$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa File: d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa (raw, json) Hash identifier: llgqE7FKaFQ5h2ghyzG+GxrHGOCQgUvGxixxsA2L82w= Subject key identifier: 22:82:23:8D:F7:EF:F5:75:2C:4A:31:8E:3E:93:5A:9C:9E:38:52:AA Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584B3556E5598E2534F3CDC26A00 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 27274 IP address blocks: 35.32.0.0/16 maxlen: 16 35.33.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e5:59:8e:25:34:f3:cd:c2:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8779e9f8-40ee-4613-bae9-daf57b9b45d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:20:44:10:3f:40:8f:4e:9a:34:b3:51:9a:43: 5a:8b:61:e0:0f:c5:a8:31:e9:c7:f8:3d:20:74:0b: 2b:fc:01:2d:72:4d:86:8e:73:7a:05:e4:d2:2c:90: 43:dc:b3:42:bc:78:2a:98:dd:1e:8e:2f:bb:63:91: 8e:bf:96:90:0c:29:be:e2:d9:5c:3e:a1:19:71:34: 81:6f:78:db:c0:d0:40:20:76:35:93:04:57:16:fb: b3:f7:67:cc:0b:73:71:c7:45:7f:8f:59:43:75:ea: 3f:bb:cd:08:b6:3c:d1:1c:76:fc:4b:85:ab:15:67: f3:02:4d:c6:98:e6:12:82:9f:bd:42:b4:40:03:d0: 2f:5c:84:0b:13:b6:4b:3f:bb:55:10:82:59:77:8e: c8:35:5e:4c:23:6c:30:6d:f3:98:90:9b:c3:61:ae: 8c:e9:93:6e:40:49:73:98:05:cb:76:13:b9:6a:ed: 83:fa:f0:79:28:39:3c:fa:8b:7c:1e:2f:d4:cf:b9: de:17:85:12:09:da:42:81:5d:17:74:42:51:7d:38: 43:3f:27:f6:1c:d2:dc:06:07:62:8b:b2:b2:cc:5f: f6:75:71:7c:f9:d0:df:da:a1:ca:d4:4a:84:3b:2a: 4e:1d:4a:8e:c0:bc:83:0c:56:88:4b:05:73:c1:75: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:82:23:8D:F7:EF:F5:75:2C:4A:31:8E:3E:93:5A:9C:9E:38:52:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.32.0.0/16 35.33.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e9:c7:36:90:54:d4:ab:5a:6b:d4:fe:fe:32:05:30:77:4d: 65:52:94:f5:45:97:ca:7f:02:9b:21:c6:30:b4:db:13:e5:88: 89:94:3d:b0:90:02:ea:9d:52:46:34:cc:04:9a:de:16:ea:81: 1a:5b:90:40:13:78:94:cc:0e:97:69:7e:cb:7b:6e:fe:7e:11: fb:86:c9:c2:99:12:37:76:d0:02:5c:40:21:97:b5:94:6a:59: e7:04:cd:24:e6:c3:63:35:41:97:22:60:cf:06:64:9a:c4:cb: cc:1b:bc:e0:e5:02:d8:00:f8:7c:5e:d2:88:1c:99:05:ca:35: 6d:70:41:0c:ee:60:21:68:e5:bb:77:fb:34:8e:43:75:e3:af: c1:fe:69:ea:21:3f:0d:6f:d7:c4:e5:f0:12:ab:b6:f4:cf:0c: 88:18:ce:df:7b:9d:ba:38:66:fc:c3:21:a7:0c:c2:89:38:3d: 13:33:d8:dc:20:2f:0d:75:2e:d2:07:e5:c5:ad:d7:40:31:89: ee:a1:09:fb:71:f4:23:10:bc:f6:2e:49:ae:d3:ad:70:e0:ac: 19:4e:99:24:47:20:48:64:0d:95:d4:ef:f3:5b:8b:04:40:d0: 32:c7:eb:0a:d0:b1:16:a5:c6:9d:32:d7:c3:1f:8e:bf:68:a0: a2:4e:f8:8a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEs1VuVZjiU0883CagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ODc3OWU5ZjgtNDBlZS00NjEzLWJhZTktZGFmNTdiOWI0NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyBEED9Aj06aNLNRmkNai2HgD8WoMenH+D0g dAsr/AEtck2GjnN6BeTSLJBD3LNCvHgqmN0eji+7Y5GOv5aQDCm+4tlcPqEZcTSB b3jbwNBAIHY1kwRXFvuz92fMC3Nxx0V/j1lDdeo/u80ItjzRHHb8S4WrFWfzAk3G mOYSgp+9QrRAA9AvXIQLE7ZLP7tVEIJZd47INV5MI2wwbfOYkJvDYa6M6ZNuQElz mAXLdhO5au2D+vB5KDk8+ot8Hi/Uz7neF4USCdpCgV0XdEJRfThDPyf2HNLcBgdi i7KyzF/2dXF8+dDf2qHK1EqEOypOHUqOwLyDDFaISwVzwXXSRwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCKCI4337/V1LEoxjj6TWpyeOFKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvZDU5OGM2NWItZGQ1Ni0z NGY4LWJiZTAtNDM1OWIwYzUyYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAIyADBAUj IUAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADenHNpBU1Ktaa9T+/jIFMHdNZVKU9UWXyn8CmyHGMLTbE+WI iZQ9sJAC6p1SRjTMBJreFuqBGluQQBN4lMwOl2l+y3tu/n4R+4bJwpkSN3bQAlxA IZe1lGpZ5wTNJObDYzVBlyJgzwZkmsTLzBu84OUC2AD4fF7SiByZBco1bXBBDO5g IWjlu3f7NI5DdeOvwf5p6iE/DW/XxOXwEqu29M8MiBjO33udujhm/MMhpwzCiTg9 EzPY3CAvDXUu0gflxa3XQDGJ7qEJ+3H0IxC89i5JrtOtcOCsGU6ZJEcgSGQNldTv 81uLBEDQMsfrCtCxFqXGnTLXwx+Ov2igok74ig== -----END CERTIFICATE-----Generated at Thu Oct 9 20:11:12 2025 by rpki-client