$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa File: f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa (raw, json) Hash identifier: BqM03evtErvV1ZyX4jBuC8CPtUI5IuZfCvL7yWlehdM= Subject key identifier: C6:74:4D:FC:13:D4:89:C7:A0:B6:48:99:E8:07:6A:90:6E:CA:CC:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1F2ACEC42210285584100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 35.236.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:f2:ac:ec:42:21:02:85:58:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=d3fa7870-f65d-448a-9c72-052e85c5da38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:fc:9d:c5:30:9d:04:98:31:b2:84:36:b4: 73:c0:fd:d0:85:70:3a:ad:51:80:cd:54:7c:42:36: ad:f0:68:87:09:25:fa:e3:0f:92:47:ab:26:bc:f3: 64:c6:a0:e3:88:0f:3f:fe:c4:7a:d8:44:ee:ed:5a: ac:b4:d3:88:62:b6:7f:30:b7:fe:90:36:5e:8c:d7: 91:df:55:54:40:1e:a1:59:94:c6:2d:e2:c0:a6:33: 54:5d:8e:e9:11:01:bc:52:6b:d2:06:19:70:50:6a: 91:0f:3f:4d:2a:5c:47:f6:4a:de:20:49:0b:2e:51: 1d:54:f4:0b:24:dd:d3:62:43:93:38:a5:59:d0:71: 46:c9:6c:6d:a1:19:88:ff:5a:51:a0:1d:0e:73:ff: a3:0e:5f:40:91:4f:05:2e:20:ec:d8:00:80:03:a9: 07:58:4f:0e:07:dd:1d:ce:e8:53:21:0d:09:16:57: 27:81:7f:e3:0d:99:b7:cd:49:35:6c:0d:5c:82:10: 3d:28:1c:cb:f4:75:8f:d3:4e:86:d4:8d:84:68:25: 43:2b:3e:63:08:97:af:ab:5b:b3:35:e0:ad:59:eb: be:2e:48:72:09:0a:a4:85:ce:8a:03:3c:80:9f:cd: 94:92:9d:15:58:83:7e:6e:43:c6:61:67:0a:dd:36: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:74:4D:FC:13:D4:89:C7:A0:B6:48:99:E8:07:6A:90:6E:CA:CC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f62c16b2-d09f-3f43-bcc1-e628a741ad4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b3:18:48:bc:4c:c1:6c:cc:16:e0:d2:44:8c:f8:be:43:51: cb:cf:76:7f:20:83:05:c0:22:70:31:f6:8c:88:7f:6a:50:85: 61:df:e7:36:93:6f:39:ee:9c:c6:dd:64:eb:9c:51:66:d6:3d: 11:c7:c2:9a:55:ea:6e:4d:b5:74:00:d9:99:3c:8c:07:20:f8: 97:c1:95:55:73:44:28:19:b1:cd:f0:67:2b:8e:bf:b7:99:e2: b1:48:9e:94:e6:59:0a:44:c7:18:41:25:33:b6:c5:94:6f:fe: 27:65:e0:3c:1b:74:7d:66:45:9f:dc:c8:60:82:1a:98:f2:78: 82:07:df:d0:08:6f:14:e6:77:ad:39:53:20:ea:07:89:60:d3: a1:f3:6f:8f:1d:67:26:1b:6c:dd:ae:98:23:54:03:34:15:e8: da:9a:77:f3:1b:bf:e7:34:94:fd:a2:32:6d:6f:b3:2b:41:d3: c9:aa:67:fc:1f:6f:94:b9:e8:3b:ee:91:70:93:4d:e2:1a:3a: 7b:e5:d1:67:6b:7f:86:16:a4:61:10:ec:84:7e:20:df:49:53: ee:53:7c:7d:b6:f3:fe:b0:f4:6a:b6:4e:00:85:8c:f6:b5:c8: fc:c2:26:0a:18:06:98:d4:9b:47:78:35:10:f3:90:bf:59:3f: b8:f9:3f:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtywfKs7EIhAoVYQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZDNmYTc4NzAtZjY1ZC00NDhhLTljNzItMDUyZTg1YzVkYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLL8ncUwnQSYMbKENrRzwP3QhXA6rVGAzVR8 Qjat8GiHCSX64w+SR6smvPNkxqDjiA8//sR62ETu7VqstNOIYrZ/MLf+kDZejNeR 31VUQB6hWZTGLeLApjNUXY7pEQG8UmvSBhlwUGqRDz9NKlxH9kreIEkLLlEdVPQL JN3TYkOTOKVZ0HFGyWxtoRmI/1pRoB0Oc/+jDl9AkU8FLiDs2ACAA6kHWE8OB90d zuhTIQ0JFlcngX/jDZm3zUk1bA1cghA9KBzL9HWP006G1I2EaCVDKz5jCJevq1uz NeCtWeu+LkhyCQqkhc6KAzyAn82Ukp0VWIN+bkPGYWcK3TbmgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMZ0TfwT1InHoLZImegHapBuyswRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjYyYzE2YjItZDA5Zi0z ZjQzLWJjYzEtZTYyOGE3NDFhZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCI+wwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAR7MYSLxMwWzMFuDSRIz4vkNRy892fyCDBcAicDH2jIh/alCFYd/nNpNv Oe6cxt1k65xRZtY9EcfCmlXqbk21dADZmTyMByD4l8GVVXNEKBmxzfBnK46/t5ni sUielOZZCkTHGEElM7bFlG/+J2XgPBt0fWZFn9zIYIIamPJ4ggff0AhvFOZ3rTlT IOoHiWDTofNvjx1nJhts3a6YI1QDNBXo2pp38xu/5zSU/aIybW+zK0HTyapn/B9v lLnoO+6RcJNN4ho6e+XRZ2t/hhakYRDshH4g30lT7lN8fbbz/rD0arZOAIWM9rXI /MImChgGmNSbR3g1EPOQv1k/uPk/bA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:24 2025 by rpki-client