$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092c1ed-e80f-34ff-ab78-d76049447a29.roa File: 4092c1ed-e80f-34ff-ab78-d76049447a29.roa (raw, json) Hash identifier: CwFW5vp/lQZb5VX+s4j4p7xkILkIPTX+PFOXTjbJKjM= Subject key identifier: 53:38:27:68:1D:A8:7B:9B:EA:E9:1E:89:F5:A0:04:C1:62:63:C3:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797CE18CDBDF963FC55CB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092c1ed-e80f-34ff-ab78-d76049447a29.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.220.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ce:18:cd:bd:f9:63:fc:55:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=dd2857c3-0218-4bf8-a756-de539249fb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:1f:c0:17:e7:2b:bf:52:b3:0a:8a:09:04: 6d:e3:e6:19:c4:14:89:88:4b:27:47:4a:47:d2:e6: d1:1d:be:15:b1:69:9e:04:e7:6a:cb:13:b7:7a:4c: c9:81:56:67:2b:15:fb:71:b0:dd:96:4c:d1:e1:bf: 4e:b2:00:9a:ad:34:ec:34:37:b2:67:8c:c3:fa:cb: 25:0e:3e:f5:c7:73:68:c2:31:a1:a6:02:22:f2:a0: 00:32:61:c6:c9:68:63:3a:88:e3:49:ef:6a:6b:f3: 00:4b:08:fe:96:d2:22:38:09:e6:71:7a:50:f8:f1: ce:8c:62:c0:f0:55:2a:72:5a:0e:7e:7a:82:57:20: 36:01:61:fd:be:2e:2b:b4:75:1d:c8:b3:32:ec:ae: 64:2d:53:21:4c:a4:f0:dd:54:35:43:6e:e5:c0:eb: ad:db:13:8b:10:47:16:36:34:dc:be:0c:dc:6d:4b: 0a:de:4c:9a:7c:fd:72:a2:81:9a:00:0e:62:e4:82: 8d:f5:00:24:3a:d4:9c:29:de:a7:ef:d1:d0:be:f2: fd:37:e8:90:48:85:6a:3a:0d:06:e0:06:3d:4e:e8: 44:dd:a7:94:d5:d5:52:73:04:e8:24:ff:72:57:e9: 81:41:99:5c:92:bc:c2:22:cc:1a:ba:c7:69:8c:33: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:38:27:68:1D:A8:7B:9B:EA:E9:1E:89:F5:A0:04:C1:62:63:C3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092c1ed-e80f-34ff-ab78-d76049447a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ad:b6:c2:28:18:58:86:7f:ba:4a:c8:62:82:ff:7c:f5:89: bc:32:01:6a:7c:92:45:cb:04:81:4b:88:2f:5f:80:ae:fc:08: 18:71:19:06:a2:f6:56:d8:ec:10:43:da:89:fa:83:12:3b:61: bf:d3:82:c6:61:53:cf:a2:1f:63:00:98:c3:cd:f7:a0:1e:98: 30:bc:25:24:b9:a2:53:ff:45:04:b3:a3:41:c9:76:e4:0a:bd: 9e:a5:a1:57:43:a6:7d:0b:a8:53:6a:43:4b:2d:a1:c8:b4:82: 1b:c4:1d:bf:17:ec:4f:d5:df:41:a0:88:5f:49:e5:95:0b:19: ba:72:e7:0c:ef:43:d0:d8:fd:d8:b6:22:0a:21:42:6f:ec:fa: 05:ae:3f:0c:52:5a:9c:a3:3e:08:1b:1b:e0:11:e3:2a:09:00: cb:bb:5f:33:fe:1b:cc:e7:ac:40:2c:8e:3e:86:03:ad:b5:3e: 84:cb:c2:33:e6:8e:5f:0a:70:80:16:67:d4:33:62:bd:e6:6d: 04:01:a3:ce:9d:19:b7:88:6a:70:d0:4a:b1:11:c3:f8:cd:36: d0:1e:5b:dd:aa:ab:7d:ff:4e:a4:31:0e:44:3c:05:86:9b:9f: 05:18:87:8d:9d:a2:8e:7f:79:d2:2d:c5:25:0f:9a:dc:56:40: 7e:a6:28:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl84Yzb35Y/xVywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQyODU3YzMtMDIxOC00YmY4LWE3NTYtZGU1MzkyNDlmYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfkfwBfnK79SswqKCQRt4+YZxBSJiEsnR0pH 0ubRHb4VsWmeBOdqyxO3ekzJgVZnKxX7cbDdlkzR4b9OsgCarTTsNDeyZ4zD+ssl Dj71x3NowjGhpgIi8qAAMmHGyWhjOojjSe9qa/MASwj+ltIiOAnmcXpQ+PHOjGLA 8FUqcloOfnqCVyA2AWH9vi4rtHUdyLMy7K5kLVMhTKTw3VQ1Q27lwOut2xOLEEcW NjTcvgzcbUsK3kyafP1yooGaAA5i5IKN9QAkOtScKd6n79HQvvL9N+iQSIVqOg0G 4AY9TuhE3aeU1dVScwToJP9yV+mBQZlckrzCIswausdpjDOheQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM4J2gdqHub6ukeifWgBMFiY8PtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA5MmMxZWQtZTgwZi0z NGZmLWFiNzgtZDc2MDQ5NDQ3YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9ywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmttsIoGFiGf7pKyGKC/3z1ibwyAWp8kkXLBIFLiC9fgK78CBhxGQai 9lbY7BBD2on6gxI7Yb/TgsZhU8+iH2MAmMPN96AemDC8JSS5olP/RQSzo0HJduQK vZ6loVdDpn0LqFNqQ0stoci0ghvEHb8X7E/V30GgiF9J5ZULGbpy5wzvQ9DY/di2 IgohQm/s+gWuPwxSWpyjPggbG+AR4yoJAMu7XzP+G8znrEAsjj6GA621PoTLwjPm jl8KcIAWZ9QzYr3mbQQBo86dGbeIanDQSrERw/jNNtAeW92qq33/TqQxDkQ8BYab nwUYh42doo5/edItxSUPmtxWQH6mKAo= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:31 2025 by rpki-client