$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b9a9799-1651-35f5-b1af-66a5fc9d4956.roa File: 1b9a9799-1651-35f5-b1af-66a5fc9d4956.roa (raw, json) Hash identifier: ACvKgsKcvNT02yAhMKFwrIlb0D9/xvC5sHl+5FolM1I= Subject key identifier: 93:6B:BF:76:40:84:25:FE:40:24:77:FD:23:64:A1:A6:02:E0:06:54 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBFA8D5BAEF4FD56F0AE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b9a9799-1651-35f5-b1af-66a5fc9d4956.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.222.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fa:8d:5b:ae:f4:fd:56:f0:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=904a287a-636d-4af2-a19d-0c0ddf603040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:6d:ee:74:6b:4f:bb:9a:2d:7d:38:15:00: 3d:64:e0:f6:6d:e5:7c:cd:92:f2:0f:f8:ed:20:ff: e7:28:7c:17:43:ec:f2:bd:8d:4b:c1:78:c2:35:25: 94:cb:f1:44:dd:4e:39:af:c6:fb:2c:60:8b:8f:8a: cb:e1:b1:19:58:e3:63:64:69:e7:50:c0:c8:b9:27: 8f:95:da:33:01:0a:eb:97:77:a0:14:19:25:dc:3e: c3:57:d0:ad:0d:07:c9:ef:9a:4b:d5:a4:b7:a8:6b: 90:df:b1:ec:86:33:99:d7:99:11:3d:13:c6:7f:f0: b9:04:43:d9:90:16:1c:f6:28:e6:ac:89:39:d6:07: 7e:4b:b0:ac:ef:8e:48:fd:37:97:4a:66:13:1e:27: 38:a4:df:d7:8a:ad:16:71:1a:48:1f:07:07:b9:23: 62:9f:9e:fa:db:eb:30:d8:05:6f:99:1d:b5:0f:56: 86:53:3f:41:c7:23:27:80:a1:ca:6b:96:4a:86:bd: 4c:ac:54:73:40:ab:96:3a:8b:71:39:49:32:8d:8b: 3e:4a:ad:f5:b0:24:b0:95:13:7b:2b:b2:e9:bd:59: 0f:77:83:59:84:97:24:65:46:be:7b:1f:19:9d:19: aa:cb:61:f4:8b:b2:bf:d1:e0:d0:b2:b6:e1:d9:28: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6B:BF:76:40:84:25:FE:40:24:77:FD:23:64:A1:A6:02:E0:06:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b9a9799-1651-35f5-b1af-66a5fc9d4956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b3:eb:64:94:b2:9c:8d:a6:33:8f:9f:a0:74:d4:d2:2c:3b: c2:06:86:04:1e:b8:b7:01:79:ce:e4:4d:3b:be:5c:49:a1:dd: 0b:a9:16:58:3b:25:d2:71:5e:01:3c:b4:5f:77:b6:46:35:66: ca:69:00:88:b8:6c:71:6f:82:90:39:36:db:d4:a8:aa:50:9b: bf:80:90:35:f6:34:a2:4f:28:20:69:ec:77:11:d4:98:64:e7: 7a:af:cd:2f:db:df:d3:b8:78:ad:62:6d:fa:5f:a0:04:9a:ba: 1d:81:7e:97:74:28:11:68:f9:30:12:e8:f4:bc:d7:8e:dd:b0: 76:69:6d:d1:67:80:4b:52:2e:13:1c:e6:ab:49:f6:76:a8:c7: e8:f2:ef:04:58:42:ab:be:ab:ff:c9:9d:b0:f3:34:0a:55:9f: 7d:1f:5d:f1:b9:7e:3c:31:ab:cf:81:7f:56:14:2e:99:57:c5: e9:af:c5:5e:3f:0f:06:be:d2:62:12:72:33:5d:bd:b6:81:e5: d2:c9:4f:c4:cf:e3:7b:0f:28:dc:51:ed:ec:9d:72:a4:e3:e9: 0a:ab:1c:55:e5:cf:fd:c9:f8:9a:cc:c9:cf:79:ab:f5:0a:47: 42:a7:ea:6d:61:f6:3b:8c:e1:74:f1:1a:a3:a3:eb:78:d3:48: 87:cf:da:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/qNW670/VbwrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OTA0YTI4N2EtNjM2ZC00YWYyLWExOWQtMGMwZGRmNjAzMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiVt7nRrT7uaLX04FQA9ZOD2beV8zZLyD/jt IP/nKHwXQ+zyvY1LwXjCNSWUy/FE3U45r8b7LGCLj4rL4bEZWONjZGnnUMDIuSeP ldozAQrrl3egFBkl3D7DV9CtDQfJ75pL1aS3qGuQ37HshjOZ15kRPRPGf/C5BEPZ kBYc9ijmrIk51gd+S7Cs745I/TeXSmYTHic4pN/Xiq0WcRpIHwcHuSNin5762+sw 2AVvmR21D1aGUz9BxyMngKHKa5ZKhr1MrFRzQKuWOotxOUkyjYs+Sq31sCSwlRN7 K7LpvVkPd4NZhJckZUa+ex8ZnRmqy2H0i7K/0eDQsrbh2ShEdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNrv3ZAhCX+QCR3/SNkoaYC4AZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWI5YTk3OTktMTY1MS0z NWY1LWIxYWYtNjZhNWZjOWQ0OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+z62SUspyNpjOPn6B01NIsO8IGhgQeuLcBec7kTTu+XEmh3QupFlg7 JdJxXgE8tF93tkY1ZsppAIi4bHFvgpA5NtvUqKpQm7+AkDX2NKJPKCBp7HcR1Jhk 53qvzS/b39O4eK1ibfpfoASauh2Bfpd0KBFo+TAS6PS8147dsHZpbdFngEtSLhMc 5qtJ9naox+jy7wRYQqu+q//JnbDzNApVn30fXfG5fjwxq8+Bf1YULplXxemvxV4/ Dwa+0mIScjNdvbaB5dLJT8TP43sPKNxR7eydcqTj6QqrHFXlz/3J+JrMyc95q/UK R0Kn6m1h9juM4XTxGqOj63jTSIfP2iU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:21 2025 by rpki-client