$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90371e1f-e62e-385a-bb21-5e1c3dd058c5.roa File: 90371e1f-e62e-385a-bb21-5e1c3dd058c5.roa (raw, json) Hash identifier: KdmIx+1vUr1alRBKMj4DNT6UgERSfIg37Cth7T32Y84= Subject key identifier: 3A:E2:C9:A9:44:83:D6:9C:82:84:26:34:33:6C:FA:F1:D4:A5:3F:7A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1E1FF56C5596BF2DB3D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90371e1f-e62e-385a-bb21-5e1c3dd058c5.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 35.190.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:e1:ff:56:c5:59:6b:f2:db:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=de52e04c-947b-4c02-a1d5-c3a3f3170481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:f3:d2:7c:d6:2e:c3:6f:54:0b:1e:07:2e: a9:67:21:09:51:ce:74:88:62:cf:48:64:1a:13:a6: 75:20:d9:93:78:e7:38:79:70:f2:43:eb:2c:10:ee: 25:01:23:73:99:af:e6:9a:8a:97:35:fb:de:f5:c3: 8d:31:04:ba:44:92:85:67:b6:7e:be:34:f5:b4:63: ed:b4:c2:8f:74:2c:ad:33:1c:5d:47:74:89:d0:f4: 7a:13:83:3b:63:c4:76:6e:77:f8:df:64:36:f4:52: 07:b6:94:c5:11:5d:39:60:bc:f7:7b:be:c0:7f:95: 45:25:d6:aa:27:be:e7:74:7e:0f:2a:8f:9b:d2:9d: aa:37:be:42:27:70:cf:8f:91:1d:6a:df:4c:f0:44: 1c:fd:f0:dd:e0:b7:df:ea:0e:32:28:e8:ae:0d:c0: 65:08:3c:cb:01:b6:87:a3:f1:a0:3b:0b:4d:b6:c3: 33:27:f9:cd:7b:9d:0d:40:4a:09:90:a2:b2:64:28: 17:f2:18:bd:e1:49:eb:c1:99:b8:9e:c1:4e:83:f0: 06:c7:f9:db:25:9e:2a:30:9e:a6:80:31:97:e0:56: c0:40:01:75:8a:c4:5d:c8:91:3c:60:54:a7:3e:34: cc:82:26:36:bc:70:4b:7c:91:76:83:62:0a:0f:62: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E2:C9:A9:44:83:D6:9C:82:84:26:34:33:6C:FA:F1:D4:A5:3F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90371e1f-e62e-385a-bb21-5e1c3dd058c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f7:c3:a7:57:25:45:e2:c5:6f:ed:f8:a9:d3:02:8c:3a:8d: e9:e9:89:6f:36:5c:ca:ea:61:f3:6a:c5:d8:1a:45:f8:8f:b7: 79:ce:c1:cc:0f:de:bf:d9:dc:35:07:9d:28:4a:7a:c5:92:89: 41:9d:1a:e9:92:bf:0d:0f:54:48:01:76:81:fb:e3:3b:fe:bf: 28:9e:a3:49:bd:c2:7b:85:61:27:41:9d:1b:f0:a8:5a:1e:e0: e0:f3:ec:77:10:e3:f6:85:be:c8:81:76:8f:5e:32:0a:89:8c: 6b:42:7e:7b:1e:8d:70:41:d5:0f:c5:07:df:55:d1:f8:67:9d: 9a:9f:f7:be:c4:73:03:eb:c8:a7:1f:2e:3d:0a:1c:ea:92:10: ce:c7:4b:8b:c6:ab:5b:22:18:fc:72:3a:47:15:23:f2:b3:e3: 1c:f7:38:ff:ca:7b:0a:bc:66:ff:ae:8e:d4:1c:16:26:56:e0: 94:3d:ec:77:c0:a0:d8:b1:12:92:fb:0e:79:06:a5:1e:0f:83: 41:56:10:19:6b:92:6d:a5:da:13:66:22:ce:d5:67:50:27:05: cc:3b:81:03:be:f9:b9:71:b8:65:29:0c:a0:0c:9a:84:2f:93: 57:bd:31:32:87:98:91:fe:59:d8:24:e2:ce:ac:d2:8e:5f:48: 29:6d:f2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtyweH/VsVZa/LbPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZGU1MmUwNGMtOTQ3Yi00YzAyLWExZDUtYzNhM2YzMTcwNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO3z0nzWLsNvVAseBy6pZyEJUc50iGLPSGQa E6Z1INmTeOc4eXDyQ+ssEO4lASNzma/mmoqXNfve9cONMQS6RJKFZ7Z+vjT1tGPt tMKPdCytMxxdR3SJ0PR6E4M7Y8R2bnf432Q29FIHtpTFEV05YLz3e77Af5VFJdaq J77ndH4PKo+b0p2qN75CJ3DPj5Edat9M8EQc/fDd4Lff6g4yKOiuDcBlCDzLAbaH o/GgOwtNtsMzJ/nNe50NQEoJkKKyZCgX8hi94UnrwZm4nsFOg/AGx/nbJZ4qMJ6m gDGX4FbAQAF1isRdyJE8YFSnPjTMgiY2vHBLfJF2g2IKD2IuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDriyalEg9acgoQmNDNs+vHUpT96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTAzNzFlMWYtZTYyZS0z ODVhLWJiMjEtNWUxYzNkZDA1OGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI76gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED3w6dXJUXixW/t+KnTAow6jenpiW82XMrqYfNqxdgaRfiPt3nOwcwP 3r/Z3DUHnShKesWSiUGdGumSvw0PVEgBdoH74zv+vyieo0m9wnuFYSdBnRvwqFoe 4ODz7HcQ4/aFvsiBdo9eMgqJjGtCfnsejXBB1Q/FB99V0fhnnZqf977EcwPryKcf Lj0KHOqSEM7HS4vGq1siGPxyOkcVI/Kz4xz3OP/Kewq8Zv+ujtQcFiZW4JQ97HfA oNixEpL7DnkGpR4Pg0FWEBlrkm2l2hNmIs7VZ1AnBcw7gQO++blxuGUpDKAMmoQv k1e9MTKHmJH+Wdgk4s6s0o5fSClt8pk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:03 2025 by rpki-client