$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa File: c08b4e8b-14c1-3c61-8e49-3534647074e3.roa (raw, json) Hash identifier: VVhGJSlwCd5LF6iJNO0kQUnZZ/ISPXQ5g0JZcijoaoQ= Subject key identifier: D7:0E:35:BE:91:BE:BE:E8:59:9B:72:3E:36:6D:13:4E:AF:F3:EE:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975A2E327AF9629449D100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.198.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5a:2e:32:7a:f9:62:94:49:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=dadf8790-4fe2-4217-95a5-e8ee6aca6ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:f2:4a:5d:b0:f9:8f:af:ae:c4:bb:89:49: 0e:1a:65:bf:0a:b1:04:ab:84:ca:9e:41:43:7a:cd: 75:d9:c5:fd:d2:ef:10:db:d7:fa:20:57:da:0f:54: 70:2e:23:19:f7:16:e9:81:6a:f5:db:d3:28:ab:5a: be:b5:fa:0d:cf:d6:8c:67:5f:d3:f7:87:49:43:3f: fc:ea:16:96:c0:55:8f:75:e5:c7:65:12:dc:df:98: ed:8c:1f:2b:4f:03:07:e9:f3:49:8c:69:2e:7d:28: 85:1a:3d:80:9a:1c:40:b2:1b:74:37:45:76:aa:03: 6a:39:15:98:5d:6e:0c:c8:5c:8f:3a:9f:5d:0f:87: a2:8a:cc:2c:e4:8a:51:47:e2:40:ef:6a:fe:91:5c: d4:2f:0a:62:23:7b:21:56:e3:b2:9d:e5:bd:7a:fe: 4f:d7:01:33:77:26:48:ba:4a:3a:3a:2f:8d:52:d9: d7:18:ef:47:88:96:b7:e5:01:e6:c8:a5:16:58:6c: 1e:a1:71:04:07:95:be:16:20:2a:cd:63:54:17:99: a5:c4:f0:39:2c:b3:6e:4b:db:ef:d8:6e:7d:58:3c: 00:81:c4:c8:d9:7d:7e:91:e5:09:0f:fc:62:68:e1: 35:0e:9d:98:ba:be:2f:26:49:cc:2a:34:24:74:cc: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:35:BE:91:BE:BE:E8:59:9B:72:3E:36:6D:13:4E:AF:F3:EE:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d3:9e:93:ac:97:7b:8b:f7:49:4f:26:c7:15:ae:60:e9:ff: e8:f0:12:56:c0:95:ff:a6:d1:7f:11:12:f6:4e:4a:ef:0d:2c: 71:5e:df:af:72:23:68:6f:d1:f7:dc:57:66:01:a0:63:52:3f: 98:70:1f:76:ab:02:fe:c3:b6:62:09:f9:00:04:dc:f7:e2:56: ff:c7:71:b4:6a:83:02:11:ea:d8:06:35:f3:b2:e8:23:30:8d: fb:23:85:a0:d2:26:f7:f6:79:a9:20:2f:35:17:5b:5f:35:44: ac:ca:0b:c6:33:d4:11:69:0a:3d:35:f7:ee:0f:0c:83:6d:27: b2:32:12:e1:45:19:4b:1c:1d:ad:4c:52:4a:05:9a:6f:f1:b7: d0:ed:7c:ca:09:a6:15:3b:d8:58:58:f2:07:02:fc:04:ff:31: e5:b2:d8:54:c0:af:96:fc:90:cb:29:52:9d:21:1f:1f:a2:b4: 4b:40:60:93:22:2f:e4:9d:26:9f:a1:9e:d6:c8:6f:f0:65:08: ce:90:40:2f:11:ce:1a:49:26:de:a9:46:4b:c5:f5:ed:5f:80: 60:dd:95:f8:c0:b8:0a:bb:93:2a:31:99:38:64:13:d3:58:d5: 57:95:67:33:21:ff:5d:ee:e0:8f:c5:9d:de:38:b7:d9:ae:01: f6:f2:f2:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1ouMnr5YpRJ0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGFkZjg3OTAtNGZlMi00MjE3LTk1YTUtZThlZTZhY2E2Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB3ySl2w+Y+vrsS7iUkOGmW/CrEEq4TKnkFD es112cX90u8Q29f6IFfaD1RwLiMZ9xbpgWr129Moq1q+tfoNz9aMZ1/T94dJQz/8 6haWwFWPdeXHZRLc35jtjB8rTwMH6fNJjGkufSiFGj2AmhxAsht0N0V2qgNqORWY XW4MyFyPOp9dD4eiisws5IpRR+JA72r+kVzULwpiI3shVuOyneW9ev5P1wEzdyZI uko6Oi+NUtnXGO9HiJa35QHmyKUWWGweoXEEB5W+FiAqzWNUF5mlxPA5LLNuS9vv 2G59WDwAgcTI2X1+keUJD/xiaOE1Dp2Yur4vJknMKjQkdMzEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcONb6Rvr7oWZtyPjZtE06v8+7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA4YjRlOGItMTRjMS0z YzYxLThlNDktMzUzNDY0NzA3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDTnpOsl3uL90lPJscVrmDp/+jwElbAlf+m0X8REvZOSu8NLHFe369y I2hv0ffcV2YBoGNSP5hwH3arAv7DtmIJ+QAE3PfiVv/HcbRqgwIR6tgGNfOy6CMw jfsjhaDSJvf2eakgLzUXW181RKzKC8Yz1BFpCj019+4PDINtJ7IyEuFFGUscHa1M UkoFmm/xt9DtfMoJphU72FhY8gcC/AT/MeWy2FTAr5b8kMspUp0hHx+itEtAYJMi L+SdJp+hntbIb/BlCM6QQC8RzhpJJt6pRkvF9e1fgGDdlfjAuAq7kyoxmThkE9NY 1VeVZzMh/13u4I/Fnd44t9muAfby8mM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:47 2025 by rpki-client