$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29c96c96-9880-3e02-9fd6-d9a25609f3c8.roa File: 29c96c96-9880-3e02-9fd6-d9a25609f3c8.roa (raw, json) Hash identifier: SXGJJyHCu6MKNN8cihHlLGcP0Puk6CrDkYuv1OxGv2Q= Subject key identifier: DC:D1:91:CF:0D:73:5F:48:E1:03:CF:56:E5:52:08:A0:6A:03:00:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A92063021FE9A6017C74876C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29c96c96-9880-3e02-9fd6-d9a25609f3c8.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.188.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:30:21:fe:9a:60:17:c7:48:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=008ad167-0b23-4948-9aa2-8b229b613c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:ff:bd:e6:04:64:af:06:d5:97:45:a6:d8: e3:c2:ef:36:ee:fd:0e:1d:d3:3f:ca:17:e0:7f:cb: 41:1c:8b:0b:96:fb:df:32:00:ff:95:c6:19:7a:61: 8b:8b:51:7d:80:2d:30:b1:48:a2:06:7e:43:e1:97: 6d:61:34:0e:b3:99:1b:80:72:6e:2d:1a:fe:30:fa: fa:ed:d7:77:e3:ed:e0:79:bb:7b:38:e6:3d:40:05: 4e:22:ac:0f:ea:73:cb:24:39:9d:f5:2d:7f:bf:59: 41:c0:97:88:fc:12:86:84:6b:d6:d2:59:19:b5:12: ec:b9:77:b9:fb:54:fb:f2:47:e3:c1:d6:8d:b9:c2: 6a:10:44:c5:d2:ef:ce:00:4c:d5:98:61:0a:31:79: ea:ca:e8:fd:34:a2:23:0a:f1:03:eb:17:62:13:4b: 95:36:3c:65:10:05:ce:38:bc:33:f2:7d:9e:65:b2: 4c:89:55:7c:56:18:c8:56:5c:e2:87:e4:0e:1e:cd: d3:3d:f8:15:f0:ff:f0:b2:7a:26:9b:7a:c5:40:81: 42:fd:a1:16:ec:70:ad:f9:55:b9:f3:d5:a9:98:66: 42:dc:3f:d2:98:36:3c:c7:8e:eb:b2:55:85:08:c6: 87:35:66:b9:81:69:36:c7:7f:84:48:07:1c:d4:dc: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D1:91:CF:0D:73:5F:48:E1:03:CF:56:E5:52:08:A0:6A:03:00:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29c96c96-9880-3e02-9fd6-d9a25609f3c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0f:f0:00:fd:ed:6c:c4:6c:3d:2a:c9:12:db:82:60:79:82: 1c:01:5a:76:f0:3c:7d:bf:b9:be:c9:5c:56:65:00:84:da:0b: 80:f7:46:5e:ed:06:04:da:d0:8b:61:fd:e7:1f:9e:7e:36:2b: 38:40:f1:67:db:29:ed:f1:0d:3d:18:b8:aa:80:38:7c:99:c2: 39:a7:85:79:08:6b:85:f9:8b:c8:f2:c7:03:4f:39:8b:4c:ea: 6f:72:ae:11:97:4c:30:f2:1a:8f:7a:ac:19:b8:f5:7e:ca:58: 57:8e:81:1d:50:9a:82:b8:9d:fd:d0:b4:88:5b:d0:db:0c:a1: a4:02:2c:41:70:2e:c8:3e:91:6e:0b:39:5c:d8:fe:7d:ec:19: 04:76:45:7d:cd:99:5f:34:84:30:cc:e5:73:70:4c:85:d8:af: 50:bf:b5:7b:7b:b7:7a:f2:1c:0b:e9:2b:17:19:78:0b:47:d1: de:6b:47:47:6a:53:ff:65:e8:3d:6a:78:a2:f8:86:87:5b:bd: b5:f8:14:57:f3:19:4b:21:14:c9:bf:ca:d1:a8:1f:b8:78:72: 87:76:ea:91:f7:e1:4c:d9:47:e9:df:5e:d1:bd:b0:8b:dd:d2: d3:50:1b:ed:7b:19:f4:83:aa:e7:97:5b:52:41:f0:ab:55:27: 96:b5:7d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjAh/ppgF8dIdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk MDA4YWQxNjctMGIyMy00OTQ4LTlhYTItOGIyMjliNjEzYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljL/veYEZK8G1ZdFptjjwu827v0OHdM/yhfg f8tBHIsLlvvfMgD/lcYZemGLi1F9gC0wsUiiBn5D4ZdtYTQOs5kbgHJuLRr+MPr6 7dd34+3gebt7OOY9QAVOIqwP6nPLJDmd9S1/v1lBwJeI/BKGhGvW0lkZtRLsuXe5 +1T78kfjwdaNucJqEETF0u/OAEzVmGEKMXnqyuj9NKIjCvED6xdiE0uVNjxlEAXO OLwz8n2eZbJMiVV8VhjIVlzih+QOHs3TPfgV8P/wsnomm3rFQIFC/aEW7HCt+VW5 89WpmGZC3D/SmDY8x47rslWFCMaHNWa5gWk2x3+ESAcc1NwhRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzRkc8Nc19I4QPPVuVSCKBqAwBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjljOTZjOTYtOTg4MC0z ZTAyLTlmZDYtZDlhMjU2MDlmM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYP8AD97WzEbD0qyRLbgmB5ghwBWnbwPH2/ub7JXFZlAITaC4D3Rl7t BgTa0Ith/ecfnn42KzhA8WfbKe3xDT0YuKqAOHyZwjmnhXkIa4X5i8jyxwNPOYtM 6m9yrhGXTDDyGo96rBm49X7KWFeOgR1QmoK4nf3QtIhb0NsMoaQCLEFwLsg+kW4L OVzY/n3sGQR2RX3NmV80hDDM5XNwTIXYr1C/tXt7t3ryHAvpKxcZeAtH0d5rR0dq U/9l6D1qeKL4hodbvbX4FFfzGUshFMm/ytGoH7h4cod26pH34UzZR+nfXtG9sIvd 0tNQG+17GfSDqueXW1JB8KtVJ5a1fTI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:37 2025 by rpki-client