3f:c1:65:c7:13:7c:1e:49:b7:73:f6:f1:9b:26:a2: 76:f2:1c:ec:a7:ae:6c:53:4f:d9:aa:67:02:8b:89:6c:b9:03: 34:9d:97:63:ce:31:49:2c:c4:25:96:c7:72:b6:cb:32:94:30: c1:13:75:03:46:0a:fe:c0:71:c2:77:5d:56:44:49:c5:8c:cb: 80:8c:eb:10:bd:da:f2:1b:19:ec:c8:e4:32:20:8c:ec:61:59: b8:83:14:79:1a:f5:03:85:97:0b:cf:7a:5b:74:d1:19:a7:b5: 86:08:04:13:0c:7f:66:f6:0a:73:33:0b:5d:fa:93:db:68:e0: 30:d3:9c:e6:4e:65:67:70:92:dd:4c:92:ba:c0:ea:ff:4f:ff: bd:c6:e3:c8:68:9c:73:13:b2:40:ea:27:a3:40:3d:f8:1a:2c: 7d:f0:b8:2b:65:fe:37:49:c7:e1:eb:15:96:60:75:92:be:c2: b1:b6:df:07:91:8f:b2:da:7d:4f:b8:38:be:ea:4c:3f:b2:40: 45:4e:89:a6:c3:96:fb:1b:ec:70:ba:ab:01:c8:08:ef:dc:53: 28:bb:2a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+OviVJ7GraAPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjViZDg5ZWQtNzgzNi00MTgyLWEwOWYtY2QxMmY4NmQ4MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg28+cThYz1zuQS7b6r85fdZJkWuwjdDoaSzk horpalEFTi9LzkyBK+ZzbB2aYxJMJ+5Fl5dru+pX6VyeIlrBKGHT4sN6Js8+kQ67 d5dvjNk4MChg03BHc+XzB9I0p9C5gbehyIRDOXv2IO+62Q+Fsnq1LrEh4LuqSRrq o34T1LeohhfUyhMHG6VXgsnqt7ESma82ohglOSGWknz8OipPiXCunzzDwxaxS6T7 0MooTN2cqafbZ5v2G44rhmU/Kt4nAfYfpSz1yeD+jTVmFWGH0YoxMawrWifkEZpx W4q+1BK++HqX6kzPH7hTgrJwu8B73ucy6DunR6OD+8YTwKql4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpxxynGZYAoLVZYYUmp+S50Wx7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDE3NTI3ZjEtMjAwZS0z NjFhLTlkNjEtODhkMTQzZWM2NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKoO9pFDjnZIMOWX+3q2djV1f9482DE3WCfbSSZLWLHLamvMrmcVz/B ZccTfB5Jt3P28ZsmonbyHOynrmxTT9mqZwKLiWy5AzSdl2POMUksxCWWx3K2yzKU MMETdQNGCv7AccJ3XVZEScWMy4CM6xC92vIbGezI5DIgjOxhWbiDFHka9QOFlwvP elt00RmntYYIBBMMf2b2CnMzC136k9to4DDTnOZOZWdwkt1MkrrA6v9P/73G48ho nHMTskDqJ6NAPfgaLH3wuCtl/jdJx+HrFZZgdZK+wrG23weRj7LafU+4OL7qTD+y QEVOiabDlvsb7HC6qwHICO/cUyi7KoI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:51:07 2025 by rpki-client