$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa File: 1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa (raw, json) Hash identifier: qFj/XBfAk8EABzEVajvwmvwqG56PqSitZAjU1PGpzUE= Subject key identifier: B7:5F:E8:4E:4B:8D:56:5D:BB:27:12:77:D7:7A:B6:E5:29:5A:75:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB91179FA3BA7EB70CEEC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.199.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:91:17:9f:a3:ba:7e:b7:0c:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ca2a9f2d-65aa-4731-b7d0-aaaad9d80e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0a:b8:79:d4:63:4e:ff:49:ca:2e:57:22:3f: a2:e2:52:41:67:93:7d:4c:8e:08:35:18:21:31:92: c3:a0:ee:e0:b0:45:b9:08:a7:05:0d:41:25:11:b2: 1d:64:e5:ff:63:85:cf:9b:f1:c5:e6:6a:3b:9f:92: d9:54:5d:ca:55:3e:f4:82:01:bf:9f:c2:d1:75:8c: ee:08:11:d1:fe:b9:e8:63:86:0c:1a:ea:ea:93:d3: 67:84:db:8a:46:c6:9f:e3:3c:a8:4e:62:9e:95:6d: 5f:c0:50:89:51:35:79:9e:5d:eb:a8:59:0f:31:fb: 63:73:7f:24:17:e3:7c:af:ea:cc:ca:a3:12:f8:99: f9:8e:24:fd:05:b5:dd:0d:70:75:ad:55:39:56:03: e6:7c:95:f6:06:01:77:63:77:66:49:3e:97:bb:ba: 70:64:21:9e:76:c6:c2:ee:00:70:68:d6:65:6b:3a: 97:cb:3d:09:d1:59:20:85:8f:b1:8c:fe:71:fe:ca: ca:ab:32:2c:be:42:5d:ad:52:6b:e2:61:b9:69:cb: 4d:75:51:95:ce:d7:69:88:9d:b9:22:d7:8a:6b:61: 2b:f2:9a:7d:4c:0d:d3:50:6c:a5:87:3d:9c:d7:ee: 61:e4:24:81:1e:fa:fd:f9:7f:1e:66:48:2f:0c:f0: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5F:E8:4E:4B:8D:56:5D:BB:27:12:77:D7:7A:B6:E5:29:5A:75:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c1:40:5b:2d:48:ad:53:d3:9a:ba:5f:23:be:c1:fa:1f:60: a2:cf:af:ce:b0:99:d7:2a:3e:00:f8:ab:fd:eb:8b:f5:8a:82: d3:61:b2:a0:6d:5a:55:ba:24:54:49:ef:89:24:31:79:74:89: a2:85:13:b1:8f:a2:aa:91:8d:8d:a3:6c:fc:e8:b2:fc:ae:35: 45:3d:08:25:49:37:0c:69:95:0c:6a:0d:6a:f8:df:7d:a1:3b: 20:b1:e8:97:5e:8e:ea:45:9b:85:1c:e2:9f:f5:be:8a:09:29: ed:b0:86:fb:c6:bc:c5:e6:28:56:d5:e2:af:36:e2:57:99:d8: 6c:fc:3b:c1:36:fe:0a:75:0f:32:c1:d7:f3:59:b9:8b:2d:f9: 40:8c:88:c3:47:7c:ce:68:d6:39:e7:cc:d1:2d:2a:8e:ee:4c: 07:39:87:89:83:7b:84:f1:74:04:ed:db:f9:ee:4b:40:8b:a0: c0:9d:ae:8a:47:e2:cd:20:51:f0:4e:dd:d5:45:50:1f:4e:34: 49:6f:97:f4:b4:a0:dc:78:dd:33:83:34:05:1a:df:6a:60:3e: e3:6f:fb:32:0b:31:98:ff:df:ec:a0:58:b5:36:51:bc:03:20: cc:be:e2:5d:c1:be:80:1d:27:51:ac:da:de:71:53:9d:34:3d: 89:9d:3f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25EXn6O6frcM7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2EyYTlmMmQtNjVhYS00NzMxLWI3ZDAtYWFhYWQ5ZDgwZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Qq4edRjTv9Jyi5XIj+i4lJBZ5N9TI4INRgh MZLDoO7gsEW5CKcFDUElEbIdZOX/Y4XPm/HF5mo7n5LZVF3KVT70ggG/n8LRdYzu CBHR/rnoY4YMGurqk9NnhNuKRsaf4zyoTmKelW1fwFCJUTV5nl3rqFkPMftjc38k F+N8r+rMyqMS+Jn5jiT9BbXdDXB1rVU5VgPmfJX2BgF3Y3dmST6Xu7pwZCGedsbC 7gBwaNZlazqXyz0J0VkghY+xjP5x/srKqzIsvkJdrVJr4mG5actNdVGVztdpiJ25 IteKa2Er8pp9TA3TUGylhz2c1+5h5CSBHvr9+X8eZkgvDPAExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdf6E5LjVZduycSd9d6tuUpWnVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWE4N2NhNGYtODAwYy0z NmVlLTg3YmEtMzFhMmQ0YWM5OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/BQFstSK1T05q6XyO+wfofYKLPr86wmdcqPgD4q/3ri/WKgtNhsqBt WlW6JFRJ74kkMXl0iaKFE7GPoqqRjY2jbPzosvyuNUU9CCVJNwxplQxqDWr4332h OyCx6JdejupFm4Uc4p/1vooJKe2whvvGvMXmKFbV4q824leZ2Gz8O8E2/gp1DzLB 1/NZuYst+UCMiMNHfM5o1jnnzNEtKo7uTAc5h4mDe4TxdATt2/nuS0CLoMCdropH 4s0gUfBO3dVFUB9ONElvl/S0oNx43TODNAUa32pgPuNv+zILMZj/3+ygWLU2UbwD IMy+4l3BvoAdJ1Gs2t5xU500PYmdP1o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:15 2025 by rpki-client