$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/610fbe64-b752-3803-bca4-40bf16a45194.roa File: 610fbe64-b752-3803-bca4-40bf16a45194.roa (raw, json) Hash identifier: Xc1K+cpEz8ne0sYZWbaQ9mncBKPP0rwwXZd9fc9jNJ0= Subject key identifier: 56:2D:16:0A:88:6B:0B:BF:96:90:59:19:13:81:08:E4:5B:4E:85:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679777DE75C4FC855A9A1280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/610fbe64-b752-3803-bca4-40bf16a45194.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.189.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:77:de:75:c4:fc:85:5a:9a:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a19d5194-5c62-4845-b7c3-f1b6dec51249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:92:da:b2:d8:69:83:c9:a4:c0:a7:fd:5a: d8:63:47:e5:fb:05:2b:4a:70:d4:90:30:06:28:69: 34:43:02:d9:9d:d7:75:3d:c8:81:eb:c2:92:67:ee: 51:5e:97:a2:38:8f:91:17:ee:f9:58:15:20:bf:c1: dd:4d:60:2b:8d:02:d7:bf:ec:04:f5:1f:88:31:e1: ce:99:d7:aa:bb:b5:8e:7d:3f:33:1e:4a:c1:7e:52: b4:37:b9:61:05:89:cc:69:47:a9:34:71:96:a0:a3: b1:59:cf:46:37:be:8d:42:db:2a:0d:99:9d:f1:9f: 05:cc:45:14:55:06:8f:01:25:18:fe:c3:ed:68:61: 45:2b:e8:59:01:08:bd:1d:c3:a0:39:63:48:69:88: 84:91:cf:cc:de:18:77:ab:71:23:e7:03:13:55:15: c4:5d:16:2c:19:bc:17:eb:80:17:a1:50:7f:95:2f: 26:23:a1:50:0a:c5:ec:01:77:11:73:43:29:d9:c0: 91:52:ef:cf:9a:72:74:a0:65:9c:62:fa:28:cd:ff: ca:88:30:aa:76:cb:03:fb:43:f0:cf:10:6b:44:50: 40:8e:59:bf:df:17:35:59:9a:3b:74:5c:86:3b:b3: 5c:66:34:97:9a:25:d8:8f:43:d7:78:be:e5:1f:2e: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:16:0A:88:6B:0B:BF:96:90:59:19:13:81:08:E4:5B:4E:85:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/610fbe64-b752-3803-bca4-40bf16a45194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:15:e2:21:47:ce:d7:72:52:50:b3:c3:06:4b:a8:6f:d6:ae: 21:7a:a8:12:b1:03:6e:10:fd:06:aa:cf:c9:52:e7:1e:b5:42: 69:ef:bd:df:79:72:1a:81:b7:85:cd:0b:35:64:9e:dd:ef:15: e7:b9:f7:c7:b1:0d:d9:aa:aa:50:47:05:47:53:c5:b1:91:5b: fc:8a:90:96:fb:bd:de:d1:2f:13:c9:e2:5a:1a:57:a1:c4:7e: b7:c9:87:fb:4d:40:af:80:aa:d1:64:15:5a:7d:d4:84:28:43: 2e:19:40:c5:0c:52:33:2a:76:6b:6a:19:16:0f:25:35:cc:95: 5b:90:c2:86:40:f4:5d:66:e1:71:16:66:8a:2d:82:5c:40:e0: c6:32:bb:cc:c2:0f:c0:a1:49:02:83:25:c2:b9:5a:28:e0:67: e7:c8:20:d6:d5:68:da:34:bb:00:75:4e:1b:53:e3:90:95:66: 30:6e:16:de:32:03:4c:74:04:80:40:65:05:d9:df:dd:01:0d: 5b:ef:72:14:2a:ce:02:e8:18:cd:c4:fd:4d:c8:8f:78:cf:06: 52:b0:3a:37:32:cc:86:c4:1b:10:6e:04:e2:fc:fe:b4:d0:6f: ea:57:e5:ca:57:02:dd:59:52:4d:f6:c8:63:47:d0:9c:34:e9: 4d:7f:f9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3fedcT8hVqaEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTE5ZDUxOTQtNWM2Mi00ODQ1LWI3YzMtZjFiNmRlYzUxMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b+S2rLYaYPJpMCn/VrYY0fl+wUrSnDUkDAG KGk0QwLZndd1PciB68KSZ+5RXpeiOI+RF+75WBUgv8HdTWArjQLXv+wE9R+IMeHO mdequ7WOfT8zHkrBflK0N7lhBYnMaUepNHGWoKOxWc9GN76NQtsqDZmd8Z8FzEUU VQaPASUY/sPtaGFFK+hZAQi9HcOgOWNIaYiEkc/M3hh3q3Ej5wMTVRXEXRYsGbwX 64AXoVB/lS8mI6FQCsXsAXcRc0Mp2cCRUu/PmnJ0oGWcYvoozf/KiDCqdssD+0Pw zxBrRFBAjlm/3xc1WZo7dFyGO7NcZjSXmiXYj0PXeL7lHy7CvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYtFgqIawu/lpBZGROBCORbToUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjEwZmJlNjQtYjc1Mi0z ODAzLWJjYTQtNDBiZjE2YTQ1MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI73gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUV4iFHztdyUlCzwwZLqG/WriF6qBKxA24Q/Qaqz8lS5x61Qmnvvd95 chqBt4XNCzVknt3vFee598exDdmqqlBHBUdTxbGRW/yKkJb7vd7RLxPJ4loaV6HE frfJh/tNQK+AqtFkFVp91IQoQy4ZQMUMUjMqdmtqGRYPJTXMlVuQwoZA9F1m4XEW ZootglxA4MYyu8zCD8ChSQKDJcK5WijgZ+fIINbVaNo0uwB1ThtT45CVZjBuFt4y A0x0BIBAZQXZ390BDVvvchQqzgLoGM3E/U3Ij3jPBlKwOjcyzIbEGxBuBOL8/rTQ b+pX5cpXAt1ZUk32yGNH0Jw06U1/+VA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:43 2025 by rpki-client