$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa File: 627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa (raw, json) Hash identifier: FdKXWmHyYMDMn+oau/FgcSDy3YWqh7Isw0sR6Di3fms= Subject key identifier: C6:46:A7:BE:83:A0:4B:97:21:23:80:DF:43:D8:D9:1D:85:32:73:4C Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584B1AD17A61538F78D73805A880 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 231 IP address blocks: 35.8.0.0/13 maxlen: 24 35.20.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7a:61:53:8f:78:d7:38:05:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=dfd25239-1303-4d88-b457-8938d0de6cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:6b:f6:b4:d2:3d:52:57:1c:d6:88:19:52: 8f:9f:ab:e8:d5:da:f0:91:56:f3:89:5d:45:f9:67: 5e:41:ca:93:ed:db:eb:58:d9:e2:95:bb:93:ee:c9: b1:d2:7c:24:08:be:9a:fa:56:6b:39:95:81:1c:f2: 8f:cc:f9:41:e5:39:98:e0:3f:43:37:64:47:13:64: ea:75:0d:bb:e7:ee:3f:fc:fd:85:85:54:b0:89:5a: 33:f7:c8:5f:9f:cd:24:a8:37:da:b2:1c:74:8a:46: 27:2b:66:50:b7:2d:c8:58:96:6b:8a:14:0b:70:3a: 39:19:8f:6e:2f:53:b8:83:a8:1c:6d:b9:db:b2:a9: 7b:c9:0c:61:f5:e3:ba:07:41:27:f9:55:da:d9:4b: fe:e9:3a:1b:70:4a:01:63:81:99:62:01:6d:9e:63: 82:9b:64:b0:c0:1d:de:05:71:b1:5b:80:f0:ac:c8: a3:60:cc:b2:7e:92:31:ec:6d:fd:de:4e:08:32:9b: 49:ac:fb:0e:19:58:3c:91:b4:d1:83:3e:83:37:ac: 3e:df:1e:6e:36:8d:88:e6:d1:86:75:91:b6:3d:64: 48:65:58:26:c2:f6:8a:25:c4:e7:3e:cb:e1:48:6d: 5f:4e:c7:fa:8f:79:6a:c1:a4:04:42:6b:a2:9d:44: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:46:A7:BE:83:A0:4B:97:21:23:80:DF:43:D8:D9:1D:85:32:73:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.8.0.0/13 35.20.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:12:23:0f:17:66:8c:bc:0c:37:6e:a6:97:78:1d:91:21:db: 27:e5:98:12:ba:86:15:58:bf:26:58:6a:31:ea:e3:dd:75:14: 5d:e1:80:18:a3:da:c0:0f:4e:8a:95:50:d9:48:c8:b6:f0:01: 87:6c:4d:c6:31:c7:5b:51:f6:8d:8c:b0:1a:b2:7c:fe:c8:4d: 7a:96:b9:fb:31:46:42:b9:f3:92:4c:d6:5a:bb:b0:e9:32:38: f4:9a:9f:25:13:cb:74:ac:8c:21:58:5f:81:7e:b0:e9:24:04: 14:d8:66:76:0c:0d:e4:1e:b7:26:7b:29:cc:92:49:f0:bf:3c: 63:7d:93:50:aa:58:63:bc:57:50:d2:8d:ad:99:f9:29:80:5d: 76:c0:61:90:76:9d:92:f1:0e:cb:79:9d:7b:0f:a5:1f:8d:07: cd:80:7c:b0:6c:a3:2b:46:20:2c:13:aa:79:d6:ba:c2:01:1d: c9:86:72:6d:dc:6e:ec:4e:4b:fe:d8:33:a4:86:f8:bf:e5:e0: 16:a3:b9:b2:41:62:71:70:e0:78:00:68:51:6e:c6:15:14:3e: 58:00:2f:f3:fa:6c:96:44:35:16:4f:1b:11:93:ad:df:fd:1a: ed:98:e7:6a:1c:9f:34:7a:2a:7b:11:8f:3f:99:f1:37:6c:65: a4:94:ee:e5 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEsa0XphU4941zgFqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZGZkMjUyMzktMTMwMy00ZDg4LWI0NTctODkzOGQwZGU2Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiJr9rTSPVJXHNaIGVKPn6vo1drwkVbziV1F +WdeQcqT7dvrWNnilbuT7smx0nwkCL6a+lZrOZWBHPKPzPlB5TmY4D9DN2RHE2Tq dQ275+4//P2FhVSwiVoz98hfn80kqDfashx0ikYnK2ZQty3IWJZrihQLcDo5GY9u L1O4g6gcbbnbsql7yQxh9eO6B0En+VXa2Uv+6TobcEoBY4GZYgFtnmOCm2SwwB3e BXGxW4DwrMijYMyyfpIx7G393k4IMptJrPsOGVg8kbTRgz6DN6w+3x5uNo2I5tGG dZG2PWRIZVgmwvaKJcTnPsvhSG1fTsf6j3lqwaQEQmuinUSRYwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFMZGp76DoEuXISOA30PY2R2FMnNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvNjI3NzExY2YtMGM0Ni0z MTAyLWE3YmYtNzk0MWEwYTFmYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMDIwgDAwIj FDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAkEiMPF2aMvAw3bqaXeB2RIdsn5ZgSuoYVWL8mWGox6uPddRRd 4YAYo9rAD06KlVDZSMi28AGHbE3GMcdbUfaNjLAasnz+yE16lrn7MUZCufOSTNZa u7DpMjj0mp8lE8t0rIwhWF+BfrDpJAQU2GZ2DA3kHrcmeynMkknwvzxjfZNQqlhj vFdQ0o2tmfkpgF12wGGQdp2S8Q7LeZ17D6UfjQfNgHywbKMrRiAsE6p51rrCAR3J hnJt3G7sTkv+2DOkhvi/5eAWo7myQWJxcOB4AGhRbsYVFD5YAC/z+myWRDUWTxsR k63f/RrtmOdqHJ80eip7EY8/mfE3bGWklO7l -----END CERTIFICATE-----Generated at Thu Oct 9 20:12:06 2025 by rpki-client