$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa File: 238ca3a5-8db5-3863-9fea-5084e4dd311e.roa (raw, json) Hash identifier: U8fYncKsQ/kvshbBMPydop+r2/icw0Ne+ryVB5Pc5hU= Subject key identifier: B0:CB:84:D3:55:CA:2A:A1:36:65:37:5A:A3:77:D1:D4:B5:9C:AF:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBDDD3BFF90985032FC000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.189.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:dd:d3:bf:f9:09:85:03:2f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9a80ab6a-2d7c-44d4-a15e-6aba30777859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:d3:f4:7e:37:5b:54:2f:45:0b:49:a5:9e: 1f:5f:7d:af:e9:e2:80:c7:1f:45:d8:4d:db:75:77: 5c:87:08:bd:b3:e4:14:4a:b0:b1:ce:f8:22:3c:07: d2:23:83:0d:46:2d:13:a0:a4:4d:75:27:06:b6:be: 25:e2:f2:eb:80:3f:c0:e2:f9:24:6d:f8:1c:9f:a3: e7:20:9f:3f:a3:df:20:c1:8e:bb:5d:56:25:f6:ce: 49:57:57:fa:76:d7:0a:8c:83:e0:b1:a7:ed:ed:e5: 12:00:ed:55:2d:cd:0c:69:ae:de:3c:03:cc:30:61: 77:d7:c0:ca:fd:25:ce:62:31:41:6b:2a:ee:0f:e2: 24:7c:ec:8a:60:53:4a:0c:74:cb:88:2c:bb:69:22: 9d:71:1b:28:d4:36:a5:8f:d3:77:21:20:d9:51:a9: 45:bc:1b:1b:a0:51:01:d7:de:82:b6:21:7f:78:6c: 05:5c:ff:31:db:bf:c9:bf:cb:f5:4c:e6:09:1a:0e: 98:2f:13:37:0c:09:74:bd:03:b5:ab:c2:f2:f4:be: 5a:6d:8f:83:66:3b:09:1c:60:19:27:69:76:b7:5e: 08:f6:e3:ae:b4:1c:1c:a7:6d:72:68:fd:2a:45:37: 71:1d:a0:56:c0:9a:49:08:a3:ee:0b:38:c3:34:85: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CB:84:D3:55:CA:2A:A1:36:65:37:5A:A3:77:D1:D4:B5:9C:AF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:77:19:52:98:97:83:62:af:9a:8f:7d:9f:25:d3:7b:b4:de: f1:ea:76:42:36:ee:55:8d:2e:4b:46:5d:ee:82:32:68:a1:69: 57:3a:fa:dd:b7:59:05:7e:1f:cb:b2:e2:f1:34:2b:40:f1:ba: 9a:d1:cd:54:ad:6a:8b:cf:e3:d9:f7:2f:a4:f8:97:00:9a:ea: 3a:67:7d:0a:7e:2b:e3:d3:4f:92:7a:8e:2a:80:b0:13:6d:49: 2b:f1:73:d3:76:7f:b9:5b:be:30:d7:19:f0:39:fc:5b:37:37: dd:6d:19:24:dc:a5:30:40:18:34:73:c5:10:a7:9c:fc:5d:e0: 90:90:da:0d:14:2e:c2:ff:35:da:3b:03:be:ad:36:f0:b8:37: 6d:98:b4:6d:13:35:9a:8b:ea:bf:d2:54:c6:ad:72:56:a3:b7: 94:22:18:d7:83:93:f9:0b:a1:04:f0:a5:fb:1b:7d:07:20:d6: 77:b7:82:67:a4:b0:8e:4b:c9:ec:5f:9c:9b:43:de:0b:d6:f2: 99:bc:74:fd:f3:eb:1f:47:90:09:5a:5d:6a:c7:3c:c7:2f:ff: 20:e5:fa:cc:6b:c3:ec:e0:d8:b7:8a:76:30:f9:87:10:e4:3d: d1:7a:40:c6:0f:f5:b6:5c:f5:10:9f:f5:f2:45:48:f7:98:61: 53:58:2c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG293Tv/kJhQMvwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWE4MGFiNmEtMmQ3Yy00NGQ0LWExNWUtNmFiYTMwNzc3ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGDT9H43W1QvRQtJpZ4fX32v6eKAxx9F2E3b dXdchwi9s+QUSrCxzvgiPAfSI4MNRi0ToKRNdScGtr4l4vLrgD/A4vkkbfgcn6Pn IJ8/o98gwY67XVYl9s5JV1f6dtcKjIPgsaft7eUSAO1VLc0Maa7ePAPMMGF318DK /SXOYjFBayruD+IkfOyKYFNKDHTLiCy7aSKdcRso1Dalj9N3ISDZUalFvBsboFEB 196CtiF/eGwFXP8x27/Jv8v1TOYJGg6YLxM3DAl0vQO1q8Ly9L5abY+DZjsJHGAZ J2l2t14I9uOutBwcp21yaP0qRTdxHaBWwJpJCKPuCzjDNIVS5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDLhNNVyiqhNmU3WqN30dS1nK+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM4Y2EzYTUtOGRiNS0z ODYzLTlmZWEtNTA4NGU0ZGQzMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI70AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV3GVKYl4Nir5qPfZ8l03u03vHqdkI27lWNLktGXe6CMmihaVc6+t23 WQV+H8uy4vE0K0DxuprRzVStaovP49n3L6T4lwCa6jpnfQp+K+PTT5J6jiqAsBNt SSvxc9N2f7lbvjDXGfA5/Fs3N91tGSTcpTBAGDRzxRCnnPxd4JCQ2g0ULsL/Ndo7 A76tNvC4N22YtG0TNZqL6r/SVMatclajt5QiGNeDk/kLoQTwpfsbfQcg1ne3gmek sI5LyexfnJtD3gvW8pm8dP3z6x9HkAlaXWrHPMcv/yDl+sxrw+zg2LeKdjD5hxDk PdF6QMYP9bZc9RCf9fJFSPeYYVNYLFM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:27 2025 by rpki-client