$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa File: d3601d74-a920-36fe-9fc7-7641e6a380a9.roa (raw, json) Hash identifier: flTeS62SEi6KwiEjxylCUAgy9bs8ck926CH5BUdR2vU= Subject key identifier: 61:41:F0:AF:83:6C:33:AE:77:7E:F8:69:87:F2:1A:6C:30:01:92:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B1AE56B98C1384027340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.239.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b1:ae:56:b9:8c:13:84:02:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e19ecbdc-a8d7-4dfd-bcc4-fa173afe1d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:f2:66:9f:34:ee:67:f0:c9:ae:20:27:a1: 3c:a6:7b:a1:35:41:e6:22:92:16:d3:63:d1:55:06: b5:53:b0:5b:63:89:37:12:2f:a3:62:2e:a0:33:43: 1d:f6:b3:10:df:20:5b:7f:f1:67:0a:c0:97:a3:83: 78:b7:e5:1b:02:d3:b9:7a:9c:b6:b0:fd:c3:d2:15: ed:dc:0b:7b:32:04:1f:8a:2d:97:74:3e:d6:47:5d: fc:b3:48:8a:86:50:6a:2e:d6:eb:f1:32:9d:b4:33: d9:64:0b:41:a7:54:a6:fc:35:5e:ac:96:b2:c4:01: 59:48:2d:d6:a9:d6:55:97:18:40:b9:a4:d8:26:38: 73:c9:a6:09:72:b9:d0:70:97:c9:f9:a1:18:4a:0e: dd:39:96:17:f3:fd:6a:58:36:35:13:11:cd:4f:11: 32:ae:be:be:e4:01:19:82:15:44:61:e6:5e:22:48: 3d:71:f8:1d:a2:3d:29:3c:9f:e8:4f:66:ca:6a:da: 3c:70:62:5d:f7:ac:3e:3c:a1:ea:89:49:6b:ec:88: 08:47:18:fd:c6:e6:c0:ef:92:02:ae:0d:01:51:7c: e3:dd:a9:f3:47:12:df:25:5f:9b:d5:fa:1f:15:72: e0:68:96:bb:62:97:4b:41:81:b8:d2:61:29:b0:33: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:41:F0:AF:83:6C:33:AE:77:7E:F8:69:87:F2:1A:6C:30:01:92:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:73:7c:82:07:57:67:dd:6f:0a:49:3d:97:57:fe:57:ce:93: d1:06:29:58:41:f3:d8:ea:0b:10:ef:f2:9c:88:98:8b:fc:30: 99:7b:81:6f:2f:c4:3e:9a:ba:6c:21:50:97:bd:16:f6:ce:f1: a9:08:33:29:1e:76:43:cb:d5:88:f8:d1:5a:b0:f4:f2:57:60: d7:b5:71:d7:70:2e:34:ae:82:0f:0d:0f:12:c9:95:5b:e6:21: 40:9c:b3:50:5f:1d:40:84:40:e0:05:00:51:ab:96:6e:17:f7: cd:6d:c1:ac:6e:41:b8:c5:c5:3c:b4:52:35:c0:de:41:97:c8: 93:f3:68:17:56:e1:c1:d0:43:25:6e:6b:2a:36:20:49:d9:f8: bb:42:dd:f3:0c:bd:91:7f:98:0f:43:cb:6c:6f:7f:14:7d:cb: 6f:79:74:40:80:94:d2:d3:39:7b:04:b3:e1:0f:32:16:8e:69: a7:46:31:39:f5:49:c9:f4:02:7d:6c:da:02:35:c6:b2:3d:56: 3f:20:de:b9:04:21:0e:ec:c7:34:20:14:dc:35:84:6a:b6:cd: a5:91:b2:52:45:57:b2:0d:e1:8d:51:61:2d:6b:4c:49:2c:08: c8:27:83:b7:2e:8c:95:56:df:43:85:e8:d5:56:c5:be:82:83: 8f:46:eb:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7GuVrmME4QCc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTE5ZWNiZGMtYThkNy00ZGZkLWJjYzQtZmExNzNhZmUxZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuTyZp807mfwya4gJ6E8pnuhNUHmIpIW02PR VQa1U7BbY4k3Ei+jYi6gM0Md9rMQ3yBbf/FnCsCXo4N4t+UbAtO5epy2sP3D0hXt 3At7MgQfii2XdD7WR138s0iKhlBqLtbr8TKdtDPZZAtBp1Sm/DVerJayxAFZSC3W qdZVlxhAuaTYJjhzyaYJcrnQcJfJ+aEYSg7dOZYX8/1qWDY1ExHNTxEyrr6+5AEZ ghVEYeZeIkg9cfgdoj0pPJ/oT2bKato8cGJd96w+PKHqiUlr7IgIRxj9xubA75IC rg0BUXzj3anzRxLfJV+b1fofFXLgaJa7YpdLQYG40mEpsDPR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFB8K+DbDOud374aYfyGmwwAZLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM2MDFkNzQtYTkyMC0z NmZlLTlmYzctNzY0MWU2YTM4MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFzfIIHV2fdbwpJPZdX/lfOk9EGKVhB89jqCxDv8pyImIv8MJl7gW8v xD6aumwhUJe9FvbO8akIMykedkPL1Yj40Vqw9PJXYNe1cddwLjSugg8NDxLJlVvm IUCcs1BfHUCEQOAFAFGrlm4X981twaxuQbjFxTy0UjXA3kGXyJPzaBdW4cHQQyVu ayo2IEnZ+LtC3fMMvZF/mA9Dy2xvfxR9y295dECAlNLTOXsEs+EPMhaOaadGMTn1 Scn0An1s2gI1xrI9Vj8g3rkEIQ7sxzQgFNw1hGq2zaWRslJFV7IN4Y1RYS1rTEks CMgng7cujJVW30OF6NVWxb6Cg49G68c= -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:02 2025 by rpki-client