$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23c1a535-e604-35c1-a24f-840497684ca7.roa File: 23c1a535-e604-35c1-a24f-840497684ca7.roa (raw, json) Hash identifier: lhxLqLI+yf6pnTv5PlVvVmivm92jpHRtrSmUp/PuMf4= Subject key identifier: BF:B4:41:87:91:C1:85:19:11:5E:6A:67:B6:D2:37:D9:7A:9A:B2:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE7CA5313B51EB87F0D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23c1a535-e604-35c1-a24f-840497684ca7.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.245.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e7:ca:53:13:b5:1e:b8:7f:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3fb9e2e0-3a63-40e9-be12-83be88b35100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:ce:ae:39:0d:75:57:4c:53:8f:b8:ba:56: ff:82:f7:25:3f:9b:e5:f2:fe:74:b1:bb:f0:75:4a: d0:25:9b:fa:5b:0f:24:c7:9e:f2:d0:d8:2c:41:a4: 75:3e:ae:90:1c:30:c3:7f:eb:31:5e:89:28:09:bd: ad:eb:d6:5e:75:7b:48:ed:73:12:7c:96:64:06:5f: 4d:6e:63:2d:ff:30:9f:85:8c:3e:18:a2:25:f9:41: 78:d8:0f:67:63:20:fa:74:51:4d:1c:0b:6d:cb:d0: bc:79:f2:78:8d:72:f4:24:61:46:80:5b:92:2d:6c: 21:85:f6:42:d6:9d:b9:17:9e:50:15:db:a6:97:b0: 88:94:cb:5c:79:30:26:88:b6:51:f2:59:e5:ce:69: bd:19:d6:fa:fb:d8:27:31:20:e6:8c:0e:d8:67:69: 4b:61:c2:4f:46:5e:f6:aa:df:d1:a3:25:b1:b2:e0: cf:13:a5:94:cd:a5:e8:94:40:0f:67:27:e4:48:6f: b0:4f:07:60:7a:ae:56:7e:f1:f7:79:60:f4:72:f9: ac:89:7d:23:cd:c1:1c:d2:c5:3d:3e:e9:84:9a:1a: 3e:08:85:97:4c:8f:ee:8e:a9:ce:0f:cb:da:12:3e: e1:d9:db:c3:e9:79:6d:54:30:32:6c:ee:48:1d:e6: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B4:41:87:91:C1:85:19:11:5E:6A:67:B6:D2:37:D9:7A:9A:B2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23c1a535-e604-35c1-a24f-840497684ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.245.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:45:af:4b:38:de:56:09:da:77:76:32:24:13:ae:89:25:4c: ff:63:62:d4:c0:28:db:e5:d1:04:5e:46:7a:f0:97:5f:55:af: 53:51:b7:df:6b:aa:20:1b:35:d2:97:7b:d8:c2:5c:35:39:8f: 01:3d:00:58:2b:92:55:24:8e:23:34:86:b3:9e:eb:e6:ec:e0: 75:06:e9:33:ba:74:90:9c:cc:e9:37:a0:99:2d:5d:72:1f:86: bf:84:c9:64:c2:2d:58:6c:14:a3:a3:3a:5d:25:d0:87:d9:26: 0f:54:21:52:74:58:7e:62:eb:86:a9:77:5f:b0:94:1a:13:28: 4d:17:53:f1:be:dd:08:18:3a:67:6a:d2:49:0b:77:c1:0c:ba: 21:f7:16:60:f5:6c:ab:f2:9d:0a:b0:b9:92:0b:c1:f0:fd:35: 2a:b0:43:98:60:79:48:dd:7a:1e:9b:5d:26:18:46:35:00:8d: 8b:18:0b:5c:0b:15:26:04:1e:36:46:fa:3d:f2:c6:c3:34:73: 77:35:ac:97:d5:eb:4b:91:fc:98:cb:d3:11:e9:fe:1d:ca:b1: 75:e0:47:9e:16:c2:0b:94:30:c4:1f:c7:47:3b:6f:5e:9e:40: 21:98:8c:83:aa:b3:9e:3e:77:66:5e:68:cb:dc:cb:c4:fc:75: 63:26:52:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+fKUxO1Hrh/DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk M2ZiOWUyZTAtM2E2My00MGU5LWJlMTItODNiZTg4YjM1MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnjOrjkNdVdMU4+4ulb/gvclP5vl8v50sbvw dUrQJZv6Ww8kx57y0NgsQaR1Pq6QHDDDf+sxXokoCb2t69ZedXtI7XMSfJZkBl9N bmMt/zCfhYw+GKIl+UF42A9nYyD6dFFNHAtty9C8efJ4jXL0JGFGgFuSLWwhhfZC 1p25F55QFduml7CIlMtceTAmiLZR8lnlzmm9Gdb6+9gnMSDmjA7YZ2lLYcJPRl72 qt/RoyWxsuDPE6WUzaXolEAPZyfkSG+wTwdgeq5WfvH3eWD0cvmsiX0jzcEc0sU9 PumEmho+CIWXTI/ujqnOD8vaEj7h2dvD6XltVDAybO5IHeZOvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+0QYeRwYUZEV5qZ7bSN9l6mrKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNjMWE1MzUtZTYwNC0z NWMxLWEyNGYtODQwNDk3Njg0Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/WgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlFr0s43lYJ2nd2MiQTroklTP9jYtTAKNvl0QReRnrwl19Vr1NRt99r qiAbNdKXe9jCXDU5jwE9AFgrklUkjiM0hrOe6+bs4HUG6TO6dJCczOk3oJktXXIf hr+EyWTCLVhsFKOjOl0l0IfZJg9UIVJ0WH5i64apd1+wlBoTKE0XU/G+3QgYOmdq 0kkLd8EMuiH3FmD1bKvynQqwuZILwfD9NSqwQ5hgeUjdeh6bXSYYRjUAjYsYC1wL FSYEHjZG+j3yxsM0c3c1rJfV60uR/JjL0xHp/h3KsXXgR54WwguUMMQfx0c7b16e QCGYjIOqs54+d2ZeaMvcy8T8dWMmUiE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:57 2025 by rpki-client