$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa File: dd35f63d-34eb-34a9-9b70-5091213e41cf.roa (raw, json) Hash identifier: xjgV2xEdIPvf8wQlC7r6QXg+E1wcLzzI5npiIn4S67s= Subject key identifier: 2A:1A:B1:A9:BF:63:52:DA:98:87:6B:54:37:42:43:97:03:93:DD:CB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797A42BB6A6A4E2A034ED90 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.239.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a4:2b:b6:a6:a4:e2:a0:34:ed:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8bfbc3b6-a7ff-46bb-83d5-185f29b5e68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:37:9b:15:93:87:96:88:20:a3:c6:16:3a: 8c:3b:2d:9e:99:b6:8b:dd:ba:f4:40:b5:65:2c:74: 59:33:7d:32:24:c4:53:0f:f2:b5:90:f7:0d:c7:87: 26:3e:49:7c:6b:d2:b6:50:cb:fe:23:58:d6:7b:e9: 01:59:c7:37:8c:e5:85:2c:3f:40:fc:64:a7:0c:78: 8c:68:fd:92:1c:f4:99:e4:46:d9:83:31:0f:44:cc: e9:4c:fd:f3:33:50:b1:c1:76:23:67:f2:53:a2:5d: 17:8f:ed:c7:e8:ac:9a:85:84:f1:30:48:0f:3b:2d: f4:b7:7a:fe:82:c6:88:05:bd:41:1a:b9:a7:0e:35: 2f:e6:c6:74:24:4c:69:1f:2a:17:6c:88:ee:eb:95: 25:69:16:f3:7d:93:15:18:bf:c7:ff:ef:9e:b0:50: 9a:fc:94:c3:36:3c:94:54:60:de:94:7b:a5:22:bb: 38:c5:80:6f:37:f0:f1:bb:38:00:d6:f2:be:18:27: 31:62:23:8b:cc:cd:82:f9:f5:88:d5:d0:3d:d9:73: 38:aa:c2:82:66:a6:49:57:82:eb:1d:3e:35:57:af: 41:98:d2:78:40:b0:fa:47:c4:f9:a5:e1:eb:f5:cb: fa:3b:ec:6c:ec:41:95:c2:28:8e:17:d0:3b:7e:04: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:B1:A9:BF:63:52:DA:98:87:6B:54:37:42:43:97:03:93:DD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:42:a9:76:af:f7:a4:17:a0:a5:8f:87:a0:5d:10:b1:cb:40: e9:5f:f9:e7:07:48:31:37:a6:cd:fd:df:ad:68:47:49:ce:40: ce:af:11:f4:83:a4:48:33:a3:7f:3c:93:ba:99:70:a1:13:ad: 77:94:76:26:e6:4c:b0:da:06:af:b4:4a:8f:73:98:8b:6f:fc: ee:7e:32:ab:5a:b4:70:b5:e3:8c:c1:ed:9f:3a:b7:18:b0:95: 41:c7:87:e0:fb:f0:8d:46:58:06:e0:0d:8a:ff:08:86:77:bd: b4:08:64:3e:a4:77:94:1b:d3:8b:98:a7:fb:db:a9:22:35:2c: 91:b4:44:8d:9b:c9:92:5a:ed:21:93:46:08:b9:d1:3d:5a:b4: e0:12:4e:43:ec:d9:8b:77:45:35:fa:aa:9b:87:20:57:ef:c2: 17:9d:5f:83:6a:21:27:09:1e:96:de:26:8e:04:49:91:55:58: 97:c8:33:e2:86:1b:c8:b9:0a:cf:d0:b8:83:27:94:41:3e:4f: f6:c3:ae:16:86:0d:b4:6b:3c:c5:8e:55:5c:6b:bb:c6:82:e3: c3:79:51:5b:23:11:46:80:66:60:64:78:c2:5c:f7:09:99:25: 73:66:7e:9b:67:b7:44:14:4b:b4:b9:a5:f1:21:06:82:7e:b6: 61:f9:b8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6Qrtqak4qA07ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGJmYmMzYjYtYTdmZi00NmJiLTgzZDUtMTg1ZjI5YjVlNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq03mxWTh5aIIKPGFjqMOy2embaL3br0QLVl LHRZM30yJMRTD/K1kPcNx4cmPkl8a9K2UMv+I1jWe+kBWcc3jOWFLD9A/GSnDHiM aP2SHPSZ5EbZgzEPRMzpTP3zM1CxwXYjZ/JTol0Xj+3H6KyahYTxMEgPOy30t3r+ gsaIBb1BGrmnDjUv5sZ0JExpHyoXbIju65UlaRbzfZMVGL/H/++esFCa/JTDNjyU VGDelHulIrs4xYBvN/DxuzgA1vK+GCcxYiOLzM2C+fWI1dA92XM4qsKCZqZJV4Lr HT41V69BmNJ4QLD6R8T5peHr9cv6O+xs7EGVwiiOF9A7fgRhNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoasam/Y1LamIdrVDdCQ5cDk93LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQzNWY2M2QtMzRlYi0z NGE5LTliNzAtNTA5MTIxM2U0MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI++AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlCqXav96QXoKWPh6BdELHLQOlf+ecHSDE3ps39361oR0nOQM6vEfSD pEgzo388k7qZcKETrXeUdibmTLDaBq+0So9zmItv/O5+MqtatHC144zB7Z86txiw lUHHh+D78I1GWAbgDYr/CIZ3vbQIZD6kd5Qb04uYp/vbqSI1LJG0RI2byZJa7SGT Rgi50T1atOASTkPs2Yt3RTX6qpuHIFfvwhedX4NqIScJHpbeJo4ESZFVWJfIM+KG G8i5Cs/QuIMnlEE+T/bDrhaGDbRrPMWOVVxru8aC48N5UVsjEUaAZmBkeMJc9wmZ JXNmfptnt0QUS7S5pfEhBoJ+tmH5uBg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:16 2025 by rpki-client