$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa File: 63a799f7-620c-3e6d-a174-e979e3a9bd06.roa (raw, json) Hash identifier: prDUd/p4yYlHScKYwaefILadbBgmouMpsEN/BQK6qwE= Subject key identifier: 98:A0:32:41:D0:B7:DC:FB:64:18:6F:F8:1C:92:53:01:85:A6:30:59 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B679774D02E64423F72096380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:74:d0:2e:64:42:3f:72:09:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2009e1f0-4563-467c-8a40-b7d72f8b37e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:c4:7d:06:93:16:d4:35:d0:d2:34:06:03: 7b:64:0f:23:dc:e4:8d:46:e1:21:f3:ed:87:f8:05: 5f:7c:41:bd:93:02:95:d1:20:c6:f6:f1:fb:86:d5: 87:37:17:50:34:1a:19:8b:ab:0d:d2:5c:19:96:ff: d1:66:73:28:db:9c:90:2b:72:63:25:5a:99:22:61: 20:93:21:53:ba:ee:9b:d8:23:b3:25:f1:10:8f:2f: 56:fc:40:2a:69:23:47:94:48:26:32:e1:d4:6a:54: 70:37:03:66:c9:43:02:d7:41:8b:1f:18:a5:8c:72: b6:b7:96:17:ed:75:4a:18:4c:a8:45:bd:b6:69:a0: 44:9a:26:1a:b3:d4:cf:0f:7e:8c:83:f6:75:bb:ab: 18:e2:54:59:be:7f:16:d8:11:bd:e0:58:58:4d:7d: 2b:30:ad:3b:6b:83:59:82:bc:9a:7d:20:43:b1:22: b2:d9:4e:57:39:82:7b:98:29:b2:95:1a:ac:c1:44: c6:5f:4f:56:96:6d:d1:65:6f:b5:9c:c5:b4:40:99: 8b:15:38:f0:9c:db:c4:12:f2:02:f9:f9:87:df:e3: 27:c0:c4:88:85:d5:2a:1a:a6:d1:ac:8d:5e:8c:93: 14:57:b7:bc:50:06:14:b0:c5:d0:f5:1c:d9:b5:78: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A0:32:41:D0:B7:DC:FB:64:18:6F:F8:1C:92:53:01:85:A6:30:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f4:23:c1:b8:35:e2:b3:a3:04:38:97:7e:ec:f0:2c:23:55: ef:03:df:14:9f:9c:a7:48:cf:b6:64:53:f6:46:7a:33:19:b1: d4:7d:f7:9f:2e:30:ba:3b:b1:dc:91:94:70:dc:9d:00:9c:41: d2:a5:37:da:b2:fb:c3:95:ee:e1:af:66:3b:ac:68:04:53:26: b1:d7:31:43:f0:0d:38:24:7a:67:f0:3c:8d:c4:7b:5a:0e:91: 86:44:e1:20:43:33:e6:57:fb:ee:1e:d7:88:19:19:76:6c:c9: 13:8d:72:34:81:84:b6:50:b3:18:d5:28:e1:a0:8e:f5:ef:4d: b0:69:cb:0b:23:04:6a:1e:23:c6:e4:e3:9a:94:8c:85:5b:01: 72:d6:e5:7f:9f:07:ed:07:01:76:4a:8c:3b:b2:e7:1e:69:a5: e7:92:7b:ea:c5:81:d8:ff:75:dd:66:3c:15:bc:14:0b:c2:e5: 99:51:9d:99:b3:64:68:fb:4a:91:be:88:c5:63:19:f8:95:69: 9d:79:7d:8c:5a:25:95:7c:68:3c:64:38:0a:60:29:e4:66:c0: 94:37:41:b2:4d:d9:ed:e5:84:5a:1b:74:e8:da:34:66:a3:2e: 80:c0:01:33:2b:a8:5d:f5:d1:c2:ae:eb:1c:d5:ed:8a:b9:09: c9:bb:28:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3TQLmRCP3IJY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjAwOWUxZjAtNDU2My00NjdjLThhNDAtYjdkNzJmOGIzN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhATEfQaTFtQ10NI0BgN7ZA8j3OSNRuEh8+2H +AVffEG9kwKV0SDG9vH7htWHNxdQNBoZi6sN0lwZlv/RZnMo25yQK3JjJVqZImEg kyFTuu6b2COzJfEQjy9W/EAqaSNHlEgmMuHUalRwNwNmyUMC10GLHxiljHK2t5YX 7XVKGEyoRb22aaBEmiYas9TPD36Mg/Z1u6sY4lRZvn8W2BG94FhYTX0rMK07a4NZ gryafSBDsSKy2U5XOYJ7mCmylRqswUTGX09Wlm3RZW+1nMW0QJmLFTjwnNvEEvIC +fmH3+MnwMSIhdUqGqbRrI1ejJMUV7e8UAYUsMXQ9RzZtXgunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJigMkHQt9z7ZBhv+BySUwGFpjBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjNhNzk5ZjctNjIwYy0z ZTZkLWExNzQtZTk3OWUzYTliZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT0I8G4NeKzowQ4l37s8CwjVe8D3xSfnKdIz7ZkU/ZGejMZsdR9958u MLo7sdyRlHDcnQCcQdKlN9qy+8OV7uGvZjusaARTJrHXMUPwDTgkemfwPI3Ee1oO kYZE4SBDM+ZX++4e14gZGXZsyRONcjSBhLZQsxjVKOGgjvXvTbBpywsjBGoeI8bk 45qUjIVbAXLW5X+fB+0HAXZKjDuy5x5ppeeSe+rFgdj/dd1mPBW8FAvC5ZlRnZmz ZGj7SpG+iMVjGfiVaZ15fYxaJZV8aDxkOApgKeRmwJQ3QbJN2e3lhFobdOjaNGaj LoDAATMrqF310cKu6xzV7Yq5Ccm7KM8= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:34 2025 by rpki-client