$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa File: 2a859e1d-29ec-3edd-b158-d4178e261108.roa (raw, json) Hash identifier: bwfjBHzH+ZjnyuwHkTB37A+mBoxwMgzWMJHlXPyYgZc= Subject key identifier: 32:DA:51:AF:46:55:4F:37:CE:FB:27:E8:9D:C7:80:D2:EC:86:3F:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE4B7C222FD0C93D46080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.222.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e4:b7:c2:22:fd:0c:93:d4:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=402c0697-261e-46ea-a33f-bebe2dd20c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:ad:f2:db:9e:10:1b:dc:86:16:c5:2a:bc: 0a:af:a5:a5:92:76:e2:ca:89:0e:15:07:b3:e2:35: 84:35:0f:e7:7d:fa:fa:38:b3:d3:a7:f7:0a:42:37: 15:42:ec:0a:2b:e1:0c:4a:fd:d7:9c:dd:07:2f:46: 6a:f4:cd:4b:cc:3d:92:9e:26:a3:91:16:6e:23:9e: ef:17:7c:ea:fb:3e:27:19:c0:92:fd:d3:b3:5c:08: 4b:25:4a:ee:cb:83:29:7b:6d:7d:99:eb:c1:96:48: 2c:9a:bb:cf:fa:f9:77:90:27:d5:e9:c9:60:80:a9: 11:5b:10:ff:8c:49:dd:ed:5d:4a:c4:2f:d1:86:af: 1e:d6:98:1f:cd:53:9d:de:14:81:58:55:67:d0:46: 78:72:d7:cc:23:43:66:4b:e5:a9:af:3b:0c:6a:21: 51:c1:87:c7:f0:29:8f:ca:bd:82:d0:c8:98:81:35: b8:8b:0e:be:c5:22:2f:da:04:78:bc:cb:10:31:f9: 51:a1:59:b3:a0:51:e4:83:d9:85:1d:f1:5c:23:d2: 74:99:b1:5a:94:39:9e:75:a1:0d:de:da:b2:32:3b: 87:b8:76:3f:0e:6d:24:bb:39:e3:76:2d:42:84:0e: 6b:cf:b8:74:d8:7f:ab:0b:e7:52:c6:2a:82:60:9e: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DA:51:AF:46:55:4F:37:CE:FB:27:E8:9D:C7:80:D2:EC:86:3F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:61:14:b3:14:e8:bb:18:85:a9:c6:83:12:e4:ef:bf:c7:3b: 3d:34:5b:5a:1f:03:44:bd:c5:65:e1:f5:25:57:f1:ac:c0:6f: 75:fc:42:c3:db:ba:a0:b9:be:df:81:2e:e4:ab:2a:f0:1e:d0: 2d:07:57:5f:e3:bc:15:9d:52:34:3c:8f:9a:08:9e:5a:77:bb: 34:f9:2d:67:05:3d:6b:a5:59:bc:81:c0:28:fe:2e:c0:7f:cf: 6a:1d:41:96:bd:46:86:46:b8:c9:bf:7f:30:d3:e9:54:b0:90: a7:bd:f4:3e:a7:8e:c9:d9:3c:93:2a:e9:bd:90:f9:fa:57:43: ef:79:5f:50:96:19:87:2c:75:df:0f:cb:a4:28:46:4c:ea:f7: 97:70:54:8a:9e:ff:3a:bc:7a:6d:4b:ae:0a:44:67:36:d9:39: 59:27:86:4f:ec:9a:b1:c9:54:01:85:99:0d:9f:e7:39:a4:89: c5:6c:87:73:ec:97:c1:8c:72:e8:94:0e:2e:47:fa:e7:a1:f5: f4:b2:73:0a:ed:45:22:10:0c:b6:2b:83:b8:20:45:da:98:63: 3f:76:bf:ea:bf:4d:c6:3e:af:c4:27:b2:22:76:23:f9:65:89: 69:07:b3:10:06:ee:3d:b9:af:7e:64:2a:18:9e:26:79:ba:9b: c7:33:10:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+S3wiL9DJPUYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDAyYzA2OTctMjYxZS00NmVhLWEzM2YtYmViZTJkZDIwYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pyt8tueEBvchhbFKrwKr6WlknbiyokOFQez 4jWENQ/nffr6OLPTp/cKQjcVQuwKK+EMSv3XnN0HL0Zq9M1LzD2SniajkRZuI57v F3zq+z4nGcCS/dOzXAhLJUruy4Mpe219mevBlkgsmrvP+vl3kCfV6clggKkRWxD/ jEnd7V1KxC/Rhq8e1pgfzVOd3hSBWFVn0EZ4ctfMI0NmS+WprzsMaiFRwYfH8CmP yr2C0MiYgTW4iw6+xSIv2gR4vMsQMflRoVmzoFHkg9mFHfFcI9J0mbFalDmedaEN 3tqyMjuHuHY/Dm0kuznjdi1ChA5rz7h02H+rC+dSxiqCYJ6BjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLaUa9GVU83zvsn6J3HgNLshj/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmE4NTllMWQtMjllYy0z ZWRkLWIxNTgtZDQxNzhlMjYxMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9hFLMU6LsYhanGgxLk77/HOz00W1ofA0S9xWXh9SVX8azAb3X8QsPb uqC5vt+BLuSrKvAe0C0HV1/jvBWdUjQ8j5oInlp3uzT5LWcFPWulWbyBwCj+LsB/ z2odQZa9RoZGuMm/fzDT6VSwkKe99D6njsnZPJMq6b2Q+fpXQ+95X1CWGYcsdd8P y6QoRkzq95dwVIqe/zq8em1LrgpEZzbZOVknhk/smrHJVAGFmQ2f5zmkicVsh3Ps l8GMcuiUDi5H+ueh9fSycwrtRSIQDLYrg7ggRdqYYz92v+q/TcY+r8QnsiJ2I/ll iWkHsxAG7j25r35kKhieJnm6m8czEN0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:39:07 2025 by rpki-client