$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa File: bd538f77-993a-3a7b-b68e-2bd33845696f.roa (raw, json) Hash identifier: KQWaZlDR7s+400n3VqXDPIggOofZ4TXJfoBFfAzg1AE= Subject key identifier: 58:C2:12:6E:4A:C8:0F:37:50:3E:7A:A2:B1:2E:A2:C3:DD:C4:F0:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67978A066A45F6EF432583C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.240.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8a:06:6a:45:f6:ef:43:25:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=dce9e8a0-801f-4045-b4fd-a99dd539455b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:5a:99:37:08:36:ac:6d:85:e5:99:ae:b6: 0e:6a:47:8e:5a:25:ac:07:fb:fd:96:4c:b2:7a:5e: c9:cb:c4:ca:87:6a:03:8f:27:ff:c8:71:b1:64:48: 58:8b:31:67:11:ec:c4:15:d8:99:20:98:3b:d3:38: e3:5b:74:49:6f:5f:cf:39:4e:0e:92:34:2b:8e:ef: a3:97:8f:bd:d2:44:3a:ef:eb:e5:c7:91:ae:29:35: aa:0c:d3:23:a9:44:e8:17:31:1a:b9:03:af:8e:df: ce:c5:a3:75:01:d5:0d:5b:36:a9:b2:f8:49:3b:3f: 5a:a8:fb:7d:35:1c:b5:41:a0:42:25:fe:13:87:5c: b7:11:36:51:ef:0a:43:48:86:c0:50:dd:f6:49:e6: c6:9c:c0:71:89:bc:c1:62:f9:e1:19:75:39:43:48: 10:ea:d4:56:cf:3b:34:6c:2e:1d:af:7d:e2:d6:7c: f3:72:0e:92:30:2d:0a:bd:4e:fd:c8:b6:56:45:1f: 43:aa:f8:c6:03:8d:ea:3f:e6:c4:dc:52:0b:19:59: e4:2d:63:6b:96:7f:a8:c3:68:59:13:55:d3:01:20: 4c:a2:19:a2:33:1c:35:c5:78:7e:53:b2:8d:53:6e: 72:f3:e8:9d:fe:9b:f9:f3:b0:ec:23:9b:df:3d:6e: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:12:6E:4A:C8:0F:37:50:3E:7A:A2:B1:2E:A2:C3:DD:C4:F0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0a:0c:a1:a2:f3:33:50:88:be:5d:53:34:72:e0:8c:df:ec: b8:de:92:9d:e7:0b:bb:63:73:8d:6a:27:70:32:57:cb:68:71: 63:f9:e0:d5:09:21:4f:f0:a3:b8:8d:5f:e7:6c:c7:bf:7c:0f: 73:23:ad:cf:83:0d:ac:6a:08:35:02:0f:11:b7:d0:38:81:80: 0d:15:da:2f:4d:25:79:1d:ce:75:ab:12:b3:cb:4f:11:17:30: ba:ca:46:04:84:aa:69:36:86:6b:d9:22:d6:7c:1b:91:18:b0: 7f:96:7b:34:51:f8:0a:2e:20:d8:68:09:df:d0:fc:3c:19:de: 27:56:56:26:db:c7:51:a3:0f:51:b2:04:f6:40:c5:87:7c:63: ed:0d:0a:86:ef:15:fb:c4:39:8f:6c:b8:a1:ef:36:7c:80:6e: 4a:8c:6e:a4:64:49:cf:e0:a5:4b:e9:82:59:1b:82:66:6d:98: 49:bb:95:c9:a8:b9:9a:30:25:ef:15:91:d7:b1:5e:f9:7f:88: e6:a9:ec:70:56:c7:19:18:ac:ab:57:74:28:22:01:f0:22:18: 65:91:d7:7d:02:d9:e0:b4:19:47:98:6e:e8:ed:1d:84:5b:ee: 4b:09:2d:54:83:6f:d9:8b:c6:3e:87:92:85:5f:db:25:b0:bf: 80:6c:82:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4oGakX270Mlg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGNlOWU4YTAtODAxZi00MDQ1LWI0ZmQtYTk5ZGQ1Mzk0NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBtamTcINqxtheWZrrYOakeOWiWsB/v9lkyy el7Jy8TKh2oDjyf/yHGxZEhYizFnEezEFdiZIJg70zjjW3RJb1/POU4OkjQrju+j l4+90kQ67+vlx5GuKTWqDNMjqUToFzEauQOvjt/OxaN1AdUNWzapsvhJOz9aqPt9 NRy1QaBCJf4Th1y3ETZR7wpDSIbAUN32SebGnMBxibzBYvnhGXU5Q0gQ6tRWzzs0 bC4dr33i1nzzcg6SMC0KvU79yLZWRR9DqvjGA43qP+bE3FILGVnkLWNrln+ow2hZ E1XTASBMohmiMxw1xXh+U7KNU25y8+id/pv587DsI5vfPW4MmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjCEm5KyA83UD56orEuosPdxPBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQ1MzhmNzctOTkzYS0z YTdiLWI2OGUtMmJkMzM4NDU2OTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgKDKGi8zNQiL5dUzRy4Izf7Ljekp3nC7tjc41qJ3AyV8tocWP54NUJ IU/wo7iNX+dsx798D3Mjrc+DDaxqCDUCDxG30DiBgA0V2i9NJXkdznWrErPLTxEX MLrKRgSEqmk2hmvZItZ8G5EYsH+WezRR+AouINhoCd/Q/DwZ3idWVibbx1GjD1Gy BPZAxYd8Y+0NCobvFfvEOY9suKHvNnyAbkqMbqRkSc/gpUvpglkbgmZtmEm7lcmo uZowJe8VkdexXvl/iOap7HBWxxkYrKtXdCgiAfAiGGWR130C2eC0GUeYbujtHYRb 7ksJLVSDb9mLxj6HkoVf2yWwv4Bsgq4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:07 2025 by rpki-client