$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa File: 139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa (raw, json) Hash identifier: rbCw2S/IiP+Q9SS2q4EOW/0feZQKaXf3BwBUJTbbsTY= Subject key identifier: 1B:B0:F3:97:7A:75:84:C0:38:D9:1C:8A:E5:E2:F1:91:C8:00:0E:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC00A054B4025EBD96480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c0:0a:05:4b:40:25:eb:d9:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1960f402-c193-4a95-b2d1-0928b9948bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:dc:9b:15:02:b0:d6:9d:02:68:0b:6f:0d: 6d:49:16:6b:71:cc:25:fa:59:36:2e:8c:21:bf:21: 70:55:98:13:e5:93:21:e5:28:ea:d3:b2:c0:c7:a3: 34:e0:82:22:24:99:15:fd:f0:8b:a8:7a:16:1d:63: 74:11:14:04:85:de:5c:13:f5:43:0e:2b:c0:fd:55: 76:57:cb:7a:dd:5e:59:72:9d:dc:21:fa:4f:06:fd: 57:33:02:5f:a7:23:f7:00:b9:82:5c:2a:f1:c6:9e: 17:50:35:52:87:ab:7b:33:ec:ba:7f:f2:3f:50:08: 12:b7:51:6a:16:32:e3:f2:1a:c8:d5:28:9f:0b:90: b8:80:70:48:e4:9a:aa:29:2e:38:bd:d3:07:42:b7: 19:a4:7a:d8:28:a6:5e:73:76:07:cc:10:4e:fc:91: b5:53:5e:23:d0:29:ac:2f:60:b0:9f:41:58:c3:4f: a8:75:48:6e:fe:0c:93:29:71:0c:af:12:21:c6:23: 37:91:a1:6a:6f:f1:be:f4:f0:d7:9e:5a:59:4a:53: 4c:5a:d8:9f:f0:c0:ae:d3:a5:8d:7f:a3:ed:99:78: 20:49:83:ab:2c:04:d4:ed:39:4c:bb:bc:5f:9b:a3: 08:98:bb:c8:a2:6f:12:ca:39:b4:99:fb:a6:d7:bd: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B0:F3:97:7A:75:84:C0:38:D9:1C:8A:E5:E2:F1:91:C8:00:0E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:90:fa:f7:f2:e5:4b:ca:cb:1f:37:ce:ca:16:dd:f6:5d:ea: b4:f3:74:ea:75:6a:69:8a:76:e3:29:f1:0b:c5:96:1e:c7:ea: 54:ed:20:72:06:3a:48:e1:0f:34:d5:38:5c:1e:ef:f8:52:aa: c8:3c:9b:8f:49:85:39:18:24:39:de:1c:4f:b4:91:f8:df:d2: 43:d6:8c:92:4b:b4:dc:0d:30:c1:24:a1:95:e4:0b:4a:07:a6: 35:cb:8e:3a:8e:e8:39:50:07:29:c9:5d:5b:21:9e:6b:c1:45: 10:92:aa:6d:2d:45:e2:5f:c4:51:2e:dc:4f:a2:81:b2:d0:85: 77:27:9a:5c:1d:8a:da:4c:28:6d:41:65:5f:50:df:82:35:89: c1:55:5e:b3:63:f8:90:4c:60:ff:11:ab:c9:21:0d:33:a5:3d: a8:88:2a:f4:8f:02:a3:3f:ce:f7:ab:77:1b:96:4d:38:3e:5d: 82:9e:6c:dc:4d:e6:53:28:6f:f4:ef:cd:7e:dd:29:dc:1a:eb: 49:3e:9e:fa:65:50:c4:fa:fb:7e:6c:2d:e1:d6:be:d6:13:03: 70:02:00:4e:d8:5b:2a:70:4f:ff:56:0e:8c:36:0d:48:b3:cb: 46:08:95:dd:bb:9a:1e:91:3f:28:10:bd:93:95:73:eb:dd:5f: fa:0d:6c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28AKBUtAJevZZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTk2MGY0MDItYzE5My00YTk1LWIyZDEtMDkyOGI5OTQ4YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg83cmxUCsNadAmgLbw1tSRZrccwl+lk2Lowh vyFwVZgT5ZMh5Sjq07LAx6M04IIiJJkV/fCLqHoWHWN0ERQEhd5cE/VDDivA/VV2 V8t63V5Zcp3cIfpPBv1XMwJfpyP3ALmCXCrxxp4XUDVSh6t7M+y6f/I/UAgSt1Fq FjLj8hrI1SifC5C4gHBI5JqqKS44vdMHQrcZpHrYKKZec3YHzBBO/JG1U14j0Cms L2Cwn0FYw0+odUhu/gyTKXEMrxIhxiM3kaFqb/G+9PDXnlpZSlNMWtif8MCu06WN f6PtmXggSYOrLATU7TlMu7xfm6MImLvIom8Syjm0mfum171hKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuw85d6dYTAONkciuXi8ZHIAA6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTM5ZGZkNTYtYWU2OC0z MjdhLWIxMWUtMDBhOTdmZTlhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqQ+vfy5UvKyx83zsoW3fZd6rTzdOp1ammKduMp8QvFlh7H6lTtIHIG OkjhDzTVOFwe7/hSqsg8m49JhTkYJDneHE+0kfjf0kPWjJJLtNwNMMEkoZXkC0oH pjXLjjqO6DlQBynJXVshnmvBRRCSqm0tReJfxFEu3E+igbLQhXcnmlwditpMKG1B ZV9Q34I1icFVXrNj+JBMYP8Rq8khDTOlPaiIKvSPAqM/zverdxuWTTg+XYKebNxN 5lMob/TvzX7dKdwa60k+nvplUMT6+35sLeHWvtYTA3ACAE7YWypwT/9WDow2DUiz y0YIld27mh6RPygQvZOVc+vdX/oNbFw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:39 2025 by rpki-client