$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0139d302-28a1-3934-b7af-93cba7eb625a.roa File: 0139d302-28a1-3934-b7af-93cba7eb625a.roa (raw, json) Hash identifier: NOG3e39EtNETgOmWQTCmBPqjF9V/TJdXIdCUTw+rFzI= Subject key identifier: AC:37:47:E5:45:B9:B4:33:78:77:0F:CB:D7:BA:4F:90:67:51:6C:4D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA45B1F03CB226DEEF240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0139d302-28a1-3934-b7af-93cba7eb625a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.203.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a4:5b:1f:03:cb:22:6d:ee:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=40bc8828-e99a-4b36-bcec-751fd2010c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:80:9b:3c:c7:12:1f:f0:33:9b:4f:39:0e: 89:5a:1f:da:7e:60:ad:52:48:4b:6e:b9:3b:54:5a: fc:a3:d7:c8:96:79:4a:3c:86:86:16:e7:6c:04:95: 73:21:bc:0a:fc:59:cf:9e:f3:b0:72:59:ac:4c:b2: 54:0a:0b:cd:c7:35:1e:35:9b:2d:9f:81:f0:cd:17: c3:c2:53:85:b6:36:f2:b7:87:b5:8b:62:b2:a4:78: 36:6e:18:ca:6c:a7:dc:60:e3:75:a0:20:79:7e:4e: ae:f1:0c:95:d4:c1:e5:07:76:20:d5:23:a4:b2:c8: 4b:77:0c:9c:a4:ff:cd:91:21:d8:20:d5:ee:41:ba: 14:dc:99:a5:bf:ae:0a:36:57:6e:00:4e:b3:f6:87: 72:20:82:2f:af:5b:e4:bf:c2:60:3c:33:e4:b9:fc: ec:b0:3c:b8:57:25:03:2a:ed:06:21:ea:21:fe:58: 98:75:26:37:51:52:dd:0d:c9:33:15:9d:42:02:2d: 95:a1:ed:9b:5c:bd:c4:2a:f7:0f:d5:83:33:5d:78: e5:91:47:3d:ae:e7:61:97:4d:54:a2:21:cf:47:db: dd:84:cc:cf:e5:0f:e7:77:50:57:ed:f8:a6:af:4c: cf:42:ed:6a:37:ff:9f:82:5d:73:8e:93:5b:44:d5: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:37:47:E5:45:B9:B4:33:78:77:0F:CB:D7:BA:4F:90:67:51:6C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0139d302-28a1-3934-b7af-93cba7eb625a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7a:84:88:71:43:b0:32:ad:df:a0:c0:87:a0:02:c5:bf:5a: 87:fd:89:25:77:31:76:7c:f7:1c:95:fb:45:40:a6:d9:f2:f7: b8:81:f6:e4:75:a6:bf:ee:a3:44:aa:28:66:a5:d2:4d:86:df: c2:1f:b7:b5:92:1c:df:ed:de:90:6c:55:51:9b:f6:6f:4a:95: e1:32:2d:ad:80:78:48:35:ec:07:06:01:d9:57:42:be:c7:99: 76:1d:2f:a3:22:db:91:a5:8a:71:db:f8:83:db:46:6b:e4:07: b2:df:2c:54:a4:5c:2e:a6:7c:2e:37:86:3d:1e:e4:a2:44:72: e6:5d:00:b4:25:76:c4:aa:f3:59:73:f1:7f:40:3e:bc:c8:95: 9b:5e:13:a0:0f:8c:fe:f3:04:2e:52:e5:e5:e7:ee:b9:33:f1: 97:95:a7:eb:89:29:7e:3d:ce:c5:54:2b:e9:ec:9b:38:2c:c3: 0b:46:d4:d9:5e:97:0e:05:bf:df:16:74:59:2b:c5:d6:3b:f5: 5c:d9:8c:a4:3b:c4:e3:eb:15:70:80:81:69:fb:b9:c3:d0:ca: 30:62:20:b7:37:9d:43:57:18:e0:9a:70:1b:8f:8f:5c:48:a2: 90:6d:53:b2:1b:4e:8c:64:33:78:8f:dd:b1:29:a3:47:81:f7: 98:2f:7f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26RbHwPLIm3u8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDBiYzg4MjgtZTk5YS00YjM2LWJjZWMtNzUxZmQyMDEwYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoKAmzzHEh/wM5tPOQ6JWh/afmCtUkhLbrk7 VFr8o9fIlnlKPIaGFudsBJVzIbwK/FnPnvOwclmsTLJUCgvNxzUeNZstn4HwzRfD wlOFtjbyt4e1i2KypHg2bhjKbKfcYON1oCB5fk6u8QyV1MHlB3Yg1SOksshLdwyc pP/NkSHYINXuQboU3Jmlv64KNlduAE6z9odyIIIvr1vkv8JgPDPkufzssDy4VyUD Ku0GIeoh/liYdSY3UVLdDckzFZ1CAi2Voe2bXL3EKvcP1YMzXXjlkUc9rudhl01U oiHPR9vdhMzP5Q/nd1BX7fimr0zPQu1qN/+fgl1zjpNbRNW6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw3R+VFubQzeHcPy9e6T5BnUWxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDEzOWQzMDItMjhhMS0z OTM0LWI3YWYtOTNjYmE3ZWI2MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD16hIhxQ7Ayrd+gwIegAsW/Wof9iSV3MXZ89xyV+0VAptny97iB9uR1 pr/uo0SqKGal0k2G38Ift7WSHN/t3pBsVVGb9m9KleEyLa2AeEg17AcGAdlXQr7H mXYdL6Mi25GlinHb+IPbRmvkB7LfLFSkXC6mfC43hj0e5KJEcuZdALQldsSq81lz 8X9APrzIlZteE6APjP7zBC5S5eXn7rkz8ZeVp+uJKX49zsVUK+nsmzgswwtG1Nle lw4Fv98WdFkrxdY79VzZjKQ7xOPrFXCAgWn7ucPQyjBiILc3nUNXGOCacBuPj1xI opBtU7IbToxkM3iP3bEpo0eB95gvf48= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:16 2025 by rpki-client