$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa File: 35a4a280-a419-3d31-a496-90f9731524db.roa (raw, json) Hash identifier: u/UeV/VFnMaUopjDYrog/0TaSn7I9NzR9RmgO474XBM= Subject key identifier: 23:3E:EE:B0:DE:C8:13:D6:20:7D:9E:09:58:46:1D:12:4B:85:CB:F5 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584BA93253218168AF5935B30D80 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 3214 IP address blocks: 104.255.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:53:21:81:68:af:59:35:b3:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ae7db5b5-b54f-4672-885e-b6c692dbeb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e0:7b:f6:53:0d:fa:8e:46:23:a3:b9:ea:f6: 58:34:14:1f:c7:f1:7c:93:9c:87:eb:18:39:f5:32: a8:6a:e9:e4:37:ed:a5:76:35:4e:75:a6:c5:35:a6: 6a:1f:e5:6f:79:f5:3e:30:46:75:da:8d:5e:a3:51: 96:ca:91:cd:e8:de:8b:54:aa:86:74:47:49:d6:d7: 1a:a8:b5:fb:6b:f8:dc:0b:07:33:e4:97:f1:22:65: 0c:92:e6:b2:d1:40:ef:b1:f4:93:14:f4:d5:e1:25: 82:17:a4:25:94:a7:c6:2a:7a:b5:2d:dc:40:61:67: cd:83:62:57:10:1e:ce:60:1b:c3:2d:c6:10:bd:ee: d1:d4:1e:9a:97:f2:93:aa:56:eb:5a:bd:80:e1:af: 93:f9:90:0c:fe:5e:f1:5b:ba:af:09:c9:b4:52:58: 3d:00:62:7e:44:d8:49:6f:bd:0d:71:fc:a5:b3:db: a2:dd:b1:bc:48:31:b0:2a:ea:f9:b0:63:44:12:ad: 2a:20:b7:81:ce:72:de:a2:21:4f:4b:fe:b6:38:6c: 42:17:2f:74:a1:61:80:ba:62:58:c8:c1:5f:89:02: c2:c5:24:f7:f1:70:2f:5a:9c:fe:d1:85:5d:12:ae: ec:36:14:c4:a5:60:57:99:9f:8a:87:f4:f5:3f:ef: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:EE:B0:DE:C8:13:D6:20:7D:9E:09:58:46:1D:12:4B:85:CB:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 104.255.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e9:44:88:6c:05:04:7b:de:5e:43:19:9a:63:8e:5e:00:6e: df:73:28:9a:26:d2:86:59:3a:15:65:4d:bf:43:90:07:a1:c1: 03:b7:6b:68:14:cc:2b:ee:85:10:41:b6:df:80:da:9e:d4:b7: d5:d9:c3:ff:ab:f0:2f:10:cf:4f:9f:28:ed:25:76:fa:af:9b: 18:97:d7:03:1b:d5:1c:4f:91:f1:2a:71:e8:72:8b:18:53:2a: 80:d5:be:fb:bd:c0:64:fd:56:17:34:45:fa:f5:bc:fd:e7:1c: 1c:bb:c2:de:2e:e2:31:f7:0f:87:8f:28:fd:00:97:b8:4a:ed: 21:7c:70:cf:29:db:6e:27:f6:04:ee:c2:5e:68:ca:cb:3a:6d: 53:b7:71:f2:e8:55:90:58:ac:0e:bc:f4:06:41:a3:ef:a8:fd: ae:a7:90:90:06:11:21:17:bb:8d:9b:13:56:c5:f7:b3:1f:4f: cf:61:29:03:81:a7:cc:ad:d2:6b:d6:ef:83:8b:95:3b:dc:8d: 9c:09:ac:32:c4:9a:f5:78:34:78:ed:ef:0d:bd:3b:bc:aa:b5: ce:1e:92:70:7e:5e:2c:dc:19:dc:fe:18:1f:8b:e8:dc:ef:a8: 28:de:e2:40:4e:62:7e:94:61:47:45:2c:03:d1:b8:b3:8f:ea: db:63:2e:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlMhgWivWTWzDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWU3ZGI1YjUtYjU0Zi00NjcyLTg4NWUtYjZjNjkyZGJlYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeB79lMN+o5GI6O56vZYNBQfx/F8k5yH6xg5 9TKoaunkN+2ldjVOdabFNaZqH+VvefU+MEZ12o1eo1GWypHN6N6LVKqGdEdJ1tca qLX7a/jcCwcz5JfxImUMkuay0UDvsfSTFPTV4SWCF6QllKfGKnq1LdxAYWfNg2JX EB7OYBvDLcYQve7R1B6al/KTqlbrWr2A4a+T+ZAM/l7xW7qvCcm0Ulg9AGJ+RNhJ b70Ncfyls9ui3bG8SDGwKur5sGNEEq0qILeBznLeoiFPS/62OGxCFy90oWGAumJY yMFfiQLCxST38XAvWpz+0YVdEq7sNhTEpWBXmZ+Kh/T1P+8hQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM+7rDeyBPWIH2eCVhGHRJLhcv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMzVhNGEyODAtYTQxOS0z ZDMxLWE0OTYtOTBmOTczMTUyNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvpRIhsBQR73l5DGZpjjl4Abt9zKJom0oZZOhVlTb9DkAehwQO3a2gU zCvuhRBBtt+A2p7Ut9XZw/+r8C8Qz0+fKO0ldvqvmxiX1wMb1RxPkfEqcehyixhT KoDVvvu9wGT9Vhc0Rfr1vP3nHBy7wt4u4jH3D4ePKP0Al7hK7SF8cM8p224n9gTu wl5oyss6bVO3cfLoVZBYrA689AZBo++o/a6nkJAGESEXu42bE1bF97MfT89hKQOB p8yt0mvW74OLlTvcjZwJrDLEmvV4NHjt7w29O7yqtc4eknB+XizcGdz+GB+L6Nzv qCje4kBOYn6UYUdFLAPRuLOP6ttjLiY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:21 2025 by rpki-client