$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ae6229e-8f90-336f-a287-40670d8aed78.roa File: 9ae6229e-8f90-336f-a287-40670d8aed78.roa (raw, json) Hash identifier: b85lf+B6RtE/Q0+NccUxcmjvlxZOdvuz/8lNm+mlKEA= Subject key identifier: 60:9D:13:52:60:C5:18:69:BF:8D:9C:97:BD:6C:96:20:85:CA:DB:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A1318C4B5072FFBC5880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ae6229e-8f90-336f-a287-40670d8aed78.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 19527 IP address blocks: 35.214.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a1:31:8c:4b:50:72:ff:bc:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2ee3302f-f7ad-400d-84fd-f6461aa53c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:ed:ae:83:6b:72:12:67:76:03:80:e5:f0: f0:80:7f:21:22:6e:17:e3:f1:0c:12:37:be:67:11: 44:5e:30:9c:31:1c:a8:2f:93:3a:63:aa:ef:fd:64: a4:b7:ad:96:a4:0d:ae:b4:98:7d:cf:2c:06:65:89: 73:c4:cb:ff:ed:6e:62:24:2c:c9:d0:90:62:2c:3d: fc:a1:7b:6f:16:1f:80:eb:0c:57:3e:cb:24:81:df: fa:58:f5:58:97:b1:17:47:de:72:07:8b:d6:80:a8: d3:c2:29:49:2e:70:b4:1e:b4:8a:42:84:84:21:92: 46:0e:fd:14:e3:36:b1:25:1b:f8:25:3c:fd:a7:30: 2f:43:6d:c1:d1:71:c1:ea:75:90:a0:91:ce:8c:12: 3a:ff:83:d4:1a:8e:1d:3c:27:1c:96:b7:ca:57:89: e4:06:52:aa:a0:62:30:b5:8d:ed:18:a4:39:ba:a2: 45:d4:cd:d4:3d:de:f2:ee:a3:84:d0:ac:ec:5d:43: f3:34:a7:c1:3c:9f:a6:3d:2d:d8:db:b5:9f:03:96: 03:f6:90:37:60:5f:53:da:6e:e3:79:35:1e:9b:95: c9:9c:f2:96:aa:51:4c:77:7e:80:56:c9:ef:ca:fc: d1:e8:1a:89:82:d8:f7:a7:8e:2a:45:34:e9:f4:c8: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9D:13:52:60:C5:18:69:BF:8D:9C:97:BD:6C:96:20:85:CA:DB:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ae6229e-8f90-336f-a287-40670d8aed78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.214.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6d:13:c7:45:16:10:61:e5:47:09:57:e6:59:67:c7:af:fa: f0:0b:54:7e:96:f2:b0:77:92:9c:92:42:05:e6:cd:1c:5e:67: 48:a1:9e:d8:3f:d5:ce:31:17:ff:08:38:51:3e:df:09:3a:bf: d9:33:bd:66:44:33:93:0a:95:58:b8:fd:7d:22:36:87:07:6c: 2b:29:1c:12:83:ac:6b:ba:ae:b6:25:38:1e:d2:cb:2b:3d:0b: 28:3b:b3:27:0b:d5:ef:f1:0e:5b:3d:79:6f:86:5c:0f:80:c2: b4:36:a2:60:c2:ce:58:9b:4f:45:52:be:17:a3:51:4b:cb:d8: f1:58:a9:7f:6f:f8:4d:38:25:17:81:c8:6c:65:5e:e9:ba:88: f7:c4:5c:67:a0:72:8b:1b:e1:8b:8f:e1:73:cb:1a:0d:b3:19: 41:49:57:38:d2:23:6e:77:3a:d4:c5:d4:92:14:69:da:75:a4: 13:08:8f:d3:78:53:c8:2f:df:62:42:b7:aa:8b:f7:03:27:89: 4b:05:6d:0e:6c:79:ba:7c:b0:01:ec:fc:ea:ae:0a:04:83:b4: 59:e4:8f:57:f2:e8:f2:73:ee:83:2f:01:28:6b:fc:25:91:78: 3b:bb:39:53:e8:85:f0:43:4c:a3:d8:a1:4a:7b:56:da:5c:7d: 2f:24:27:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6ExjEtQcv+8WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmVlMzMwMmYtZjdhZC00MDBkLTg0ZmQtZjY0NjFhYTUzYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv/troNrchJndgOA5fDwgH8hIm4X4/EMEje+ ZxFEXjCcMRyoL5M6Y6rv/WSkt62WpA2utJh9zywGZYlzxMv/7W5iJCzJ0JBiLD38 oXtvFh+A6wxXPsskgd/6WPVYl7EXR95yB4vWgKjTwilJLnC0HrSKQoSEIZJGDv0U 4zaxJRv4JTz9pzAvQ23B0XHB6nWQoJHOjBI6/4PUGo4dPCcclrfKV4nkBlKqoGIw tY3tGKQ5uqJF1M3UPd7y7qOE0KzsXUPzNKfBPJ+mPS3Y27WfA5YD9pA3YF9T2m7j eTUem5XJnPKWqlFMd36AVsnvyvzR6BqJgtj3p44qRTTp9Mgl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCdE1JgxRhpv42cl71sliCFytvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWFlNjIyOWUtOGY5MC0z MzZmLWEyODctNDA2NzBkOGFlZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1tE8dFFhBh5UcJV+ZZZ8ev+vALVH6W8rB3kpySQgXmzRxeZ0ihntg/ 1c4xF/8IOFE+3wk6v9kzvWZEM5MKlVi4/X0iNocHbCspHBKDrGu6rrYlOB7Syys9 Cyg7sycL1e/xDls9eW+GXA+AwrQ2omDCzlibT0VSvhejUUvL2PFYqX9v+E04JReB yGxlXum6iPfEXGegcosb4YuP4XPLGg2zGUFJVzjSI253OtTF1JIUadp1pBMIj9N4 U8gv32JCt6qL9wMniUsFbQ5sebp8sAHs/OquCgSDtFnkj1fy6PJz7oMvAShr/CWR eDu7OVPohfBDTKPYoUp7VtpcfS8kJ6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:53 2025 by rpki-client