$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/359dc980-81b0-3d41-b6bd-af61207d8a5c.roa File: 359dc980-81b0-3d41-b6bd-af61207d8a5c.roa (raw, json) Hash identifier: 7+Q/QzH86KVqjbuB+pGSKQ+Y9ljaznD0PZTSFVCZCIQ= Subject key identifier: 12:72:FF:7A:31:58:30:52:A2:98:A6:1F:D0:42:FC:E2:D2:34:AC:DF Certificate issuer: /CN=35f2e41c-a886-4dc4-b326-e3d684666794 Certificate serial: 010D0C9F4328584B7DECD22AAA235D1A160EDD40 Authority key identifier: FC:27:30:ED:87:B1:19:31:D0:DD:C3:78:B0:33:C6:17:38:74:5F:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/359dc980-81b0-3d41-b6bd-af61207d8a5c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 16912 IP address blocks: 74.115.228.0/22 maxlen: 22 208.84.113.0/24 maxlen: 24 208.84.114.0/24 maxlen: 24 208.84.115.0/24 maxlen: 24 208.84.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/35f2e41c-a886-4dc4-b326-e3d684666794.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/35f2e41c-a886-4dc4-b326-e3d684666794.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:d2:2a:aa:23:5d:1a:16:0e:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f2e41c-a886-4dc4-b326-e3d684666794 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=563e2762-ab04-4c0b-83c2-9c7d97b7b42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:10:42:7d:26:26:6e:22:5a:6d:31:47:b6: a4:92:bc:96:0f:c4:37:53:3a:23:06:a3:3b:94:99: a8:43:94:61:df:29:31:60:3a:64:4d:62:18:f7:e3: 09:4d:d8:93:5d:14:16:a6:6e:26:86:9d:48:c6:17: 9e:68:05:8f:d8:97:fb:10:ab:f3:6d:57:1c:da:fb: 72:78:79:3e:ac:9d:f5:71:94:14:03:a5:54:1c:ba: 77:66:a4:2b:08:f2:5f:cd:9f:db:fb:99:32:f8:6b: 26:95:f3:6b:15:eb:9f:c4:27:43:ab:42:a7:2c:c9: 68:64:62:76:4f:5e:4c:d6:6a:b4:cc:d1:26:af:99: 65:3c:4a:6f:f4:4e:ca:87:4c:27:2b:ef:e2:29:d6: 12:0b:59:e6:f4:a3:ba:77:8f:f8:38:52:b7:18:b8: cd:a7:a0:03:08:63:5c:f4:1d:c4:10:ce:cc:84:ae: 7a:c6:dc:70:13:72:3a:7a:95:b5:53:27:46:d3:00: b0:f4:30:51:aa:e4:10:69:0a:52:2c:6a:f1:40:a4: 8a:f0:99:00:31:07:2c:48:1a:1f:c0:fd:89:e6:92: a9:7c:5d:7d:b2:35:8b:8a:a0:e7:24:44:05:b1:95: c9:68:41:ff:2f:18:5c:54:6c:cb:e4:8c:a8:00:41: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:FF:7A:31:58:30:52:A2:98:A6:1F:D0:42:FC:E2:D2:34:AC:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/359dc980-81b0-3d41-b6bd-af61207d8a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/35f2e41c-a886-4dc4-b326-e3d684666794.crl X509v3 Authority Key Identifier: keyid:FC:27:30:ED:87:B1:19:31:D0:DD:C3:78:B0:33:C6:17:38:74:5F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794.cer sbgp-ipAddrBlock: critical IPv4: 74.115.228.0/22 208.84.113.0-208.84.119.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a7:28:cb:92:4c:95:c6:b8:c1:fa:f7:92:7e:93:d6:b1:e4: fd:7f:c6:4e:56:2a:20:5b:ad:26:37:e7:62:00:5f:c2:49:c5: 39:c0:1a:d7:e0:76:98:3c:82:22:dc:c7:fe:50:86:c0:66:2e: 77:e5:27:f9:c6:01:3c:54:0d:a9:94:fb:3f:88:09:fd:0c:2d: 2d:7e:fa:9f:6d:5b:bf:94:c1:3e:24:fc:27:5d:21:97:1e:dc: 88:0f:09:0b:0d:b2:e6:93:a1:8c:0e:24:78:8e:3a:8c:7e:af: 32:8c:0f:43:4b:b4:ab:83:9d:3c:ed:29:e0:7d:82:02:9b:b9: 8c:98:f3:ff:80:98:f2:23:a2:09:ee:be:57:79:f7:d3:a2:5e: cc:f9:ea:d6:62:70:9a:53:ef:95:68:16:04:8f:46:20:9c:83: dc:a2:77:1e:86:bd:f4:19:83:5b:b6:32:5d:7d:ff:10:47:04: 49:8c:f1:08:f6:d4:ba:07:de:66:40:21:5c:06:f5:97:be:d5: bb:59:2e:96:d0:5d:70:30:8b:10:de:76:cb:4a:64:2c:5e:fb: f4:f2:ea:ea:ba:df:0c:8b:c6:5b:50:ba:95:f6:2f:2b:f4:c9: 0a:0a:4c:2d:23:a0:11:a1:aa:8d:3d:60:2f:ce:30:62:46:55: 2a:66:b8:ed -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEt97NIqqiNdGhYO3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVmMmU0MWMtYTg4Ni00ZGM0LWIzMjYtZTNkNjg0NjY2 Nzk0MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NTYzZTI3NjItYWIwNC00YzBiLTgzYzItOWM3ZDk3YjdiNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p0QQn0mJm4iWm0xR7akkryWD8Q3UzojBqM7 lJmoQ5Rh3ykxYDpkTWIY9+MJTdiTXRQWpm4mhp1IxheeaAWP2Jf7EKvzbVcc2vty eHk+rJ31cZQUA6VUHLp3ZqQrCPJfzZ/b+5ky+GsmlfNrFeufxCdDq0KnLMloZGJ2 T15M1mq0zNEmr5llPEpv9E7Kh0wnK+/iKdYSC1nm9KO6d4/4OFK3GLjNp6ADCGNc 9B3EEM7MhK56xtxwE3I6epW1UydG0wCw9DBRquQQaQpSLGrxQKSK8JkAMQcsSBof wP2J5pKpfF19sjWLiqDnJEQFsZXJaEH/LxhcVGzL5IyoAEGUhwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFBJy/3oxWDBSopimH9BC/OLSNKzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNWYy ZTQxYy1hODg2LTRkYzQtYjMyNi1lM2Q2ODQ2NjY3OTQvMzU5ZGM5ODAtODFiMC0z ZDQxLWI2YmQtYWY2MTIwN2Q4YTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzVmMmU0MWMtYTg4Ni00ZGM0LWIz MjYtZTNkNjg0NjY2Nzk0LzM1ZjJlNDFjLWE4ODYtNGRjNC1iMzI2LWUzZDY4NDY2 Njc5NC5jcmwwHwYDVR0jBBgwFoAU/Ccw7YexGTHQ3cN4sDPGFzh0XykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNWYyZTQxYy1hODg2LTRkYzQtYjMyNi1lM2Q2 ODQ2NjY3OTQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCSnPkMAwD BADQVHEDBAPQVHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAGqcoy5JMlca4wfr3kn6T1rHk/X/GTlYqIFut JjfnYgBfwknFOcAa1+B2mDyCItzH/lCGwGYud+Un+cYBPFQNqZT7P4gJ/QwtLX76 n21bv5TBPiT8J10hlx7ciA8JCw2y5pOhjA4keI46jH6vMowPQ0u0q4OdPO0p4H2C Apu5jJjz/4CY8iOiCe6+V3n306JezPnq1mJwmlPvlWgWBI9GIJyD3KJ3Hoa99BmD W7YyXX3/EEcESYzxCPbUugfeZkAhXAb1l77Vu1kultBdcDCLEN52y0pkLF779PLq 6rrfDIvGW1C6lfYvK/TJCgpMLSOgEaGqjT1gL84wYkZVKma47Q== -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:51 2025 by rpki-client