$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4592a172-a600-3897-b808-309cf996f270.roa File: 4592a172-a600-3897-b808-309cf996f270.roa (raw, json) Hash identifier: yNmx6BYme6L9EiOxnnVl4QnQUZNM4w6jp3Wx3CaSxEk= Subject key identifier: D8:58:0F:5E:21:71:DA:19:EC:76:3F:10:1F:79:7D:07:5D:C9:AF:6E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C396E5631B50283FB400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4592a172-a600-3897-b808-309cf996f270.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.247.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c3:96:e5:63:1b:50:28:3f:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=52e5f30b-c83b-485c-86a7-c66b6e8eda56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:3d:5e:77:c3:76:ad:62:1b:73:a2:11:0f: b6:19:1b:76:ae:cf:45:55:46:e8:25:e3:42:18:5c: e5:40:0b:2b:22:5b:34:c0:8c:0a:9c:cd:ba:f2:51: 25:15:a9:0b:60:8d:34:23:e1:42:af:16:bc:97:38: 5c:2f:92:75:f6:7c:bb:fc:7e:7e:c1:6c:77:4a:8c: 6d:86:02:96:65:f3:66:f9:66:c9:75:84:94:35:c3: c1:ea:4b:24:4e:2d:6e:d0:80:b3:d9:9b:bb:ae:b0: 4a:23:ff:dd:05:f1:37:84:ff:77:e1:c6:d5:f7:07: 47:09:b7:87:42:42:3a:29:69:b3:a2:f7:b8:0e:aa: 51:08:3f:59:5e:54:38:a8:ca:39:8b:bf:b8:71:17: c6:43:02:77:08:a5:d0:90:d4:f7:8d:b0:9e:88:00: 13:d7:cb:4a:b3:c5:c7:36:ea:96:0d:76:c9:14:57: 32:7f:a6:ec:9e:d2:ce:fd:88:45:f1:50:e8:76:c6: 6d:a8:e4:81:c2:af:e6:5b:46:7e:38:e6:3a:bc:76: 6a:db:c5:ae:84:e8:ba:4a:cb:96:da:80:21:84:e3: 92:4e:97:be:ad:91:f9:da:9e:25:df:15:fb:93:05: 1b:07:09:12:49:98:d4:a1:6f:f8:89:b1:98:27:9a: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:58:0F:5E:21:71:DA:19:EC:76:3F:10:1F:79:7D:07:5D:C9:AF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4592a172-a600-3897-b808-309cf996f270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.247.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0e:b5:ef:5e:07:a1:f6:0c:a8:f9:a6:d0:09:6f:55:ca:c1: 7d:46:56:f2:56:09:a4:40:00:70:45:68:cf:09:85:19:ae:2f: ff:11:28:df:69:22:ea:8f:cc:5d:85:49:ea:87:d4:1c:ce:99: c9:90:fe:82:98:a0:11:29:ba:05:3a:5a:ad:be:30:38:a1:23: ae:6a:85:92:1a:9c:7c:b5:24:69:84:e1:98:4a:b7:05:15:80: 0c:8d:94:63:bf:0c:45:d4:6f:51:e4:2f:2f:5c:91:17:2a:1b: 61:69:c1:fd:56:8b:33:e3:1a:d4:a3:88:24:09:1d:2b:42:81: 12:5c:e5:91:9f:22:8b:15:e6:21:d8:a9:6c:53:20:17:69:82: 58:2b:17:65:d6:f3:80:24:b4:97:20:e7:71:35:95:7a:61:31: c6:9b:f5:f7:03:73:61:95:d3:e4:fe:44:13:bd:7b:54:dd:e1: 46:4a:9d:1a:cb:31:08:56:bb:5b:b2:06:2a:12:36:ab:97:33: fb:6d:0b:b6:2c:2a:ed:cf:7a:bb:4f:26:e9:d1:66:93:a2:00: 72:7f:84:77:c2:f9:4e:cd:45:18:30:65:83:ca:e7:ae:0a:1a: c4:ad:ab:cc:62:fe:ef:de:69:5e:67:6c:84:3f:3d:44:33:0e: 0e:2f:40:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8OW5WMbUCg/tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTJlNWYzMGItYzgzYi00ODVjLTg2YTctYzY2YjZlOGVkYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh49XnfDdq1iG3OiEQ+2GRt2rs9FVUboJeNC GFzlQAsrIls0wIwKnM268lElFakLYI00I+FCrxa8lzhcL5J19ny7/H5+wWx3Soxt hgKWZfNm+WbJdYSUNcPB6kskTi1u0ICz2Zu7rrBKI//dBfE3hP934cbV9wdHCbeH QkI6KWmzove4DqpRCD9ZXlQ4qMo5i7+4cRfGQwJ3CKXQkNT3jbCeiAAT18tKs8XH NuqWDXbJFFcyf6bsntLO/YhF8VDodsZtqOSBwq/mW0Z+OOY6vHZq28WuhOi6SsuW 2oAhhOOSTpe+rZH52p4l3xX7kwUbBwkSSZjUoW/4ibGYJ5rSSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhYD14hcdoZ7HY/EB95fQddya9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDU5MmExNzItYTYwMC0z ODk3LWI4MDgtMzA5Y2Y5OTZmMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYOte9eB6H2DKj5ptAJb1XKwX1GVvJWCaRAAHBFaM8JhRmuL/8RKN9p IuqPzF2FSeqH1BzOmcmQ/oKYoBEpugU6Wq2+MDihI65qhZIanHy1JGmE4ZhKtwUV gAyNlGO/DEXUb1HkLy9ckRcqG2Fpwf1WizPjGtSjiCQJHStCgRJc5ZGfIosV5iHY qWxTIBdpglgrF2XW84AktJcg53E1lXphMcab9fcDc2GV0+T+RBO9e1Td4UZKnRrL MQhWu1uyBioSNquXM/ttC7YsKu3PertPJunRZpOiAHJ/hHfC+U7NRRgwZYPK564K GsStq8xi/u/eaV5nbIQ/PUQzDg4vQME= -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:22 2025 by rpki-client