$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7cb9025-788b-38fa-93f3-9d064c85b0cd.roa File: f7cb9025-788b-38fa-93f3-9d064c85b0cd.roa (raw, json) Hash identifier: rg1YWY/OtG+UmVjghZW8kRe5RoeIrZ83/RdLHkZLOG4= Subject key identifier: AB:9C:8C:03:5F:2E:98:89:D0:BD:2C:01:86:6D:4B:BF:92:7E:D9:DC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67976C43B49C57F495C8B8C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7cb9025-788b-38fa-93f3-9d064c85b0cd.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.222.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6c:43:b4:9c:57:f4:95:c8:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=a004b4fb-e4cd-4d18-9c93-f5bfd1ef75a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:89:98:93:86:c7:74:ff:f2:43:03:97:7c: 0d:4e:8b:9f:2d:65:43:06:c1:78:a2:7f:82:8d:a2: d9:47:15:d2:4d:af:58:11:c5:fe:c8:ff:3f:79:c6: f2:d0:57:15:6f:05:7e:c6:dd:df:8e:b5:49:26:a0: 66:1f:d7:e6:c7:dd:8f:a9:c6:c3:b5:b9:cf:d8:ac: 98:0a:cd:87:05:c4:dc:f1:c4:a5:65:39:30:49:e8: 38:bf:92:64:47:d4:38:71:d0:b9:f9:dd:d8:a4:bc: b5:32:b7:51:e4:ce:f9:17:fe:85:6e:5b:c8:65:53: d9:63:fe:b0:8a:bc:e7:31:fe:3d:b3:b0:b5:a1:e2: a6:fc:22:73:84:ea:5e:c3:02:cd:c7:17:12:ff:bd: 21:41:63:68:3e:f0:8e:86:82:38:ec:b6:e2:90:92: 9c:cc:52:30:0d:55:c9:89:bd:f7:b4:b8:f2:cf:e4: 9d:fd:78:b4:aa:ab:b3:41:75:12:3d:c3:16:96:af: c0:2a:ed:c3:26:fe:75:62:72:df:03:05:4a:82:80: 84:77:07:32:6a:6a:6f:f8:7b:9f:32:fd:39:cf:ba: 27:1a:33:1e:02:a4:6b:89:ee:e9:ab:12:94:1b:8c: 83:38:e9:bd:93:1a:75:37:63:f1:fd:43:be:1a:62: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9C:8C:03:5F:2E:98:89:D0:BD:2C:01:86:6D:4B:BF:92:7E:D9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7cb9025-788b-38fa-93f3-9d064c85b0cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:29:7c:2d:f9:31:cf:e8:ed:f6:f8:b1:3c:71:a6:b5:24:bf: 2b:38:bf:28:ee:03:16:00:82:69:a5:e0:4d:2c:ce:53:8f:a6: ed:98:bb:4e:f5:31:5d:0a:9a:fa:7d:bb:49:f6:30:6b:f2:eb: e7:7c:30:d9:bd:c9:bf:a3:52:0b:bc:b2:c6:18:b0:43:a8:14: 9a:ed:70:57:35:c7:11:53:d7:df:a4:c7:96:ee:19:cb:a8:5c: 4b:e4:38:83:65:b5:f5:4e:9e:74:9c:0e:6b:37:67:16:0f:a1: da:f6:9b:ca:2b:9b:85:96:ef:93:06:fb:0d:50:e5:93:f2:31: 03:cb:da:81:d9:cb:9e:f8:4a:8c:dc:a2:da:23:bc:d7:95:a4: 1d:83:d2:07:13:e7:f4:94:ce:a5:bd:ee:52:6e:44:11:14:3c: a5:c3:8a:4d:eb:c4:ac:80:b7:41:6a:27:cf:1a:dc:b4:b7:46: c5:32:0f:54:1a:8f:23:bc:da:6a:75:21:f2:16:a4:96:f9:27: ba:19:3f:5f:e2:90:da:a5:6e:30:8f:e4:cb:9c:10:bb:9f:dc: 06:c1:54:b8:2c:e0:a1:97:63:03:06:6c:59:c6:55:3f:19:f1: 00:97:56:b7:f1:34:5e:d9:c3:ee:28:20:90:55:69:78:c0:2f: 5b:a8:c4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2xDtJxX9JXIuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YTAwNGI0ZmItZTRjZC00ZDE4LTljOTMtZjViZmQxZWY3NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4OJmJOGx3T/8kMDl3wNToufLWVDBsF4on+C jaLZRxXSTa9YEcX+yP8/ecby0FcVbwV+xt3fjrVJJqBmH9fmx92PqcbDtbnP2KyY Cs2HBcTc8cSlZTkwSeg4v5JkR9Q4cdC5+d3YpLy1MrdR5M75F/6FblvIZVPZY/6w irznMf49s7C1oeKm/CJzhOpewwLNxxcS/70hQWNoPvCOhoI47LbikJKczFIwDVXJ ib33tLjyz+Sd/Xi0qquzQXUSPcMWlq/AKu3DJv51YnLfAwVKgoCEdwcyampv+Huf Mv05z7onGjMeAqRrie7pqxKUG4yDOOm9kxp1N2Px/UO+GmLAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKucjANfLpiJ0L0sAYZtS7+SftncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjdjYjkwMjUtNzg4Yi0z OGZhLTkzZjMtOWQwNjRjODViMGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4pfC35Mc/o7fb4sTxxprUkvys4vyjuAxYAgmml4E0szlOPpu2Yu071 MV0Kmvp9u0n2MGvy6+d8MNm9yb+jUgu8ssYYsEOoFJrtcFc1xxFT19+kx5buGcuo XEvkOINltfVOnnScDms3ZxYPodr2m8orm4WW75MG+w1Q5ZPyMQPL2oHZy574Sozc otojvNeVpB2D0gcT5/SUzqW97lJuRBEUPKXDik3rxKyAt0FqJ88a3LS3RsUyD1Qa jyO82mp1IfIWpJb5J7oZP1/ikNqlbjCP5MucELuf3AbBVLgs4KGXYwMGbFnGVT8Z 8QCXVrfxNF7Zw+4oIJBVaXjAL1uoxA0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:43 2025 by rpki-client