$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e403efa7-5393-378e-b3c3-2f4ebca8e497.roa File: e403efa7-5393-378e-b3c3-2f4ebca8e497.roa (raw, json) Hash identifier: Vm1YV6q3BFi8gPxWGZBdk2YRROSG+LDer5C85+i7T+w= Subject key identifier: 86:47:36:37:61:D7:4B:9D:80:82:6F:5C:E8:CD:60:19:F8:97:78:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797B9864FB6133F53993700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e403efa7-5393-378e-b3c3-2f4ebca8e497.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.202.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b9:86:4f:b6:13:3f:53:99:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=ced6b24d-8871-460d-919c-8d3fe0a9fdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:b2:21:88:7d:b1:6d:59:7c:a9:c0:ce:b1: bf:c2:f2:cb:23:e7:84:83:86:03:f0:20:f7:7f:68: e8:2f:ef:73:63:3a:2d:2f:10:56:ef:93:4a:b1:17: b1:f4:9c:86:f0:d3:32:7b:cc:d8:69:b7:aa:a6:d7: 59:a2:cd:90:58:c3:e9:ba:f5:d3:a1:d2:f6:fd:b1: 33:42:24:cc:f2:86:da:a2:5a:c6:63:05:ea:16:53: 20:77:3a:c3:c4:a0:fa:a0:78:c6:c6:a3:f8:83:fe: ff:10:55:e2:b5:66:f4:68:2f:ad:3b:0d:63:72:2e: 8f:59:19:1f:06:85:b0:2e:ec:42:90:ce:8c:25:43: d2:d4:3c:68:2f:d9:82:1a:00:8c:07:cb:d7:ec:91: bf:48:08:b0:64:8f:ab:7f:34:cb:64:0a:af:f0:f7: 34:30:e5:34:0e:bd:0a:93:cf:c6:db:99:df:d2:4e: b4:17:61:93:9d:f2:56:b2:c6:ea:78:28:08:8f:74: 97:59:be:5e:95:e7:b1:a0:cf:ce:25:ad:d1:b3:cf: 8e:cd:e6:c6:dc:8d:1b:9b:f1:0d:18:e8:81:27:7e: 1d:fa:77:fe:45:47:b9:80:d7:a3:f4:7c:07:95:97: 40:1a:71:40:c5:7f:c6:92:5f:bc:b5:4e:70:5d:a8: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:47:36:37:61:D7:4B:9D:80:82:6F:5C:E8:CD:60:19:F8:97:78:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e403efa7-5393-378e-b3c3-2f4ebca8e497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8c:68:b9:7e:52:67:2f:68:f7:8f:2a:48:cf:99:7c:a6:ef: 9c:df:3a:a1:9b:c9:b8:e8:a1:74:65:b5:26:24:48:82:d8:aa: 9d:39:46:27:3a:b4:33:8c:74:36:9a:2b:9f:30:92:25:90:05: d5:64:01:46:5f:7a:5a:cd:3b:9a:b7:6c:57:87:98:dc:02:ea: f2:10:f4:ec:6b:cc:d9:89:26:57:f4:f4:c7:91:95:bd:b9:66: 05:fc:e2:e2:79:0a:57:ee:75:65:26:4c:f2:83:52:41:e8:d5: f4:bd:4c:a4:24:ca:e6:c6:26:30:c5:fe:2c:ad:cb:64:2a:ae: 60:e2:83:b9:a4:14:89:3f:11:8b:25:66:56:0d:6a:11:30:f5: b7:3d:fe:f2:7f:d0:d5:72:ec:48:86:1c:85:17:79:50:ae:e1: 6c:ac:a7:c6:ad:95:69:90:f7:86:07:95:70:00:65:8a:c4:62: b4:27:3a:f5:0a:3e:1b:e7:23:52:00:aa:be:1a:a7:b5:ee:f6: a9:eb:f6:f2:ed:a6:ed:e0:ac:c4:35:54:da:8d:6e:45:e3:17: 3e:3d:6b:12:d4:91:e0:65:fb:7e:90:80:19:8a:5a:98:7c:9e: 75:6e:9d:1d:1c:c8:13:c4:89:9f:15:ff:1b:57:75:c9:37:35: 1e:c5:ff:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7mGT7YTP1OZNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2VkNmIyNGQtODg3MS00NjBkLTkxOWMtOGQzZmUwYTlmZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus+yIYh9sW1ZfKnAzrG/wvLLI+eEg4YD8CD3 f2joL+9zYzotLxBW75NKsRex9JyG8NMye8zYabeqptdZos2QWMPpuvXTodL2/bEz QiTM8obaolrGYwXqFlMgdzrDxKD6oHjGxqP4g/7/EFXitWb0aC+tOw1jci6PWRkf BoWwLuxCkM6MJUPS1DxoL9mCGgCMB8vX7JG/SAiwZI+rfzTLZAqv8Pc0MOU0Dr0K k8/G25nf0k60F2GTnfJWssbqeCgIj3SXWb5eleexoM/OJa3Rs8+OzebG3I0bm/EN GOiBJ34d+nf+RUe5gNej9HwHlZdAGnFAxX/Gkl+8tU5wXajqEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZHNjdh10udgIJvXOjNYBn4l3hnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTQwM2VmYTctNTM5My0z NzhlLWIzYzMtMmY0ZWJjYThlNDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCMaLl+UmcvaPePKkjPmXym75zfOqGbybjooXRltSYkSILYqp05Ric6 tDOMdDaaK58wkiWQBdVkAUZfelrNO5q3bFeHmNwC6vIQ9OxrzNmJJlf09MeRlb25 ZgX84uJ5ClfudWUmTPKDUkHo1fS9TKQkyubGJjDF/iyty2QqrmDig7mkFIk/EYsl ZlYNahEw9bc9/vJ/0NVy7EiGHIUXeVCu4Wysp8atlWmQ94YHlXAAZYrEYrQnOvUK PhvnI1IAqr4ap7Xu9qnr9vLtpu3grMQ1VNqNbkXjFz49axLUkeBl+36QgBmKWph8 nnVunR0cyBPEiZ8V/xtXdck3NR7F/50= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:14 2025 by rpki-client