$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e7f1a9b-456a-33de-9f84-02a708243ab6.roa File: 9e7f1a9b-456a-33de-9f84-02a708243ab6.roa (raw, json) Hash identifier: udlKIWcvd5TXHWUgLpH4Rt8UIV8vVQ29U9hNYIB4+Yg= Subject key identifier: D6:07:21:5F:25:10:31:24:DA:83:15:5E:B4:95:75:62:F7:35:DE:0E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797C67AE269761A8FC3D780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e7f1a9b-456a-33de-9f84-02a708243ab6.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.188.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c6:7a:e2:69:76:1a:8f:c3:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=54d6f72f-2173-42a8-a097-c4c13f9f4fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:d8:b4:f8:e6:11:e0:cf:66:c4:74:85:b5: 04:cd:cb:9d:9a:2f:13:b8:58:07:cb:86:51:f6:84: 20:a8:0d:f8:e2:b6:e9:f9:be:45:9d:b6:cc:4f:cc: 09:e8:76:89:33:88:5b:5e:dc:43:b7:ac:1b:e0:36: 5f:8c:ae:f5:b3:a6:75:69:28:22:e4:f2:92:87:85: 92:9e:3b:fd:f1:8b:0b:13:fc:2e:39:86:f1:a6:b1: 9a:56:48:08:69:05:77:25:37:33:8a:22:99:de:ad: b0:23:47:d5:6f:2c:de:c8:16:ec:66:86:ee:54:5c: 6b:d8:20:dc:f5:4c:75:ca:f2:da:dd:f6:33:12:68: e3:8e:ba:ac:ab:2b:86:5b:5b:bc:11:76:e3:41:97: 3c:8d:6c:07:95:b1:ed:d3:78:c9:0d:77:46:0d:4b: 32:19:92:98:af:29:eb:68:d8:e7:22:07:1b:1d:b8: 0f:7b:4a:c7:da:27:85:1d:26:9d:ca:72:6d:e6:63: 42:54:02:fd:a0:b8:d9:3d:49:99:39:97:44:4e:5d: ab:61:b5:ec:7e:6b:00:78:81:68:28:fd:8d:ea:68: c6:3f:79:e1:17:17:cc:54:3a:98:cd:51:e2:e4:0d: 4a:97:fd:1f:60:f9:3b:5a:a9:1b:7b:1f:2d:92:27: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:07:21:5F:25:10:31:24:DA:83:15:5E:B4:95:75:62:F7:35:DE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e7f1a9b-456a-33de-9f84-02a708243ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:44:f8:9e:94:24:64:2f:64:65:1f:36:86:2e:fe:f9:6b:89: 81:46:32:42:6a:11:65:cb:9a:10:35:be:b9:85:e8:46:44:42: 30:17:53:e7:1a:bb:33:27:b2:d3:34:45:81:69:0f:21:5e:1a: 11:bd:c0:17:5c:92:df:6d:23:e5:4f:7c:6b:b0:ec:b8:18:a6: a0:d3:2b:ec:50:81:ce:6f:ec:8e:99:a9:d0:5e:6a:dd:06:f7: b5:31:4d:34:bb:38:3d:17:4f:93:01:53:a2:c5:bf:21:10:7c: c8:30:2b:b5:8d:f4:91:80:aa:7f:a8:e3:bd:e2:e3:99:c8:cb: c2:63:7a:88:5b:7f:58:52:83:3a:b8:76:e8:f7:4e:a1:0e:43: ab:9d:fb:59:8a:aa:fd:f1:52:f8:b4:7a:17:1c:b1:f3:05:ee: 57:b3:3e:08:37:8e:51:77:e9:e7:4c:75:25:ca:bc:cc:eb:eb: fc:8b:89:31:19:a3:8e:8e:bf:04:0c:ca:3b:48:a3:db:eb:ba: e7:6f:e1:3b:30:af:e1:7d:74:9a:f4:f2:b3:f3:09:39:e0:9a: bb:af:43:24:22:95:97:59:49:1d:32:dd:b3:54:1c:d5:43:4b: cf:2a:f8:3e:bc:3b:d4:66:6b:5c:a1:f7:3a:cc:66:3b:3e:1e: 20:96:0e:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8Z64ml2Go/D14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTRkNmY3MmYtMjE3My00MmE4LWEwOTctYzRjMTNmOWY0ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6XYtPjmEeDPZsR0hbUEzcudmi8TuFgHy4ZR 9oQgqA344rbp+b5FnbbMT8wJ6HaJM4hbXtxDt6wb4DZfjK71s6Z1aSgi5PKSh4WS njv98YsLE/wuOYbxprGaVkgIaQV3JTcziiKZ3q2wI0fVbyzeyBbsZobuVFxr2CDc 9Ux1yvLa3fYzEmjjjrqsqyuGW1u8EXbjQZc8jWwHlbHt03jJDXdGDUsyGZKYrynr aNjnIgcbHbgPe0rH2ieFHSadynJt5mNCVAL9oLjZPUmZOZdETl2rYbXsfmsAeIFo KP2N6mjGP3nhFxfMVDqYzVHi5A1Kl/0fYPk7Wqkbex8tkicrFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYHIV8lEDEk2oMVXrSVdWL3Nd4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWU3ZjFhOWItNDU2YS0z M2RlLTlmODQtMDJhNzA4MjQzYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExE+J6UJGQvZGUfNoYu/vlriYFGMkJqEWXLmhA1vrmF6EZEQjAXU+ca uzMnstM0RYFpDyFeGhG9wBdckt9tI+VPfGuw7LgYpqDTK+xQgc5v7I6ZqdBeat0G 97UxTTS7OD0XT5MBU6LFvyEQfMgwK7WN9JGAqn+o473i45nIy8Jjeohbf1hSgzq4 duj3TqEOQ6ud+1mKqv3xUvi0ehccsfMF7lezPgg3jlF36edMdSXKvMzr6/yLiTEZ o46OvwQMyjtIo9vruudv4Tswr+F9dJr08rPzCTngmruvQyQilZdZSR0y3bNUHNVD S88q+D68O9Rma1yh9zrMZjs+HiCWDos= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:33 2025 by rpki-client