$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/61c5f32e-5a42-3002-b9a8-725d04201aac.roa File: 61c5f32e-5a42-3002-b9a8-725d04201aac.roa (raw, json) Hash identifier: uM5Q+q2Da6CwAuoco32NXOWITkms3BFTkvmtWbGGPMA= Subject key identifier: 2E:30:D3:9B:69:68:EF:DE:99:4D:D5:8E:CE:00:5E:67:A3:81:5C:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797AC05D8FCDC5FE5E82940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/61c5f32e-5a42-3002-b9a8-725d04201aac.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.190.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ac:05:d8:fc:dc:5f:e5:e8:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5afb7147-4e2d-47d0-b0f1-a550fd0b933d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:fc:6c:0b:0e:6f:48:19:56:ad:ea:09:fd: 9b:c7:34:65:72:2a:37:7d:5d:82:97:da:e0:32:e6: 2c:f5:2b:28:d8:54:b2:03:b7:58:2e:60:a3:f2:40: c1:be:e3:68:23:16:10:f4:a0:20:f1:1d:ed:88:25: 57:5d:fa:25:e5:eb:7f:cf:c2:d1:22:9c:cc:5f:6d: fd:2f:bc:00:e5:61:6c:55:83:31:c5:1b:af:95:65: 40:ef:24:f6:cb:1b:80:39:2d:3f:9c:74:70:0f:2b: 67:3f:84:91:4e:7d:45:a2:24:ee:72:7b:b3:13:8d: 24:f6:a5:13:60:23:1e:7a:72:ed:59:25:e5:e4:d8: 35:ef:60:e7:27:4f:8d:f0:dd:ca:fd:d7:ab:c0:95: 31:67:23:29:7d:d6:da:f7:7d:a1:cf:84:c7:84:71: 96:d8:d3:7a:44:dd:8b:aa:a0:73:46:87:2d:57:09: c7:7b:65:5e:98:7a:ce:f9:54:c0:ae:7b:26:2f:64: c3:a9:f2:88:8b:2e:77:e2:75:85:7d:48:ec:d4:f2: 14:da:f7:f3:95:e1:eb:65:ea:5d:0b:d1:f8:62:9c: 2f:fd:69:2f:0c:ce:52:33:4b:09:3d:73:bf:dc:37: 1d:59:55:8f:ec:9f:84:50:ef:13:7d:b6:12:dd:37: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:D3:9B:69:68:EF:DE:99:4D:D5:8E:CE:00:5E:67:A3:81:5C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/61c5f32e-5a42-3002-b9a8-725d04201aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b9:2c:88:24:92:0b:3a:d1:f6:52:7f:f0:0f:75:c2:f4:38: fe:04:a3:48:14:c6:c3:1a:f1:ca:ff:bf:b9:df:2e:b2:0a:f4: da:a1:87:a9:22:91:c0:2a:ee:cc:21:90:bf:3f:e7:9a:94:39: e3:28:4b:12:04:6c:96:4a:b1:f5:4a:16:dc:c2:7c:78:40:31: 17:b0:1e:b1:d0:53:8c:55:e0:64:c8:6b:d3:15:70:f1:1d:65: da:95:40:30:b0:f9:b4:09:71:fe:c3:34:86:6f:af:58:bd:2e: 1b:97:3c:3c:96:83:8b:4f:17:cc:e9:b2:74:71:b8:4a:11:d1: 11:48:01:50:a0:69:0f:dd:a2:3c:b2:d9:b4:d3:ff:42:39:a4: 22:5c:84:60:6d:48:b9:e2:55:9f:f9:d4:73:12:c3:3b:bd:49: b5:60:04:16:50:f7:81:12:03:fb:b9:ab:57:f3:61:9a:37:bf: 85:5c:48:99:51:ff:f4:ef:5f:96:43:de:fc:e6:ea:ff:30:f2: 0f:c8:8a:c2:9c:a4:78:ba:17:0d:00:56:67:e2:8d:ad:6c:79: ab:9e:5a:c7:bb:b7:3c:02:b9:61:08:1d:2d:9c:60:12:7c:8a: 88:7a:a9:b2:4f:07:bd:0d:3a:57:26:b3:9e:60:9a:52:30:a4: 4e:7e:d3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6wF2PzcX+XoKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWFmYjcxNDctNGUyZC00N2QwLWIwZjEtYTU1MGZkMGI5MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTj8bAsOb0gZVq3qCf2bxzRlcio3fV2Cl9rg MuYs9Sso2FSyA7dYLmCj8kDBvuNoIxYQ9KAg8R3tiCVXXfol5et/z8LRIpzMX239 L7wA5WFsVYMxxRuvlWVA7yT2yxuAOS0/nHRwDytnP4SRTn1FoiTucnuzE40k9qUT YCMeenLtWSXl5Ng172DnJ0+N8N3K/derwJUxZyMpfdba932hz4THhHGW2NN6RN2L qqBzRoctVwnHe2VemHrO+VTArnsmL2TDqfKIiy534nWFfUjs1PIU2vfzleHrZepd C9H4Ypwv/WkvDM5SM0sJPXO/3DcdWVWP7J+EUO8TfbYS3TfAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4w05tpaO/emU3Vjs4AXmejgVxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjFjNWYzMmUtNWE0Mi0z MDAyLWI5YTgtNzI1ZDA0MjAxYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI76gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS5LIgkkgs60fZSf/APdcL0OP4Eo0gUxsMa8cr/v7nfLrIK9Nqhh6ki kcAq7swhkL8/55qUOeMoSxIEbJZKsfVKFtzCfHhAMRewHrHQU4xV4GTIa9MVcPEd ZdqVQDCw+bQJcf7DNIZvr1i9LhuXPDyWg4tPF8zpsnRxuEoR0RFIAVCgaQ/dojyy 2bTT/0I5pCJchGBtSLniVZ/51HMSwzu9SbVgBBZQ94ESA/u5q1fzYZo3v4VcSJlR //TvX5ZD3vzm6v8w8g/IisKcpHi6Fw0AVmfija1seaueWse7tzwCuWEIHS2cYBJ8 ioh6qbJPB70NOlcms55gmlIwpE5+0/M= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:24 2025 by rpki-client