$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21059ea4-43ad-3d08-90a7-337f428bf565.roa File: 21059ea4-43ad-3d08-90a7-337f428bf565.roa (raw, json) Hash identifier: Ior8Q9SaHzC74z23NbD8tB8CL6zokLywb/5T5HBhG60= Subject key identifier: CF:99:6A:C6:C9:A9:34:AC:03:9A:CC:6A:AF:F7:D8:6E:C5:EF:45:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB2F684FF0FB42E9CE560 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21059ea4-43ad-3d08-90a7-337f428bf565.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.225.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b2:f6:84:ff:0f:b4:2e:9c:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2f934c50-84a5-4e52-883b-157bb8cb2f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:9c:89:ca:40:0a:92:7d:42:79:0f:7a:a4: bc:52:c3:67:4a:42:7b:05:5b:26:86:01:4c:0b:b2: 76:22:53:ec:fc:17:31:0c:40:d0:d8:06:6e:98:6e: 05:c9:02:de:35:ea:7a:46:a1:04:b7:a8:26:70:f5: 27:84:7d:35:a2:b7:69:e3:d0:c9:03:0d:02:57:bc: 12:cf:48:61:d6:58:bc:2c:30:e7:a3:36:1b:ad:df: 40:c3:be:2b:40:9d:67:7b:3f:17:39:e9:17:06:61: af:f3:63:f0:4a:6f:43:95:e3:ee:43:b8:44:95:8f: 85:41:12:ba:7f:97:3b:b3:eb:12:c4:71:d9:8f:29: f6:45:95:e2:2e:35:ad:15:12:2a:b6:72:f0:1a:67: a2:0c:b8:c5:90:9d:25:20:af:62:98:1c:8b:15:f9: 8c:ae:94:8e:2c:b4:71:74:65:0c:9c:6a:92:40:13: 60:1b:67:f2:60:a8:4a:c3:fd:0d:ca:20:e1:23:5a: 67:0c:60:1c:c4:de:03:e0:dc:74:c7:a0:0c:93:9e: fc:7e:37:3a:e9:0f:8d:96:5a:f0:d5:43:63:1a:f9: 18:5b:17:99:15:89:d8:15:e7:e6:35:eb:ee:69:de: 1c:0c:fe:ac:6e:d5:78:c6:63:6f:f3:b5:d7:61:ab: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:99:6A:C6:C9:A9:34:AC:03:9A:CC:6A:AF:F7:D8:6E:C5:EF:45:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21059ea4-43ad-3d08-90a7-337f428bf565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d1:9d:d7:75:5d:e1:b5:30:b4:4e:1d:1d:70:e6:ad:03:2d: 62:c1:dc:eb:dc:a2:e5:ba:6f:c9:77:e1:78:34:c6:2f:03:8a: ce:2b:62:f4:98:17:32:bb:cf:46:4e:81:53:f0:83:24:2a:39: 38:4c:61:f6:94:69:2e:0b:1e:64:82:28:1a:c5:4b:bd:e7:68: a0:0a:06:79:fa:39:f2:51:44:5d:40:4c:7e:1c:9b:a0:90:c3: 09:2b:b5:93:07:83:69:d2:e5:2a:ff:8c:8e:94:3b:38:95:71: 14:a7:d4:97:92:37:24:65:48:75:71:7d:e5:e5:e3:b1:1e:b9: 69:8c:fc:77:a8:db:47:c0:5c:64:39:84:74:e3:e9:c4:4e:33: f3:eb:1a:2c:84:4b:1a:f2:46:7d:21:89:0c:d9:c9:97:f7:62: c0:23:b6:f7:59:05:3f:3e:05:a4:ce:75:63:fa:14:b2:b0:c3: be:49:35:1a:aa:18:9d:8e:e1:bb:52:01:68:ea:85:2c:62:99: 1f:ac:2b:89:9c:67:b3:db:ee:32:a3:88:04:86:dd:3a:d4:a3: 03:0f:f6:d8:d2:f9:4b:a4:b8:72:5c:cd:80:a8:b6:91:c7:c5: 63:56:36:65:1a:d8:74:75:a1:a5:42:3d:ec:bf:e3:db:1a:fd: 18:99:a6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27L2hP8PtC6c5WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmY5MzRjNTAtODRhNS00ZTUyLTg4M2ItMTU3YmI4Y2IyZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZOcicpACpJ9QnkPeqS8UsNnSkJ7BVsmhgFM C7J2IlPs/BcxDEDQ2AZumG4FyQLeNep6RqEEt6gmcPUnhH01ordp49DJAw0CV7wS z0hh1li8LDDnozYbrd9Aw74rQJ1nez8XOekXBmGv82PwSm9DlePuQ7hElY+FQRK6 f5c7s+sSxHHZjyn2RZXiLjWtFRIqtnLwGmeiDLjFkJ0lIK9imByLFfmMrpSOLLRx dGUMnGqSQBNgG2fyYKhKw/0NyiDhI1pnDGAcxN4D4Nx0x6AMk578fjc66Q+Nllrw 1UNjGvkYWxeZFYnYFefmNevuad4cDP6sbtV4xmNv87XXYast9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+ZasbJqTSsA5rMaq/32G7F70VPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjEwNTllYTQtNDNhZC0z ZDA4LTkwYTctMzM3ZjQyOGJmNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+EgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDRndd1XeG1MLROHR1w5q0DLWLB3OvcouW6b8l34Xg0xi8Dis4rYvSY FzK7z0ZOgVPwgyQqOThMYfaUaS4LHmSCKBrFS73naKAKBnn6OfJRRF1ATH4cm6CQ wwkrtZMHg2nS5Sr/jI6UOziVcRSn1JeSNyRlSHVxfeXl47EeuWmM/Heo20fAXGQ5 hHTj6cROM/PrGiyESxryRn0hiQzZyZf3YsAjtvdZBT8+BaTOdWP6FLKww75JNRqq GJ2O4btSAWjqhSximR+sK4mcZ7Pb7jKjiASG3TrUowMP9tjS+UukuHJczYCotpHH xWNWNmUa2HR1oaVCPey/49sa/RiZpgk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:41 2025 by rpki-client