$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa File: 00848c69-e0a2-30a1-87c4-14728f62595e.roa (raw, json) Hash identifier: c/TWZfOEr/LJx//wu3I1jl5gd1IW9E132MQ57iV+Nv0= Subject key identifier: 6D:04:CF:F6:E4:91:01:9D:0F:96:D3:23:B7:05:E3:F8:90:B1:CE:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCB5846B81319A1CA4980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.192.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cb:58:46:b8:13:19:a1:ca:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=d2f13788-da0e-42cc-bc6b-9edd217cda29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:f6:91:58:23:5a:c6:30:82:d7:f6:b3:af: e0:16:38:db:3a:78:7b:b9:ee:c5:56:6e:93:ee:9b: 74:20:ae:cd:43:74:2e:43:cf:09:6e:cc:bd:4d:ad: c4:c2:e5:c0:76:e0:27:65:db:e2:7e:99:ad:f1:2d: 77:4b:52:0c:1a:03:f9:ca:f2:fa:89:15:0d:94:20: 11:1d:ee:f0:0c:d6:c2:aa:2b:b9:a2:79:b9:86:ef: db:6a:b7:d4:04:72:41:02:fc:25:2b:a2:f2:45:f6: 6c:d8:62:91:f8:7c:08:dd:cb:b0:47:5f:d7:cc:bc: e1:05:66:a4:61:ff:a9:02:98:c5:56:84:73:c1:b0: 47:84:1f:ed:70:7e:c9:62:b2:53:f5:c7:f2:22:df: 5c:05:3f:82:95:5a:65:a4:7c:72:27:80:3e:9d:c4: 19:88:d8:0d:21:8e:8b:ce:ba:ca:07:22:96:f9:f2: f0:17:8c:ba:25:e4:22:ba:19:6b:4f:0a:e1:56:17: ab:6b:40:6e:3e:d3:e9:43:75:6d:44:b8:f7:66:32: 56:26:9c:05:d2:c5:f8:7b:82:1e:62:e2:de:0c:67: 2f:ab:42:4a:ea:cf:74:6b:db:98:ff:71:32:c4:56: 6e:87:49:1e:86:b3:4b:22:e6:64:54:eb:77:bc:ce: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:04:CF:F6:E4:91:01:9D:0F:96:D3:23:B7:05:E3:F8:90:B1:CE:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.192.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1d:19:76:8c:8f:8f:4a:06:d6:e5:dc:2d:b2:3f:5e:43:3f: 3a:d1:74:34:ec:b5:66:79:73:fd:6c:1e:02:5c:2a:97:29:9b: 2f:f9:54:2c:3a:1c:3a:db:72:5e:84:1b:bd:59:26:18:1a:bf: ac:7d:b1:86:16:1d:a8:5e:d9:39:fd:d8:bf:37:5a:15:78:bc: b7:08:c6:19:cc:50:19:62:8a:d2:b0:63:dd:aa:78:4a:6a:f9: 5f:0a:35:68:53:4f:ef:30:d4:d7:ba:97:c5:5c:1f:b7:6a:83: 6c:34:2b:70:3c:50:a9:be:5a:99:8c:7b:57:ed:a0:2b:58:7e: 3d:26:f9:25:21:5d:0d:e2:bd:a4:47:a1:54:7b:36:f0:25:40: a6:ee:b6:f1:bf:71:75:f1:8a:4b:ab:f7:f5:4e:ee:5f:56:15: 62:d0:63:80:8f:1e:fb:71:86:41:c3:6e:e2:59:a1:fd:b4:8d: 35:fb:ba:8e:e3:9f:ff:a2:ae:4a:f2:a3:03:45:f7:23:9b:24: 5f:a1:50:4d:7e:8f:a5:9d:72:ee:d6:9c:7b:da:aa:61:89:c6: 43:08:69:d8:e7:8f:1c:38:e0:7b:01:2a:6c:50:1c:84:bb:8b: a5:04:28:b8:d4:74:42:67:74:c8:e7:6d:64:e0:42:b0:59:7a: b6:2d:fd:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28tYRrgTGaHKSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDJmMTM3ODgtZGEwZS00MmNjLWJjNmItOWVkZDIxN2NkYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo32kVgjWsYwgtf2s6/gFjjbOnh7ue7FVm6T 7pt0IK7NQ3QuQ88Jbsy9Ta3EwuXAduAnZdvifpmt8S13S1IMGgP5yvL6iRUNlCAR He7wDNbCqiu5onm5hu/barfUBHJBAvwlK6LyRfZs2GKR+HwI3cuwR1/XzLzhBWak Yf+pApjFVoRzwbBHhB/tcH7JYrJT9cfyIt9cBT+ClVplpHxyJ4A+ncQZiNgNIY6L zrrKByKW+fLwF4y6JeQiuhlrTwrhVhera0BuPtPpQ3VtRLj3ZjJWJpwF0sX4e4Ie YuLeDGcvq0JK6s90a9uY/3EyxFZuh0kehrNLIuZkVOt3vM6OOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0Ez/bkkQGdD5bTI7cF4/iQsc4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDA4NDhjNjktZTBhMi0z MGExLTg3YzQtMTQ3MjhmNjI1OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgdGXaMj49KBtbl3C2yP15DPzrRdDTstWZ5c/1sHgJcKpcpmy/5VCw6 HDrbcl6EG71ZJhgav6x9sYYWHahe2Tn92L83WhV4vLcIxhnMUBliitKwY92qeEpq +V8KNWhTT+8w1Ne6l8VcH7dqg2w0K3A8UKm+WpmMe1ftoCtYfj0m+SUhXQ3ivaRH oVR7NvAlQKbutvG/cXXxikur9/VO7l9WFWLQY4CPHvtxhkHDbuJZof20jTX7uo7j n/+irkryowNF9yObJF+hUE1+j6Wdcu7WnHvaqmGJxkMIadjnjxw44HsBKmxQHIS7 i6UEKLjUdEJndMjnbWTgQrBZerYt/XE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:00 2025 by rpki-client