$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa File: a1b5ebce-fc37-3f3f-af93-219b7b805362.roa (raw, json) Hash identifier: vpuoJzG/vUozPWNBTf5H4Jn/K2YkqUMDorPkw+Be6rw= Subject key identifier: F3:72:15:AF:2A:13:E3:F7:55:F6:F2:51:54:26:18:40:D3:57:4A:89 Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Certificate serial: 010D0C9F4328584B99D77AE0935931F9691AAAC0 Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54994 IP address blocks: 174.35.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7a:e0:93:59:31:f9:69:1a:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e9b38670-3cf7-4392-8c06-338f4b6b9695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:eb:e7:bb:bb:0a:3c:34:11:bc:d7:a2:ed: bd:d9:74:6a:36:db:71:36:4e:46:4b:24:10:08:00: ab:61:a9:b3:f1:b5:24:92:a9:e6:95:a8:24:c8:71: 13:ab:b4:4a:df:c4:78:8e:e7:59:92:7f:b9:05:61: 67:5e:63:c3:47:c7:a1:ab:96:25:ab:97:30:0a:f2: b7:f6:62:72:1f:57:83:a4:70:73:a0:bc:7e:ef:69: a3:5a:ca:73:d4:ad:13:79:ce:d8:7b:4c:ec:34:ce: 8d:7a:b2:a7:c0:a3:5e:7d:12:de:b3:06:2b:59:69: 8b:fe:49:47:85:5a:ce:c8:96:df:73:cf:75:8b:1e: 16:32:2a:50:dd:d1:cf:58:32:c3:ab:f2:57:2f:eb: 2a:70:9e:35:ef:11:3e:4d:59:e1:43:d4:9b:a2:3f: d7:5f:2f:80:da:3e:a4:9c:56:c9:b7:3c:1f:5f:ed: fa:fd:08:ff:12:74:29:45:c1:98:ac:e5:ff:84:99: 40:5c:ca:25:b9:f9:da:42:d1:ee:ff:72:05:54:ee: bb:72:01:9e:9e:48:a4:01:23:9e:48:6a:a5:56:99: e9:cf:b1:a9:15:b9:c9:41:a6:3a:ab:48:c4:01:04: f5:d1:d9:96:08:64:9a:23:b4:7d:a5:0c:de:56:73: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:72:15:AF:2A:13:E3:F7:55:F6:F2:51:54:26:18:40:D3:57:4A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/a1b5ebce-fc37-3f3f-af93-219b7b805362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl X509v3 Authority Key Identifier: keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer sbgp-ipAddrBlock: critical IPv4: 174.35.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:16:61:d7:c6:95:c9:5a:46:c6:59:7b:3c:00:79:e5:2b:5b: 08:b9:ac:01:33:c6:c2:3a:e5:6f:1e:96:99:08:46:f0:f3:8e: e1:87:d8:97:91:29:61:ee:0b:0f:43:e2:04:3c:c1:bd:9c:d8: c0:92:b9:09:13:7a:b5:0e:b2:a8:fd:11:ff:ed:54:19:7a:09: b0:2c:09:80:f2:91:12:9f:3f:cf:05:08:99:6f:40:91:2e:5e: 82:7e:e3:9d:e5:d1:9a:6d:00:74:a6:d1:aa:6d:64:95:0f:ac: eb:65:f7:0a:bc:0a:a9:25:f6:1c:66:46:e4:97:3c:7c:9e:71: b8:75:51:53:15:21:4d:3d:5c:ec:6f:0e:80:4f:30:c1:3f:df: 5d:10:c2:64:b8:a0:e1:ab:09:ad:90:74:6b:60:6a:3c:bc:0b: e8:44:46:75:d9:52:a5:16:1b:e0:7a:ad:09:64:d6:8e:3b:79: 97:61:2b:e3:89:6b:dd:c7:6c:ff:ee:8d:b9:25:3a:1e:d4:b6: ab:13:22:3f:a0:4d:4f:75:d3:81:f1:a8:33:f5:f4:43:c4:a1: 22:86:50:4b:fd:0d:bd:79:b6:63:70:f5:91:55:36:94:27:c4: a0:37:e0:92:ee:8f:08:54:8a:82:21:c6:25:d3:4c:60:fc:01: fa:5f:25:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13rgk1kx+WkaqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3 MGE4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTliMzg2NzAtM2NmNy00MzkyLThjMDYtMzM4ZjRiNmI5Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzLr57u7Cjw0EbzXou292XRqNttxNk5GSyQQ CACrYamz8bUkkqnmlagkyHETq7RK38R4judZkn+5BWFnXmPDR8ehq5Ylq5cwCvK3 9mJyH1eDpHBzoLx+72mjWspz1K0Tec7Ye0zsNM6NerKnwKNefRLeswYrWWmL/klH hVrOyJbfc891ix4WMipQ3dHPWDLDq/JXL+sqcJ417xE+TVnhQ9Sboj/XXy+A2j6k nFbJtzwfX+36/Qj/EnQpRcGYrOX/hJlAXMolufnaQtHu/3IFVO67cgGenkikASOe SGqlVpnpz7GpFbnJQaY6q0jEAQT10dmWCGSaI7R9pQzeVnMP7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNyFa8qE+P3VfbyUVQmGEDTV0qJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvYTFiNWViY2UtZmMzNy0z ZjNmLWFmOTMtMjE5YjdiODA1MzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0 NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwWYdfGlclaRsZZezwAeeUrWwi5rAEzxsI65W8elpkIRvDzjuGH2JeR KWHuCw9D4gQ8wb2c2MCSuQkTerUOsqj9Ef/tVBl6CbAsCYDykRKfP88FCJlvQJEu XoJ+453l0ZptAHSm0aptZJUPrOtl9wq8Cqkl9hxmRuSXPHyecbh1UVMVIU09XOxv DoBPMME/310QwmS4oOGrCa2QdGtgajy8C+hERnXZUqUWG+B6rQlk1o47eZdhK+OJ a93HbP/ujbklOh7UtqsTIj+gTU9104HxqDP19EPEoSKGUEv9Db15tmNw9ZFVNpQn xKA34JLujwhUioIhxiXTTGD8AfpfJbQ= -----END CERTIFICATE-----Generated at Sat Oct 25 22:28:26 2025 by rpki-client