$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/821c71de-7e79-3378-b70e-f6b790ba17c0.roa File: 821c71de-7e79-3378-b70e-f6b790ba17c0.roa (raw, json) Hash identifier: 1tOmQO/Gw4xvZOTjr7pc905WVU290gEJ5kptk/QHDc8= Subject key identifier: 3A:78:82:79:2A:98:93:EC:99:DA:BC:F1:12:A1:C7:96:86:3C:AA:E9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E1ACD1175CEF55AC89E00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/821c71de-7e79-3378-b70e-f6b790ba17c0.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 33588 IP address blocks: 35.131.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1a:cd:11:75:ce:f5:5a:c8:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d7cc2e02-847a-45f1-b1ab-e1cd8f03df1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:54:bd:d9:67:08:1d:da:d5:37:42:e1:60: 16:50:23:38:4a:ab:0b:12:e4:c1:ca:4b:42:1a:5a: 67:e1:4b:fa:32:55:e2:85:23:8c:b0:0e:55:cc:a8: 66:ea:8f:65:4c:cc:b4:57:75:a9:b3:5e:05:3a:d1: 02:01:33:4b:4c:85:69:df:68:c2:5a:43:0a:b2:52: f1:59:81:4f:0f:07:a8:39:d1:91:2b:79:f0:20:d5: f9:a9:58:34:0a:83:70:86:d9:f3:c0:68:c0:8f:93: c1:6b:8b:a8:c4:67:35:68:8b:d2:79:a9:30:aa:a8: 41:d9:f1:c8:b8:3b:90:50:c5:38:32:de:f9:85:c2: a6:b9:c4:36:89:25:34:5c:55:48:16:36:98:94:8c: 67:60:cc:00:25:4e:2a:85:59:e3:12:46:7b:62:d6: 8e:e5:06:e9:94:9b:ba:04:c5:a1:35:a7:d3:64:74: 71:bc:97:02:a8:96:0d:49:ed:72:39:b0:55:bf:64: 24:e3:81:0f:08:fa:6b:1f:9e:be:3a:7f:90:11:5f: 35:47:8d:97:90:67:4e:58:8a:1a:d6:5c:c8:80:90: d1:22:55:79:dc:83:30:a2:4d:57:5c:be:6d:f7:35: ba:bd:17:21:5b:38:b3:42:bf:f6:37:3f:93:88:0e: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:82:79:2A:98:93:EC:99:DA:BC:F1:12:A1:C7:96:86:3C:AA:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/821c71de-7e79-3378-b70e-f6b790ba17c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 35.131.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:72:26:82:22:4d:7c:51:4f:cc:ba:8d:2f:4c:4e:50:e6:fa: 69:75:88:e0:fc:a3:41:84:34:63:3f:16:46:6e:e8:09:3c:fe: fd:c8:91:3d:ad:74:4c:15:49:87:94:a4:90:f2:4d:ab:e8:cb: c3:ca:0e:4c:ec:95:43:fc:bd:bd:e6:10:a6:32:f8:de:5f:a2: c1:48:1f:e1:3e:b4:1d:a3:3a:9d:ab:ff:c0:ff:f0:1d:0c:82: f9:eb:46:d9:28:f8:a1:6b:5d:b0:73:d0:b6:c1:df:c4:38:3d: 42:ad:ec:8c:61:60:8a:05:8d:d0:44:fe:94:8b:89:43:08:bb: b5:43:f5:db:8a:a2:74:84:fb:37:a2:a8:16:37:59:bd:74:6f: e2:94:42:fe:72:a2:2f:a4:21:ee:09:42:14:e7:bb:0c:ab:a6: 7d:a7:cf:4e:51:4a:d3:a9:10:f9:4a:cc:66:50:b8:c5:e4:45: 67:55:5c:8d:b8:67:d1:4c:0f:a3:9f:e9:75:53:f2:b5:35:ac: ba:ab:46:d9:0d:a2:ec:9b:a1:9a:9d:f8:7e:1f:f9:98:18:a5: 29:81:94:bf:7d:59:b6:63:e1:4f:1a:3a:00:fb:47:71:c7:26: ec:04:43:46:53:4e:23:68:9a:cf:8f:28:89:04:7c:bf:d5:e6: c8:f3:06:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHhrNEXXO9VrIngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDdjYzJlMDItODQ3YS00NWYxLWIxYWItZTFjZDhmMDNkZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EFUvdlnCB3a1TdC4WAWUCM4SqsLEuTByktC Glpn4Uv6MlXihSOMsA5VzKhm6o9lTMy0V3Wps14FOtECATNLTIVp32jCWkMKslLx WYFPDweoOdGRK3nwINX5qVg0CoNwhtnzwGjAj5PBa4uoxGc1aIvSeakwqqhB2fHI uDuQUMU4Mt75hcKmucQ2iSU0XFVIFjaYlIxnYMwAJU4qhVnjEkZ7YtaO5QbplJu6 BMWhNafTZHRxvJcCqJYNSe1yObBVv2Qk44EPCPprH56+On+QEV81R42XkGdOWIoa 1lzIgJDRIlV53IMwok1XXL5t9zW6vRchWzizQr/2Nz+TiA4anQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp4gnkqmJPsmdq88RKhx5aGPKrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODIxYzcxZGUtN2U3OS0z Mzc4LWI3MGUtZjZiNzkwYmExN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI4MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZyJoIiTXxRT8y6jS9MTlDm+ml1iOD8o0GENGM/FkZu6Ak8/v3IkT2t dEwVSYeUpJDyTavoy8PKDkzslUP8vb3mEKYy+N5fosFIH+E+tB2jOp2r/8D/8B0M gvnrRtko+KFrXbBz0LbB38Q4PUKt7IxhYIoFjdBE/pSLiUMIu7VD9duKonSE+zei qBY3Wb10b+KUQv5yoi+kIe4JQhTnuwyrpn2nz05RStOpEPlKzGZQuMXkRWdVXI24 Z9FMD6Of6XVT8rU1rLqrRtkNouyboZqd+H4f+ZgYpSmBlL99WbZj4U8aOgD7R3HH JuwEQ0ZTTiNoms+PKIkEfL/V5sjzBqY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:10:36 2025 by rpki-client