$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04520f85-1b57-3274-956d-926923f36365.roa File: 04520f85-1b57-3274-956d-926923f36365.roa (raw, json) Hash identifier: YYuZUZgJX7LK8xBz9U5MTGHhVnEq4MXgQ+tUZFt9+8o= Subject key identifier: C2:B7:6E:37:3F:50:81:81:D5:0A:75:6F:EC:62:7D:F4:9B:11:65:66 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB68DE9ED6A4FC1CCC218 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04520f85-1b57-3274-956d-926923f36365.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.185.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b6:8d:e9:ed:6a:4f:c1:cc:c2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4a3c6578-c28f-409a-bc2e-b9f1ec946681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:2d:b0:da:fa:22:0c:12:44:a7:64:21:ba: 71:c7:a2:b2:cd:8a:7b:af:48:f8:11:31:74:f8:ca: b7:8e:3e:cc:65:1b:97:db:6e:7f:31:6d:3e:9e:77: d9:79:28:cb:6f:93:b2:5d:09:55:e5:6f:e8:03:5e: 5a:9b:42:a8:ee:87:81:19:3d:ea:5c:d5:30:d1:28: 29:a0:37:7c:28:d6:dd:cf:13:67:21:35:9a:55:87: 87:8b:1f:dc:32:2c:bc:01:0d:d4:4e:ba:53:33:ac: 66:1f:1e:9c:49:bd:bb:41:ec:49:ee:0a:0f:f9:11: 62:ba:d5:e6:81:ce:ab:a2:27:3f:15:c0:37:4a:c2: 8a:7a:3b:94:9a:bf:a9:2a:6e:9b:39:62:2e:ce:73: ed:d0:02:f3:21:96:dd:c5:4d:ee:38:ec:44:3d:fa: 88:2b:9e:d5:87:ec:3f:e5:86:80:d3:65:53:30:e5: 4b:6d:68:e7:f9:21:f8:dc:cb:e6:59:69:94:11:df: 39:26:4b:86:11:5a:e8:d8:ad:15:c0:e8:1e:5d:62: 0a:e5:2f:c2:e7:d3:99:bb:d5:11:52:2b:3a:c5:0e: 58:0e:d4:c4:dc:e9:6b:16:c2:54:bb:a1:85:2e:2d: dc:16:f1:70:a5:b9:44:5b:b9:83:04:e3:b9:49:a4: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B7:6E:37:3F:50:81:81:D5:0A:75:6F:EC:62:7D:F4:9B:11:65:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04520f85-1b57-3274-956d-926923f36365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.185.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:95:d0:fb:4c:10:7a:13:a1:ae:e6:3e:32:76:14:b1:18:e9: 41:3d:c6:cf:77:e8:ef:e9:6d:6c:68:1d:94:8c:e8:11:50:f4: 97:23:0d:86:9a:21:74:bd:f9:80:7b:1c:a4:da:dc:fc:22:2c: 30:1f:25:46:d5:c0:c2:0a:43:5f:06:ba:59:a8:21:03:8f:4b: e2:82:bd:18:bb:78:32:bd:23:5e:a3:da:ae:4d:eb:51:76:5b: ad:a5:26:83:2d:ea:17:a3:90:f5:f3:e9:89:f4:54:96:11:0c: bb:bb:39:98:7e:11:bf:f8:48:41:5d:f7:f4:88:fd:16:7e:a7: 6e:09:a9:4e:ee:e9:89:5c:e9:ec:46:fa:0e:f4:10:fb:62:8f: 74:83:e6:42:07:11:8d:a0:d8:06:e0:f9:2b:46:74:2c:c9:da: 32:91:b3:5f:fa:4f:f6:cd:17:cc:9d:e3:98:00:cf:6c:4b:7f: 40:f8:0b:da:89:80:c5:2e:d3:92:b7:33:41:46:a6:34:c2:b2: 4b:31:63:10:cc:ab:fe:2c:26:12:78:b0:92:04:27:65:66:bf: eb:1b:2a:3d:72:03:ff:35:72:da:7c:27:85:be:05:bc:90:e2: 20:ca:2b:6b:38:f3:70:a5:b5:42:db:90:93:78:8a:8a:7f:8e: f2:92:45:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27aN6e1qT8HMwhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NGEzYzY1NzgtYzI4Zi00MDlhLWJjMmUtYjlmMWVjOTQ2NjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2stsNr6IgwSRKdkIbpxx6KyzYp7r0j4ETF0 +Mq3jj7MZRuX225/MW0+nnfZeSjLb5OyXQlV5W/oA15am0Ko7oeBGT3qXNUw0Sgp oDd8KNbdzxNnITWaVYeHix/cMiy8AQ3UTrpTM6xmHx6cSb27QexJ7goP+RFiutXm gc6roic/FcA3SsKKejuUmr+pKm6bOWIuznPt0ALzIZbdxU3uOOxEPfqIK57Vh+w/ 5YaA02VTMOVLbWjn+SH43MvmWWmUEd85JkuGEVro2K0VwOgeXWIK5S/C59OZu9UR Uis6xQ5YDtTE3OlrFsJUu6GFLi3cFvFwpblEW7mDBOO5SaT88wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK3bjc/UIGB1Qp1b+xiffSbEWVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQ1MjBmODUtMWI1Ny0z Mjc0LTk1NmQtOTI2OTIzZjM2MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7mgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+V0PtMEHoToa7mPjJ2FLEY6UE9xs936O/pbWxoHZSM6BFQ9JcjDYaa IXS9+YB7HKTa3PwiLDAfJUbVwMIKQ18GulmoIQOPS+KCvRi7eDK9I16j2q5N61F2 W62lJoMt6hejkPXz6Yn0VJYRDLu7OZh+Eb/4SEFd9/SI/RZ+p24JqU7u6Ylc6exG +g70EPtij3SD5kIHEY2g2Abg+StGdCzJ2jKRs1/6T/bNF8yd45gAz2xLf0D4C9qJ gMUu05K3M0FGpjTCsksxYxDMq/4sJhJ4sJIEJ2Vmv+sbKj1yA/81ctp8J4W+BbyQ 4iDKK2s483CltULbkJN4iop/jvKSRec= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:59 2025 by rpki-client