$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa File: 17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa (raw, json) Hash identifier: OudEtTkysPNt0BknFVrwRaUZiWS+fK6tSbzEe5BksjA= Subject key identifier: 9A:EB:CC:59:26:91:34:10:F9:CF:3C:3A:23:93:CE:5B:ED:06:75:7F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB3CC1F0D8AE53E8F6200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.198.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b3:cc:1f:0d:8a:e5:3e:8f:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7aaa8b8f-2d45-4eb2-9ee7-74070f70109e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:77:e9:4d:f6:b1:60:3d:68:52:a0:58:05:bd: 4d:6f:59:b9:e2:65:c1:94:f0:ff:2d:a5:d4:c2:da: fe:55:65:d7:b6:d4:c8:13:e2:57:a0:3b:5e:dc:33: d0:95:80:29:83:b6:c9:4f:8b:f0:09:1b:f6:24:e6: 5a:8c:0b:84:6f:31:34:4d:8d:70:02:ef:5b:08:f9: 62:e9:9d:e2:7b:d8:25:62:2c:00:17:5b:e4:ac:8b: af:66:30:b3:72:b3:4d:17:50:53:95:08:90:98:f7: 2a:26:ef:a5:9e:2e:ab:0a:6a:fb:a6:35:93:f5:2d: 05:22:35:4d:09:aa:ea:f7:16:58:cd:11:13:15:dc: cc:9c:2d:b2:e6:1a:cb:62:59:89:ce:88:84:81:d7: ef:88:01:cf:4a:75:0b:91:47:f3:92:cc:a4:0b:1d: 6e:6c:c9:5b:38:04:10:6e:90:83:18:2b:2c:42:35: 60:ae:08:45:ba:16:8b:b1:49:5e:3d:9d:8d:4a:f3: 76:2c:cd:ab:2e:27:d1:d6:72:77:a4:4d:eb:c1:30: 54:12:ec:67:64:6f:19:ce:ab:68:7c:f8:23:d3:7b: 4d:7e:eb:65:df:36:ea:46:28:5e:25:59:21:24:ed: aa:5d:db:12:d0:be:e3:48:70:19:a5:94:22:35:2b: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EB:CC:59:26:91:34:10:F9:CF:3C:3A:23:93:CE:5B:ED:06:75:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:29:a5:95:b3:aa:b4:a7:c0:90:91:d3:56:11:ca:22:2c:91: 56:96:76:20:ec:4f:1c:a6:9e:91:c5:5e:39:d9:06:60:9f:89: 91:57:b7:15:95:79:60:1f:d7:08:fa:3e:fb:72:71:74:67:34: f8:0d:1b:45:24:79:ea:54:b7:b3:ef:04:a9:c0:ed:65:f3:6f: e7:20:33:11:61:08:af:0a:4b:35:8f:03:0b:60:05:fb:fe:4c: 84:c2:d2:44:2e:5e:5d:47:55:40:c1:1d:f5:70:5a:49:b8:5a: ea:bd:76:7e:ed:cb:ab:fe:65:59:dd:b0:f4:98:5c:67:a4:8a: f2:ef:96:bc:ae:28:3c:cd:99:15:73:5a:a1:9f:ab:2f:bd:3f: 82:e9:1b:69:81:76:fa:d0:42:4f:62:f8:ac:09:8f:26:25:eb: ea:93:2c:a1:3d:21:ce:9e:ab:db:6e:75:5d:03:53:ef:1e:ba: 84:8c:ca:35:6e:fc:f3:2d:63:1a:91:dd:6f:e7:ce:40:9e:69: 1b:ba:23:05:f6:d3:c4:9b:6d:69:f7:ea:1d:4d:31:28:c4:0c: 8e:ea:05:cb:57:58:5d:51:84:40:c5:e5:cb:f3:5f:bc:ef:e2: c6:c0:9c:e2:67:1b:b9:67:51:ca:a4:ca:c7:3e:4a:ff:7c:d5: 4e:79:83:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27PMHw2K5T6PYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2FhYThiOGYtMmQ0NS00ZWIyLTllZTctNzQwNzBmNzAxMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3fpTfaxYD1oUqBYBb1Nb1m54mXBlPD/LaXU wtr+VWXXttTIE+JXoDte3DPQlYApg7bJT4vwCRv2JOZajAuEbzE0TY1wAu9bCPli 6Z3ie9glYiwAF1vkrIuvZjCzcrNNF1BTlQiQmPcqJu+lni6rCmr7pjWT9S0FIjVN Carq9xZYzRETFdzMnC2y5hrLYlmJzoiEgdfviAHPSnULkUfzksykCx1ubMlbOAQQ bpCDGCssQjVgrghFuhaLsUlePZ2NSvN2LM2rLifR1nJ3pE3rwTBUEuxnZG8Zzqto fPgj03tNfutl3zbqRiheJVkhJO2qXdsS0L7jSHAZpZQiNStHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrrzFkmkTQQ+c88OiOTzlvtBnV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTdjMGQ1OWUtNTgxMS0z Yjc0LThhNWUtOWE1ZjYxMWUyZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwppZWzqrSnwJCR01YRyiIskVaWdiDsTxymnpHFXjnZBmCfiZFXtxWV eWAf1wj6PvtycXRnNPgNG0UkeepUt7PvBKnA7WXzb+cgMxFhCK8KSzWPAwtgBfv+ TITC0kQuXl1HVUDBHfVwWkm4Wuq9dn7ty6v+ZVndsPSYXGekivLvlryuKDzNmRVz WqGfqy+9P4LpG2mBdvrQQk9i+KwJjyYl6+qTLKE9Ic6eq9tudV0DU+8euoSMyjVu /PMtYxqR3W/nzkCeaRu6IwX208SbbWn36h1NMSjEDI7qBctXWF1RhEDF5cvzX7zv 4sbAnOJnG7lnUcqkysc+Sv981U55g/c= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:46 2025 by rpki-client