$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa File: e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa (raw, json) Hash identifier: CN+Wg1PnwrPm/hCQ8lGsqnBGUZffiRs83XoXwy7z3rI= Subject key identifier: 2C:F3:C3:44:39:92:12:77:49:64:19:45:53:4E:AF:F0:77:5E:9C:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67974F25DB32EFD20ED61380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.222.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:4f:25:db:32:ef:d2:0e:d6:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0a8277f1-f3d7-4ee4-a198-c1c03978fad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:bd:29:2d:99:ed:97:2b:52:9e:2c:1d:5a: 57:f2:70:ea:00:9a:4b:1d:21:d6:1b:22:81:3c:a6: d5:cc:48:79:0c:e1:81:23:ba:36:ce:b5:3e:d5:ef: 75:57:0c:57:d5:9c:ff:5e:d7:06:ea:5d:86:9f:a1: 49:ad:8d:55:55:87:f7:1b:0f:09:fb:15:99:3f:37: 01:6b:fe:7a:4e:ac:1f:ae:0c:bd:44:ee:b4:84:eb: 23:0b:70:65:29:b6:a6:00:d3:d6:d5:c3:0b:3e:d4: 0a:61:73:c2:6e:ea:bf:09:70:25:01:fa:6a:38:4b: 89:b6:e4:18:04:bd:f5:62:91:92:dd:1b:43:56:bc: e4:36:f4:bf:84:34:df:3d:51:f5:32:ca:b9:ff:33: a3:fa:26:d9:97:aa:ca:bf:ab:14:70:19:dc:0e:44: 6a:f6:c7:99:77:1c:2f:33:ba:f7:2b:f9:f6:d0:e9: 64:4f:60:2e:1c:4d:1b:ba:b8:73:6f:f7:85:9c:79: 7d:3a:55:45:82:ba:44:21:fb:96:64:03:45:65:c6: 9b:31:b6:ab:5b:17:bb:13:55:b2:d8:f7:53:e4:b1: 58:d7:55:c2:9a:5c:5b:08:f0:a5:d4:6b:40:74:e9: c0:52:0b:35:58:df:64:10:f0:6f:98:e7:35:e5:04: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F3:C3:44:39:92:12:77:49:64:19:45:53:4E:AF:F0:77:5E:9C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ca:1f:92:8f:cb:7f:85:04:c5:77:8e:a1:e5:a2:99:00:0c: 20:64:19:3a:d2:ac:42:c9:b2:f5:5f:b7:c9:37:90:4e:96:e0: 1c:f4:5e:91:ef:6e:9d:9f:39:61:b9:b1:e3:77:6e:5a:cb:e3: 5b:e3:3f:70:f0:aa:e9:57:a0:de:75:23:01:8b:a0:4e:fb:33: 6f:49:c2:93:41:59:4e:d2:e8:50:e2:c2:32:5f:d1:66:b1:30: f1:3a:ae:c7:45:a1:c7:3b:a8:03:53:71:1a:ae:ae:00:bc:57: ab:49:ae:b4:29:ff:c4:46:de:ee:4f:a0:c6:7a:da:1a:08:f8: 4b:e4:c9:fc:51:60:86:fe:43:92:d7:d0:1d:49:3d:b7:9f:a6: 41:e9:d2:01:87:23:2a:6e:25:d6:bf:2f:8b:bb:29:19:40:aa: 7b:55:01:38:59:20:b2:2d:60:34:f3:4e:ae:d1:dc:30:83:4b: 51:1d:8b:7c:07:d2:61:d1:f5:fe:30:15:b3:54:b5:6f:2a:37: ec:70:13:ed:63:32:f3:2b:42:ad:eb:b3:67:56:2b:90:d5:0d: d0:75:ae:ce:d4:ae:31:c1:14:0d:08:97:91:30:2f:f4:ed:b4: ee:6e:26:bd:fa:e7:62:e1:06:89:3d:50:8a:eb:1f:ab:fd:d1: ee:4b:ca:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl08l2zLv0g7WE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MGE4Mjc3ZjEtZjNkNy00ZWU0LWExOTgtYzFjMDM5NzhmYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLe9KS2Z7ZcrUp4sHVpX8nDqAJpLHSHWGyKB PKbVzEh5DOGBI7o2zrU+1e91VwxX1Zz/XtcG6l2Gn6FJrY1VVYf3Gw8J+xWZPzcB a/56Tqwfrgy9RO60hOsjC3BlKbamANPW1cMLPtQKYXPCbuq/CXAlAfpqOEuJtuQY BL31YpGS3RtDVrzkNvS/hDTfPVH1Msq5/zOj+ibZl6rKv6sUcBncDkRq9seZdxwv M7r3K/n20OlkT2AuHE0burhzb/eFnHl9OlVFgrpEIfuWZANFZcabMbarWxe7E1Wy 2PdT5LFY11XCmlxbCPCl1GtAdOnAUgs1WN9kEPBvmOc15QQ3hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzzw0Q5khJ3SWQZRVNOr/B3XpxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTM0MjQ4NzctZjZmYi0z YmUwLWEyZTQtNmM3OWQ0MmFjOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvKH5KPy3+FBMV3jqHlopkADCBkGTrSrELJsvVft8k3kE6W4Bz0XpHv bp2fOWG5seN3blrL41vjP3DwqulXoN51IwGLoE77M29JwpNBWU7S6FDiwjJf0Wax MPE6rsdFocc7qANTcRqurgC8V6tJrrQp/8RG3u5PoMZ62hoI+EvkyfxRYIb+Q5LX 0B1JPbefpkHp0gGHIypuJda/L4u7KRlAqntVAThZILItYDTzTq7R3DCDS1Edi3wH 0mHR9f4wFbNUtW8qN+xwE+1jMvMrQq3rs2dWK5DVDdB1rs7UrjHBFA0Il5EwL/Tt tO5uJr3652LhBok9UIrrH6v90e5LykM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:21:12 2025 by rpki-client