$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa File: 0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa (raw, json) Hash identifier: G0tPJrycCXdQwHBn0D+2VN4thlnz8/REtWFEHl2CE8g= Subject key identifier: 0F:5A:4D:D7:D2:14:A6:08:56:74:9F:4E:B0:C2:AF:41:84:83:5A:7C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE80BE70F7335224E0B60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.228.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e8:0b:e7:0f:73:35:22:4e:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=324f6b7f-2293-45c1-9866-3f836ee88bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:b3:8b:b5:27:fd:8d:6c:73:3e:83:22:de: eb:88:89:ee:3d:60:7f:4b:ff:45:53:3f:4d:74:77: 01:23:d0:a4:0f:84:8c:4a:d1:77:c1:82:cb:d1:71: fc:7f:30:63:28:39:0f:fc:46:dd:d6:4f:f7:f0:34: 44:b4:08:bc:4c:12:30:07:7e:b9:6d:41:18:f1:a9: d2:82:5d:c7:f5:75:2e:b9:a1:6a:a6:4a:be:ae:2f: 0c:a1:45:40:f7:b4:00:97:2e:d9:b6:28:1a:68:7f: 59:70:b9:7f:ff:50:1c:ea:1b:dd:24:60:a3:ad:37: 8e:e1:b8:7f:96:eb:2a:df:f2:d1:59:3d:df:8f:e1: 07:7d:9b:a8:69:ae:50:17:e5:1d:0c:3f:61:63:c5: 14:9f:07:25:e5:ca:bc:30:06:90:fb:79:18:1a:a5: b2:b8:76:e6:a0:46:33:01:c9:7a:0d:07:24:6c:c7: 9a:26:54:3b:be:46:e2:c9:35:e1:c2:28:50:da:ae: 3c:b3:f1:18:ec:9c:56:5c:d6:0f:03:4a:ec:09:69: c0:5b:35:81:f1:de:95:da:c2:c9:e7:0c:6c:94:56: 21:ce:47:99:cc:1e:4f:f1:f6:2d:4b:3c:b1:7c:ee: f2:02:af:19:ea:4d:23:ba:ce:13:8d:a9:0f:68:26: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:4D:D7:D2:14:A6:08:56:74:9F:4E:B0:C2:AF:41:84:83:5A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2b:55:13:1d:63:9c:ca:10:2d:6b:a2:c6:3d:f2:df:f5:64: db:a2:7e:22:6f:24:14:5b:48:73:f7:4e:97:56:4e:42:1c:72: a4:73:9c:c0:fe:83:92:7b:1c:ad:02:3e:0b:0f:8c:e7:3c:41: e5:51:aa:c2:3e:e7:24:63:c3:08:d1:f3:20:78:8c:85:88:4a: c8:80:ed:d5:a0:fa:de:c6:5c:63:13:74:42:9d:0d:78:69:c8: c8:15:a7:1d:3a:28:a2:36:10:68:14:36:69:00:54:25:33:13: 03:0a:e5:56:fe:e8:ec:87:ab:55:f4:ab:68:03:d5:f5:c0:a6: 5e:dd:2e:44:e6:17:0d:5f:70:6b:e8:7c:1e:15:3d:10:40:2b: b0:a5:ca:3c:df:0b:26:40:b5:97:85:e3:e7:a1:74:27:15:95: 51:9b:16:73:18:3e:9d:ab:c7:8e:b1:e2:04:a7:e5:2a:9e:84: 77:1b:e9:3b:24:2b:27:9a:18:4b:59:87:60:ff:29:55:76:60: d3:0e:aa:c8:aa:d2:52:52:86:c3:d6:5f:72:67:ee:5c:2d:fa: f2:44:f6:fc:d4:e3:4e:bf:61:bb:7e:22:a7:c2:24:ce:77:54: c8:a4:68:b0:07:c3:d9:da:41:bd:64:fb:03:9b:85:e7:f2:34: ca:7f:4f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+gL5w9zNSJOC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzI0ZjZiN2YtMjI5My00NWMxLTk4NjYtM2Y4MzZlZTg4YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQuzi7Un/Y1scz6DIt7riInuPWB/S/9FUz9N dHcBI9CkD4SMStF3wYLL0XH8fzBjKDkP/Ebd1k/38DREtAi8TBIwB365bUEY8anS gl3H9XUuuaFqpkq+ri8MoUVA97QAly7ZtigaaH9ZcLl//1Ac6hvdJGCjrTeO4bh/ lusq3/LRWT3fj+EHfZuoaa5QF+UdDD9hY8UUnwcl5cq8MAaQ+3kYGqWyuHbmoEYz Acl6DQckbMeaJlQ7vkbiyTXhwihQ2q48s/EY7JxWXNYPA0rsCWnAWzWB8d6V2sLJ 5wxslFYhzkeZzB5P8fYtSzyxfO7yAq8Z6k0jus4TjakPaCZICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9aTdfSFKYIVnSfTrDCr0GEg1p8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGRhZDViOGUtMmI2Yi0z MWZiLThkODEtNjI4NzVhYzVhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+RgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkrVRMdY5zKEC1rosY98t/1ZNuifiJvJBRbSHP3TpdWTkIccqRznMD+ g5J7HK0CPgsPjOc8QeVRqsI+5yRjwwjR8yB4jIWISsiA7dWg+t7GXGMTdEKdDXhp yMgVpx06KKI2EGgUNmkAVCUzEwMK5Vb+6OyHq1X0q2gD1fXApl7dLkTmFw1fcGvo fB4VPRBAK7ClyjzfCyZAtZeF4+ehdCcVlVGbFnMYPp2rx46x4gSn5SqehHcb6Tsk KyeaGEtZh2D/KVV2YNMOqsiq0lJShsPWX3Jn7lwt+vJE9vzU406/Ybt+IqfCJM53 VMikaLAHw9naQb1k+wObhefyNMp/T8s= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:40 2025 by rpki-client