$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa File: 161d2218-a9be-3c8e-b719-b8cb4143902d.roa (raw, json) Hash identifier: kXpHNAsJI3k9mJ48e+UM6UcynNejZosVrVJPLBGfoho= Subject key identifier: 67:31:B5:24:0E:4F:F2:AB:20:78:3A:6E:83:8B:C6:65:DC:B0:57:65 Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584B2A2C3C040D58C8EB5419BD00 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 237 IP address blocks: 35.38.192.0/18 maxlen: 18 35.39.0.0/19 maxlen: 19 35.39.32.0/19 maxlen: 19 35.39.64.0/19 maxlen: 19 35.39.128.0/19 maxlen: 19 35.39.160.0/19 maxlen: 19 35.39.192.0/19 maxlen: 19 35.39.224.0/19 maxlen: 19 35.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3c:04:0d:58:c8:eb:54:19:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=01ee335a-1873-40d9-8b91-89be9c3a6eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:4c:8f:ea:95:3c:74:9f:ae:75:86:13:2f: 08:49:12:8d:27:16:f9:4a:25:8e:19:4d:7c:de:3d: 05:f7:be:26:5a:cc:a9:8e:c7:99:ed:dd:9e:07:6c: 29:0a:1c:3a:a5:31:90:29:1a:f7:6c:c0:80:82:09: a4:3f:ff:5c:d0:41:13:64:92:ab:75:b4:7f:90:92: a7:62:b9:69:64:4c:0c:5d:5d:d1:c8:d4:11:4c:60: 61:9b:5b:32:7e:fb:c3:43:53:a4:0a:78:b1:07:f4: 4d:4f:09:9c:86:df:c0:24:81:bf:b6:4b:6d:ca:7b: 01:7a:ed:02:81:b8:fd:29:41:ca:7e:06:d3:79:a3: af:77:38:74:ed:f7:03:af:33:bd:ad:8c:2d:94:cd: 50:dc:c2:c8:e2:88:d9:54:93:10:d7:31:38:35:e1: 37:58:7a:6b:15:0e:c0:4e:bf:35:e4:ed:1a:fd:a2: b0:0e:e4:ac:39:bf:2f:26:1e:84:7e:e7:fa:df:36: 39:b4:1d:22:9e:c8:57:4b:d0:a1:a1:66:60:b3:1b: 43:a0:3f:ae:db:1d:c3:93:05:ac:b6:dc:0c:19:6c: fc:5f:49:a5:e9:c7:27:15:da:f8:83:a1:1a:b2:0c: 69:d0:7e:a9:59:b5:93:d9:6c:ea:82:1b:5e:57:10: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:31:B5:24:0E:4F:F2:AB:20:78:3A:6E:83:8B:C6:65:DC:B0:57:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.38.192.0-35.39.95.255 35.39.128.0-35.40.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b8:ec:cb:1e:80:d2:e1:cb:7e:96:0a:d3:b5:dd:b7:91:d0: 78:60:80:cc:1e:89:3f:ed:54:9a:97:cf:83:2d:28:da:d3:cd: bd:20:8f:56:67:ab:52:4f:7d:c5:da:ad:91:18:61:cb:43:e6: 18:de:05:b6:29:e4:9c:39:e2:8d:3b:77:64:42:9e:61:71:55: 59:59:f4:3b:c1:96:e1:4d:8f:d6:e3:98:59:d6:ed:ff:64:b9: 52:ab:e0:62:bc:38:97:75:52:04:49:d8:b6:08:65:c5:7a:aa: a9:cd:8a:48:1b:fc:4c:94:41:74:47:6b:c8:f1:98:45:6e:8d: a0:56:4b:f3:9e:d1:3e:57:c4:cb:e1:99:47:55:e1:15:f5:df: c9:75:1e:12:c6:31:f5:1a:cf:ae:30:4d:64:e9:1c:3b:60:78: eb:20:99:de:9c:54:b1:fc:72:df:46:1d:7b:dc:49:67:05:ce: f4:21:98:a6:94:0e:e4:f8:41:97:0b:bf:96:c4:c4:b0:c9:89: 6b:5c:bd:a0:e9:6d:be:a9:17:ed:21:fa:89:ab:a7:82:3b:b9: 19:e0:d6:c6:53:95:f2:46:22:80:cb:db:69:92:5d:29:50:b3: 82:04:26:8e:e0:2f:41:98:55:cc:c8:6a:0c:17:05:ce:15:67: 26:cd:3e:aa -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEsqLDwEDVjI61QZvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MDFlZTMzNWEtMTg3My00MGQ5LThiOTEtODliZTljM2E2ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwetMj+qVPHSfrnWGEy8ISRKNJxb5SiWOGU18 3j0F974mWsypjseZ7d2eB2wpChw6pTGQKRr3bMCAggmkP/9c0EETZJKrdbR/kJKn YrlpZEwMXV3RyNQRTGBhm1syfvvDQ1OkCnixB/RNTwmcht/AJIG/tkttynsBeu0C gbj9KUHKfgbTeaOvdzh07fcDrzO9rYwtlM1Q3MLI4ojZVJMQ1zE4NeE3WHprFQ7A Tr815O0a/aKwDuSsOb8vJh6Efuf63zY5tB0inshXS9ChoWZgsxtDoD+u2x3DkwWs ttwMGWz8X0ml6ccnFdr4g6Easgxp0H6pWbWT2WzqghteVxCnAQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFGcxtSQOT/KrIHg6boOLxmXcsFdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMTYxZDIyMTgtYTliZS0z YzhlLWI3MTktYjhjYjQxNDM5MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAYjJsAD BAUjJ0AwCwMEByMngAMDACMoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB647MsegNLhy36WCtO13beR0Hhg gMweiT/tVJqXz4MtKNrTzb0gj1Znq1JPfcXarZEYYctD5hjeBbYp5Jw54o07d2RC nmFxVVlZ9DvBluFNj9bjmFnW7f9kuVKr4GK8OJd1UgRJ2LYIZcV6qqnNikgb/EyU QXRHa8jxmEVujaBWS/Oe0T5XxMvhmUdV4RX138l1HhLGMfUaz64wTWTpHDtgeOsg md6cVLH8ct9GHXvcSWcFzvQhmKaUDuT4QZcLv5bExLDJiWtcvaDpbb6pF+0h+omr p4I7uRng1sZTlfJGIoDL22mSXSlQs4IEJo7gL0GYVczIagwXBc4VZybNPqo= -----END CERTIFICATE-----Generated at Thu Oct 9 20:15:58 2025 by rpki-client