$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03fe7db2-bdc3-3027-a617-afc2abd8c313.roa File: 03fe7db2-bdc3-3027-a617-afc2abd8c313.roa (raw, json) Hash identifier: Nh+Zx5oFqxC1f3G3DS8wp52Xa927TqS/jJIGA6eDUWs= Subject key identifier: 3D:0A:6E:62:23:A5:09:FA:0A:35:67:85:37:99:4E:02:9E:9B:8E:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEC08B4D08A034ED74900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03fe7db2-bdc3-3027-a617-afc2abd8c313.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ec:08:b4:d0:8a:03:4e:d7:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=bf554281-4921-4c72-8d7e-c458ae37f0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:b6:97:be:47:c9:90:c1:0c:90:d0:36:f9: 6b:5a:40:2b:3e:82:1b:ba:db:8e:6d:06:66:f8:59: 74:98:d0:85:23:4d:fc:f5:1e:56:eb:e7:e0:5c:bf: 1e:1b:ae:78:b1:53:3e:ba:d5:0d:89:0a:20:20:bf: 67:f2:92:d0:16:3e:cd:22:09:83:97:93:3f:46:5c: 3d:ab:ef:39:41:91:99:a0:9c:19:11:8e:e0:57:fa: 7a:49:db:94:83:0f:97:2c:42:36:9a:65:36:4d:12: 3e:da:9b:2d:91:ba:10:2d:37:26:49:f5:23:f2:6c: 8d:96:8b:78:e5:68:a2:d2:5e:bc:6a:ea:e9:60:60: 89:5b:63:b0:60:fa:10:0f:eb:54:76:16:e4:98:3e: e0:92:51:f9:22:a2:13:21:c8:bb:f1:ed:da:e6:c1: 69:aa:84:f5:70:93:e5:44:74:df:ee:0c:df:52:1c: 74:f1:87:1d:3e:63:69:0b:bc:f6:4f:f4:c1:72:83: 15:24:f9:40:b0:c0:f3:b2:92:ee:59:93:fb:57:bb: f7:a0:7d:74:ea:50:15:ab:6b:fa:8d:c3:65:36:fa: e0:78:34:62:b8:1b:bd:c1:75:70:0b:52:f9:11:41: ac:20:fe:87:9b:6d:53:2c:16:06:1c:7f:20:5c:1e: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0A:6E:62:23:A5:09:FA:0A:35:67:85:37:99:4E:02:9E:9B:8E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03fe7db2-bdc3-3027-a617-afc2abd8c313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7d:e6:50:52:5a:b9:40:6d:ee:da:37:64:c1:94:0d:fa:d6: 12:82:98:d7:61:37:e1:5f:0d:1f:d7:9b:d4:7e:26:9d:51:57: 88:5f:c1:e6:fa:57:d8:78:cd:f0:f5:e6:d2:c7:e6:fa:75:db: 5f:de:ee:d7:7e:9f:f0:ed:38:7f:b8:86:c2:5d:6b:56:57:8d: 9c:07:72:28:06:b9:eb:b6:e0:f1:52:5b:88:1a:62:87:a5:1c: e9:67:09:a9:af:b1:aa:c6:fb:5d:60:eb:37:46:30:25:e8:cd: be:f4:b8:9b:37:18:b9:b2:12:26:16:fd:70:40:93:7c:e7:97: 71:6e:27:a9:1d:d3:e9:a0:27:ea:70:74:69:07:3d:cd:bc:2c: f0:c2:f4:b1:44:7d:00:16:82:b9:e7:4a:59:39:12:29:65:ac: d8:f2:c0:ae:74:53:b3:0f:e7:42:38:b9:3a:91:4f:1a:98:c4: 46:7b:47:41:16:e7:a8:c6:a2:c2:a6:c5:dc:36:9e:46:4e:48: c1:fc:1e:da:52:d6:ef:59:f4:e5:31:70:df:4f:72:dc:97:42: 1b:b8:5d:e1:06:56:16:2a:21:8c:93:d9:41:f6:7a:19:07:e5: 14:1a:90:1a:6e:c4:3d:79:ef:49:73:ed:8f:70:c0:01:fb:22: 63:3f:52:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+wItNCKA07XSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YmY1NTQyODEtNDkyMS00YzcyLThkN2UtYzQ1OGFlMzdmMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5a2l75HyZDBDJDQNvlrWkArPoIbutuObQZm +Fl0mNCFI0389R5W6+fgXL8eG654sVM+utUNiQogIL9n8pLQFj7NIgmDl5M/Rlw9 q+85QZGZoJwZEY7gV/p6SduUgw+XLEI2mmU2TRI+2pstkboQLTcmSfUj8myNlot4 5Wii0l68aurpYGCJW2OwYPoQD+tUdhbkmD7gklH5IqITIci78e3a5sFpqoT1cJPl RHTf7gzfUhx08YcdPmNpC7z2T/TBcoMVJPlAsMDzspLuWZP7V7v3oH106lAVq2v6 jcNlNvrgeDRiuBu9wXVwC1L5EUGsIP6Hm21TLBYGHH8gXB42VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0KbmIjpQn6CjVnhTeZTgKem44/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDNmZTdkYjItYmRjMy0z MDI3LWE2MTctYWZjMmFiZDhjMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl95lBSWrlAbe7aN2TBlA361hKCmNdhN+FfDR/Xm9R+Jp1RV4hfweb6 V9h4zfD15tLH5vp121/e7td+n/DtOH+4hsJda1ZXjZwHcigGueu24PFSW4gaYoel HOlnCamvsarG+11g6zdGMCXozb70uJs3GLmyEiYW/XBAk3znl3FuJ6kd0+mgJ+pw dGkHPc28LPDC9LFEfQAWgrnnSlk5EillrNjywK50U7MP50I4uTqRTxqYxEZ7R0EW 56jGosKmxdw2nkZOSMH8HtpS1u9Z9OUxcN9PctyXQhu4XeEGVhYqIYyT2UH2ehkH 5RQakBpuxD1570lz7Y9wwAH7ImM/UlA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:45 2025 by rpki-client