$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a41dc736-0e87-3c47-9450-ef97be0ba342.roa File: a41dc736-0e87-3c47-9450-ef97be0ba342.roa (raw, json) Hash identifier: 4Vg/6YRuWWk88j8whSS0NZQeab0Zc5Dl/6M2wGXvTqo= Subject key identifier: 65:54:F9:93:12:CF:4A:9E:21:FA:73:E6:10:B2:0E:1E:B4:2F:B9:03 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67979F40F3E493A170EDF1DA Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a41dc736-0e87-3c47-9450-ef97be0ba342.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.190.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:9f:40:f3:e4:93:a1:70:ed:f1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c5525f44-2e42-4143-8a8e-5bdab2957db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:3e:62:a0:47:2e:28:f2:68:c7:94:a2:1b: 79:e5:70:06:48:ba:34:23:75:fb:17:d4:97:8a:63: db:c8:a1:33:39:64:87:ab:1e:fa:fb:87:b1:d6:70: fc:b4:48:16:38:f5:a0:13:32:83:63:67:2a:b9:74: 2f:7a:e3:03:ba:d1:c2:5a:c1:4f:8d:08:34:a8:79: f8:3f:fc:27:10:05:8e:82:be:51:74:4d:3e:d2:6d: d4:82:93:0a:a5:af:b1:12:0f:ae:3e:99:d5:88:7c: 69:6b:f6:b1:b8:80:85:8f:f8:8a:b0:5c:a3:37:8d: 6b:1c:d2:4f:90:dc:99:b4:5d:ab:3d:57:c8:6c:52: 37:36:b6:63:17:b7:ce:c7:c0:67:38:97:11:7b:65: 3c:19:0c:f6:4a:c2:5e:af:e7:1f:0b:1c:44:c2:14: 1f:54:a6:a8:19:63:26:99:66:2a:83:d8:9f:47:25: fd:d7:46:5b:c6:ec:f0:f3:d5:24:c9:57:f6:5a:ca: 31:7b:58:63:04:ff:9d:43:66:68:24:f6:96:a2:c6: 56:ed:ce:aa:34:98:06:fc:a6:d7:95:31:09:53:57: b0:fd:ff:3d:5e:ee:0f:b3:d8:af:9c:92:68:0b:f6: 39:0b:d1:8d:f2:18:94:4d:f7:29:2f:61:6f:e1:62: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:54:F9:93:12:CF:4A:9E:21:FA:73:E6:10:B2:0E:1E:B4:2F:B9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a41dc736-0e87-3c47-9450-ef97be0ba342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:81:98:28:ac:5b:a0:3f:42:5f:80:34:2a:e5:1c:a8:d2:5a: 5b:dd:7b:18:d6:e4:3a:d1:ac:2e:d7:64:36:87:a5:57:cb:45: 36:aa:22:9a:df:a1:63:67:d3:a2:7f:c7:55:fa:ff:3d:97:1e: e0:ce:b0:59:8c:e9:5b:87:d8:5c:f8:fb:39:24:28:c4:ff:8b: 71:c9:37:be:79:25:dc:e8:58:7d:f9:62:f1:e1:c4:09:8e:e4: 9b:3a:d6:99:e0:b6:b9:10:8a:af:b1:e6:c6:20:f6:b2:b2:b6: 68:68:bd:69:09:9a:ac:77:18:08:5a:33:ef:06:3f:07:e9:70: 2d:e1:53:7d:58:f0:cb:8a:dd:92:b1:02:c6:d9:23:07:f4:08: 32:bf:43:db:7c:d4:a0:31:b8:2d:28:ab:7a:be:8b:3e:17:2d: 9d:26:6b:c8:d1:4c:1e:9b:64:35:d8:95:42:29:d8:5d:31:54: ef:f1:9b:fe:db:c7:d7:04:92:b7:12:b2:54:db:ab:ad:36:7f: 07:12:c1:55:6f:d9:09:19:44:7b:0b:2c:42:e6:e3:76:81:08: 3a:48:fd:fc:94:22:1c:d5:12:c9:55:5e:fc:bd:e8:46:61:6e: b9:db:70:21:74:01:16:1d:a5:2c:67:96:1a:9b:ae:d7:9e:23: 20:89:4e:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl59A8+SToXDt8dowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YzU1MjVmNDQtMmU0Mi00MTQzLThhOGUtNWJkYWIyOTU3ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuQ+YqBHLijyaMeUoht55XAGSLo0I3X7F9SX imPbyKEzOWSHqx76+4ex1nD8tEgWOPWgEzKDY2cquXQveuMDutHCWsFPjQg0qHn4 P/wnEAWOgr5RdE0+0m3UgpMKpa+xEg+uPpnViHxpa/axuICFj/iKsFyjN41rHNJP kNyZtF2rPVfIbFI3NrZjF7fOx8BnOJcRe2U8GQz2SsJer+cfCxxEwhQfVKaoGWMm mWYqg9ifRyX910Zbxuzw89UkyVf2Wsoxe1hjBP+dQ2ZoJPaWosZW7c6qNJgG/KbX lTEJU1ew/f89Xu4Ps9ivnJJoC/Y5C9GN8hiUTfcpL2Fv4WIcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVU+ZMSz0qeIfpz5hCyDh60L7kDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQxZGM3MzYtMGU4Ny0z YzQ3LTk0NTAtZWY5N2JlMGJhMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI76wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICBmCisW6A/Ql+ANCrlHKjSWlvdexjW5DrRrC7XZDaHpVfLRTaqIprf oWNn06J/x1X6/z2XHuDOsFmM6VuH2Fz4+zkkKMT/i3HJN755JdzoWH35YvHhxAmO 5Js61pngtrkQiq+x5sYg9rKytmhovWkJmqx3GAhaM+8GPwfpcC3hU31Y8MuK3ZKx AsbZIwf0CDK/Q9t81KAxuC0oq3q+iz4XLZ0ma8jRTB6bZDXYlUIp2F0xVO/xm/7b x9cEkrcSslTbq602fwcSwVVv2QkZRHsLLELm43aBCDpI/fyUIhzVEslVXvy96EZh brnbcCF0ARYdpSxnlhqbrteeIyCJTtg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:35:40 2025 by rpki-client