$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa File: 9aaa8c8f-6494-3aba-bad8-75ea73377902.roa (raw, json) Hash identifier: C0jU540U62K03yUpVJy1IcnIcB3HCDVaJCYkUvbngRM= Subject key identifier: 55:7D:DD:60:40:7F:AD:74:1C:1D:5D:0C:89:B1:EB:48:62:FF:95:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C8FA8B03BACDDA068900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.195.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c8:fa:8b:03:ba:cd:da:06:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5889946c-143c-4ae8-a579-fc72ca352c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:b0:e4:57:68:61:29:29:37:8a:1a:f0:07: 2b:49:a3:46:c9:54:01:ec:70:f4:99:19:cf:a3:b8: 88:21:d4:a7:20:10:fa:0e:ff:dc:68:c0:8d:23:e8: a7:62:71:dd:43:09:b9:be:5d:92:ab:ff:be:54:9c: 89:93:34:62:a5:1f:9a:91:dc:04:79:82:d3:dc:67: fe:cb:43:f3:4f:8c:21:3a:25:9e:73:77:3a:18:bf: ae:f2:6c:46:28:29:fe:b5:f1:f6:ef:4b:35:90:5c: 16:4b:72:a7:b8:e3:3e:79:c7:b3:89:7c:b8:48:35: e0:14:06:6a:0a:07:9f:92:aa:e5:c1:3f:f1:1b:ce: d0:b5:66:ad:c4:b7:97:34:8e:d5:55:f9:4f:f3:e3: 85:bc:00:f8:09:d0:95:47:0b:87:ff:82:b4:e1:ca: 2b:b6:1d:1e:cf:02:f0:e7:af:bd:01:06:57:fa:bf: ff:ee:a4:5b:8e:30:05:4c:c9:aa:41:d6:02:51:fb: f9:48:be:db:59:6b:4b:dc:cc:c3:cf:7d:ad:08:cf: 02:34:e8:0d:0c:ba:b2:e7:f1:fd:1f:37:fb:7c:0f: 1f:ec:e2:30:8d:e3:16:b2:cf:67:22:0c:d6:53:8a: e1:56:f9:27:d2:bf:8e:ff:01:6d:27:0a:82:c0:1c: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7D:DD:60:40:7F:AD:74:1C:1D:5D:0C:89:B1:EB:48:62:FF:95:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:99:55:d1:90:9f:c8:d3:54:63:90:82:c9:8a:d2:2b:a5:c0: c7:00:54:d6:55:48:f2:5c:8f:10:00:71:4f:73:ba:22:0e:0c: d3:cc:ae:57:9c:fa:6e:ed:8b:5d:73:24:f5:ef:d9:18:1a:d7: 14:7c:ad:75:3a:07:bc:a1:59:f0:8a:7a:d6:47:51:9c:da:4c: 06:6b:59:c1:32:d0:3f:26:ea:69:ef:ff:d8:68:7d:53:63:42: 36:bf:1b:f9:17:63:49:c9:3a:b0:e9:16:28:8d:7b:e1:4d:6f: 8f:ec:dc:11:60:c9:02:24:44:3b:7a:00:7b:6e:55:50:fe:e7: 38:bb:5a:b0:1b:94:2a:ed:94:66:ce:ff:51:4f:5c:6f:38:5f: 46:f6:93:af:77:9c:62:b3:db:3e:71:94:ff:31:df:c8:82:e5: bc:ff:33:7b:fb:4e:8e:ee:9f:da:2e:e9:56:8e:c1:3d:5d:ff: a0:87:a8:81:a7:d8:4d:20:30:57:90:09:3d:b1:f6:01:50:b7: 57:b1:c6:68:a6:4f:ab:8e:e4:22:e9:1b:38:02:bb:59:1a:e5: 58:4f:d7:9e:cb:70:c9:cd:3f:a9:b2:db:76:56:ef:4e:e7:d0: cd:a5:4f:0c:c6:62:d9:0f:db:07:88:43:14:2d:0e:d0:f4:78: 87:49:98:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8j6iwO6zdoGiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTg4OTk0NmMtMTQzYy00YWU4LWE1NzktZmM3MmNhMzUyYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwqw5FdoYSkpN4oa8AcrSaNGyVQB7HD0mRnP o7iIIdSnIBD6Dv/caMCNI+inYnHdQwm5vl2Sq/++VJyJkzRipR+akdwEeYLT3Gf+ y0PzT4whOiWec3c6GL+u8mxGKCn+tfH270s1kFwWS3KnuOM+eceziXy4SDXgFAZq CgefkqrlwT/xG87QtWatxLeXNI7VVflP8+OFvAD4CdCVRwuH/4K04corth0ezwLw 56+9AQZX+r//7qRbjjAFTMmqQdYCUfv5SL7bWWtL3MzDz32tCM8CNOgNDLqy5/H9 Hzf7fA8f7OIwjeMWss9nIgzWU4rhVvkn0r+O/wFtJwqCwBxPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV93WBAf610HB1dDImx60hi/5WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWFhYThjOGYtNjQ5NC0z YWJhLWJhZDgtNzVlYTczMzc3OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8MQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWZVdGQn8jTVGOQgsmK0iulwMcAVNZVSPJcjxAAcU9zuiIODNPMrlec +m7ti11zJPXv2Rga1xR8rXU6B7yhWfCKetZHUZzaTAZrWcEy0D8m6mnv/9hofVNj Qja/G/kXY0nJOrDpFiiNe+FNb4/s3BFgyQIkRDt6AHtuVVD+5zi7WrAblCrtlGbO /1FPXG84X0b2k693nGKz2z5xlP8x38iC5bz/M3v7To7un9ou6VaOwT1d/6CHqIGn 2E0gMFeQCT2x9gFQt1exxmimT6uO5CLpGzgCu1ka5VhP157LcMnNP6my23ZW707n 0M2lTwzGYtkP2weIQxQtDtD0eIdJmNw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:11 2025 by rpki-client