$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa File: 0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa (raw, json) Hash identifier: JfTO0RI9XdnbkUBQK8erAY/rGCtJj47WO2EC8f4NZH8= Subject key identifier: C8:07:4C:DD:36:72:D9:89:BE:13:E3:65:B7:91:DA:8A:42:2F:9F:FD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBDD9087C54D1D84E74E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:dd:90:87:c5:4d:1d:84:e7:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=168c1a2a-8d8d-4817-a170-1b8be77c1620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:8b:f6:7b:46:91:74:b4:15:6e:05:3a:05: f0:ca:11:64:0b:8e:eb:6f:e0:9b:42:93:f9:f5:16: f5:88:2a:14:70:34:6d:a7:09:3c:a8:87:4d:88:e7: 8f:b9:c0:e5:57:e9:7b:53:28:08:51:78:e3:ef:35: 51:0e:a1:75:93:65:93:58:11:7e:55:58:9b:a1:3a: 3b:c9:4f:42:77:29:8f:da:39:0d:c4:4d:1d:3b:97: 93:2c:fa:00:3e:48:c0:34:46:68:15:f1:be:95:67: 7d:76:3d:ad:0f:cc:ac:26:43:25:2e:28:64:06:0b: 07:33:5a:b1:a8:c2:2d:23:97:41:c1:6b:07:0d:cd: 58:1f:5f:58:c9:ba:9b:7d:b8:29:41:9e:09:81:f6: f8:83:87:81:e8:19:42:c4:68:87:9a:3f:5b:ac:70: 70:19:0b:69:b4:23:88:f4:c2:60:18:fa:27:88:6f: b0:fb:96:b2:2c:97:9f:4f:7e:0d:7d:f0:92:5c:cb: a1:59:3d:37:a7:cb:30:f8:e5:fe:c5:9b:62:43:d4: 39:c1:ba:cb:cc:c6:c8:f3:63:1b:fc:a7:a8:17:81: 88:81:e3:09:50:9e:dc:d8:56:87:48:6f:84:b9:92: d5:1e:0f:1e:e6:74:a0:73:00:5d:d1:06:6e:4c:cd: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:07:4C:DD:36:72:D9:89:BE:13:E3:65:B7:91:DA:8A:42:2F:9F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e1412b5-e031-3cf7-8447-c5fc0cee25a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a6:1a:49:fd:4e:6f:6e:73:e6:8f:5d:ef:48:36:7b:48:57: 09:40:52:a9:d0:f8:11:65:95:42:16:21:e6:eb:eb:03:e4:19: 27:92:a2:7c:e5:f6:04:8a:db:87:00:cf:f6:cb:53:1b:83:45: ec:8d:03:96:0e:b0:d6:b9:fa:ac:3b:ae:ab:ef:0c:eb:79:63: 63:d3:56:be:cc:fc:d1:9c:f0:0d:ee:a7:c2:bf:22:c7:46:ba: 30:58:ac:d3:cc:54:f7:0f:45:50:68:08:26:15:7e:04:47:af: 0b:e5:da:f7:29:73:cf:82:db:9e:f1:08:28:2e:16:3d:7b:b7: 3a:72:f2:55:00:e9:34:64:8c:a0:9f:99:19:bb:b2:19:fb:97: 5c:12:9d:9b:96:a1:35:90:dd:b3:67:88:34:ea:8f:54:62:0f: 3c:0b:3e:03:cf:4d:f4:d7:a6:68:46:a1:76:9b:0f:a4:4c:8c: 3f:9e:b0:c7:76:1f:60:40:51:3f:7f:2c:b4:c8:0a:d8:e4:3f: d8:d0:e9:f9:ea:a1:27:4d:4e:d4:ae:0d:e4:50:16:f6:97:f7: 83:08:6f:28:3b:9b:46:b0:5d:61:75:1a:9b:f7:df:53:e6:2f: f8:12:22:05:70:12:db:95:0a:19:b0:fd:d8:c7:78:85:7a:cc: 84:74:ec:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG292Qh8VNHYTnTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTY4YzFhMmEtOGQ4ZC00ODE3LWExNzAtMWI4YmU3N2MxNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSeL9ntGkXS0FW4FOgXwyhFkC47rb+CbQpP5 9Rb1iCoUcDRtpwk8qIdNiOePucDlV+l7UygIUXjj7zVRDqF1k2WTWBF+VViboTo7 yU9CdymP2jkNxE0dO5eTLPoAPkjANEZoFfG+lWd9dj2tD8ysJkMlLihkBgsHM1qx qMItI5dBwWsHDc1YH19YybqbfbgpQZ4Jgfb4g4eB6BlCxGiHmj9brHBwGQtptCOI 9MJgGPoniG+w+5ayLJefT34NffCSXMuhWT03p8sw+OX+xZtiQ9Q5wbrLzMbI82Mb /KeoF4GIgeMJUJ7c2FaHSG+EuZLVHg8e5nSgcwBd0QZuTM2CvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgHTN02ctmJvhPjZbeR2opCL5/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGUxNDEyYjUtZTAzMS0z Y2Y3LTg0NDctYzVmYzBjZWUyNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJymGkn9Tm9uc+aPXe9INntIVwlAUqnQ+BFllUIWIebr6wPkGSeSonzl 9gSK24cAz/bLUxuDReyNA5YOsNa5+qw7rqvvDOt5Y2PTVr7M/NGc8A3up8K/IsdG ujBYrNPMVPcPRVBoCCYVfgRHrwvl2vcpc8+C257xCCguFj17tzpy8lUA6TRkjKCf mRm7shn7l1wSnZuWoTWQ3bNniDTqj1RiDzwLPgPPTfTXpmhGoXabD6RMjD+esMd2 H2BAUT9/LLTICtjkP9jQ6fnqoSdNTtSuDeRQFvaX94MIbyg7m0awXWF1Gpv331Pm L/gSIgVwEtuVChmw/djHeIV6zIR07GM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:58 2025 by rpki-client