$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa File: 214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa (raw, json) Hash identifier: mztpaJRoRqKzJk39peGycxhp74zjDu9wwISzUb+yaFU= Subject key identifier: A9:2D:BE:93:A6:50:72:C0:CD:B3:06:CD:47:00:DF:7C:C2:E4:74:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBFAB8BB6F90397FC1D500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.186.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fa:b8:bb:6f:90:39:7f:c1:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=df3985ca-7cac-42be-9e2a-41c77f1d0f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:f5:69:29:2a:70:2e:d6:05:dc:fc:27:93: 71:18:9c:1a:af:83:11:88:2a:e2:14:77:6c:bb:51: 0d:d5:d1:36:8d:3c:b5:84:76:f9:c4:95:64:56:eb: 5d:32:4b:db:0c:73:39:56:ef:8b:6d:de:4a:cf:dd: 26:f2:5b:f9:34:c6:3d:55:f5:d6:0a:e1:26:b1:10: 4c:5d:e5:b9:c9:fd:8a:bc:56:1d:75:4c:32:3b:8d: dc:0f:d8:97:c8:03:10:e0:33:c8:49:2f:9b:bb:5f: 6b:f0:6c:4e:ad:8a:d1:90:9f:0f:ae:32:46:d4:bf: d1:72:4e:20:36:74:e1:c9:1b:0c:49:f9:9b:96:60: e5:6b:c8:22:86:0e:86:d2:2a:80:6d:5e:64:25:fd: 22:d0:2d:f8:1c:1e:5b:3e:1e:d2:66:76:7d:ab:96: 62:89:2e:58:f0:e4:94:77:d6:a2:bf:0b:62:59:31: 92:86:b9:99:4a:37:7e:46:97:f9:7e:5b:fa:fd:52: 9c:6c:0b:cb:8d:c4:62:28:bb:5a:e9:ef:b2:f0:1e: 71:20:da:d0:7c:ea:45:f2:35:17:b8:df:40:e5:46: 52:01:a0:4b:65:54:48:d2:4b:5c:c1:0c:12:ce:44: 35:3e:4f:3b:93:3c:af:1f:24:8a:0a:97:8e:91:e8: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2D:BE:93:A6:50:72:C0:CD:B3:06:CD:47:00:DF:7C:C2:E4:74:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.186.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:07:ab:79:6f:42:67:de:ef:c3:54:06:1f:27:55:b3:81:a5: 16:05:54:5f:32:ba:34:70:9c:41:c9:93:f3:52:e5:a1:2c:fb: a6:8e:aa:26:d1:ed:09:6d:2f:d1:31:a3:ab:5c:50:31:b2:58: a2:a9:0b:f6:34:ad:21:c7:1c:cc:37:1e:59:93:3f:f2:6d:68: 42:f0:fd:8d:cf:ae:40:18:77:96:f3:72:92:07:c4:02:b5:c3: 27:96:a4:69:0d:5e:36:0e:24:62:4b:52:01:fc:fb:f5:95:85: ff:61:28:f6:92:76:2b:9d:dc:d8:5c:d8:ad:a1:78:3e:2a:0d: b2:2d:21:36:6e:8e:0e:9b:bb:d0:ec:c6:f2:65:d0:4f:5a:18: a6:96:9c:48:f5:40:f7:25:84:ba:67:96:95:1a:d3:97:c2:17: 47:cd:e6:16:7c:7f:76:4f:97:5c:a4:25:98:40:9b:db:e8:a1: 3c:c2:b4:75:5f:cf:66:f3:fc:ec:7e:d0:56:8e:cf:6a:ae:8c: a6:bc:39:a1:e9:21:c2:30:18:0e:24:eb:f4:2b:bb:bf:f7:ac: 1d:03:01:1e:7c:06:1c:91:c0:42:19:93:65:7a:a5:85:db:b3: 07:b3:0f:aa:30:7b:e8:a8:9e:53:29:4d:b9:02:58:95:8e:b9: 39:49:b6:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/q4u2+QOX/B1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZGYzOTg1Y2EtN2NhYy00MmJlLTllMmEtNDFjNzdmMWQwZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorD1aSkqcC7WBdz8J5NxGJwar4MRiCriFHds u1EN1dE2jTy1hHb5xJVkVutdMkvbDHM5Vu+Lbd5Kz90m8lv5NMY9VfXWCuEmsRBM XeW5yf2KvFYddUwyO43cD9iXyAMQ4DPISS+bu19r8GxOrYrRkJ8PrjJG1L/Rck4g NnThyRsMSfmblmDla8gihg6G0iqAbV5kJf0i0C34HB5bPh7SZnZ9q5ZiiS5Y8OSU d9aivwtiWTGShrmZSjd+Rpf5flv6/VKcbAvLjcRiKLta6e+y8B5xINrQfOpF8jUX uN9A5UZSAaBLZVRI0ktcwQwSzkQ1Pk87kzyvHySKCpeOkeiYgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKktvpOmUHLAzbMGzUcA33zC5HSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjE0ZDcxY2UtZjdjOC0z Y2IzLTljOTQtMjNhNjc3MjMxOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUHq3lvQmfe78NUBh8nVbOBpRYFVF8yujRwnEHJk/NS5aEs+6aOqibR 7QltL9Exo6tcUDGyWKKpC/Y0rSHHHMw3HlmTP/JtaELw/Y3PrkAYd5bzcpIHxAK1 wyeWpGkNXjYOJGJLUgH8+/WVhf9hKPaSdiud3Nhc2K2heD4qDbItITZujg6bu9Ds xvJl0E9aGKaWnEj1QPclhLpnlpUa05fCF0fN5hZ8f3ZPl1ykJZhAm9vooTzCtHVf z2bz/Ox+0FaOz2qujKa8OaHpIcIwGA4k6/Qru7/3rB0DAR58BhyRwEIZk2V6pYXb swezD6owe+ionlMpTbkCWJWOuTlJtm4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:32 2025 by rpki-client