$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa File: 2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa (raw, json) Hash identifier: u5nKfqNuiY3D4Wq+0xIEx+8vXzPFPS/WT92DB6yKzI4= Subject key identifier: 84:CB:8C:CA:F6:84:2E:C4:DB:24:89:EA:3A:8D:9F:70:ED:EE:DD:A0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB96A3F1FB71AEBEFCCB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.204.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:96:a3:f1:fb:71:ae:be:fc:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=376b1efe-2963-4f37-b9d7-1e3dba124767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:86:5f:cb:fc:a9:91:2e:a2:4a:3a:d6:6b: bc:7d:2c:7a:d2:ad:05:8c:d8:18:f3:d0:5c:2f:fa: 2f:0f:1c:0e:36:b0:da:8f:b6:42:75:a8:85:b5:e7: 6c:d1:9c:38:a1:ef:12:2d:3d:45:49:d0:64:b1:4b: 82:c7:ec:bc:08:50:cd:a3:9c:de:7f:2d:a9:d5:13: b4:07:27:a9:83:59:02:2a:b6:7d:65:4b:dc:48:ee: 9d:59:4c:af:39:36:ee:c6:d0:e0:f8:e1:3c:72:cf: e3:e2:a6:86:ad:98:b3:93:3e:56:18:ee:e3:f1:12: ce:ed:2b:cc:ac:51:35:39:23:91:b5:2c:59:77:fb: a3:39:f8:dc:0e:1d:81:33:66:1f:1f:61:af:fe:a4: 36:bb:e3:91:5c:a3:ad:4d:dc:78:97:3e:2e:82:1b: 03:78:3e:aa:64:8b:ef:7f:95:60:fe:4e:36:70:9a: 80:9f:03:f3:c7:56:ad:db:24:dc:a6:a4:10:2f:d5: 48:dc:b4:e2:9a:37:a3:04:35:83:80:50:ee:4b:50: 45:6d:6d:ea:d9:aa:f5:d7:1f:d0:84:bb:21:37:6e: 41:75:54:99:fe:95:42:88:be:4e:c2:f0:64:35:4c: fd:c3:a4:82:a8:e3:28:1f:b9:c6:23:15:95:43:98: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:8C:CA:F6:84:2E:C4:DB:24:89:EA:3A:8D:9F:70:ED:EE:DD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5c:bb:e3:21:55:b7:88:00:87:cf:42:db:1c:b0:df:49:30: 69:7c:0e:ff:9c:57:68:be:71:7d:0c:8d:e4:e3:61:b8:1b:b3: 0e:27:b5:93:90:4f:ee:05:f8:35:1b:89:9a:3d:d1:67:6c:0b: d6:5b:fd:eb:2b:30:7b:3e:b4:57:bd:a9:35:fd:94:08:06:00: f0:5f:b4:81:e6:5d:22:9a:14:87:e2:9d:99:df:f5:ea:23:cb: 64:fd:8f:80:36:a4:04:d5:0f:53:03:ff:31:8e:e8:5b:5f:f1: 23:fe:07:78:05:5f:1b:53:8f:b4:b7:32:8b:de:cc:0c:04:43: 7d:07:f2:33:bc:aa:07:48:7f:95:6f:4f:37:d1:05:16:e9:4b: ba:fb:96:c7:23:8c:32:e6:cc:a9:63:d7:42:d2:05:c0:2e:d7: f9:85:87:21:37:4d:70:07:f6:24:25:c2:c5:99:2d:6c:22:9d: 93:81:04:74:50:02:5b:01:40:53:e9:15:70:60:b8:e1:f5:b5: 71:57:9c:3b:3a:0d:a8:e2:97:44:51:ed:4f:95:b2:0c:81:3a: 1b:a9:6f:e5:4b:4c:c0:13:e5:51:a3:a5:80:fd:b5:96:2c:d2: f1:ea:2d:ee:7c:56:e0:4f:c4:20:4c:c1:bc:e7:79:f6:98:74: f0:9b:cf:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25aj8ftxrr78y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Mzc2YjFlZmUtMjk2My00ZjM3LWI5ZDctMWUzZGJhMTI0NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuKGX8v8qZEuoko61mu8fSx60q0FjNgY89Bc L/ovDxwONrDaj7ZCdaiFteds0Zw4oe8SLT1FSdBksUuCx+y8CFDNo5zefy2p1RO0 Byepg1kCKrZ9ZUvcSO6dWUyvOTbuxtDg+OE8cs/j4qaGrZizkz5WGO7j8RLO7SvM rFE1OSORtSxZd/ujOfjcDh2BM2YfH2Gv/qQ2u+ORXKOtTdx4lz4ughsDeD6qZIvv f5Vg/k42cJqAnwPzx1at2yTcpqQQL9VI3LTimjejBDWDgFDuS1BFbW3q2ar11x/Q hLshN25BdVSZ/pVCiL5OwvBkNUz9w6SCqOMoH7nGIxWVQ5j1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITLjMr2hC7E2ySJ6jqNn3Dt7t2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmMzYjlkMDgtMWYyZi0z NDQ0LTkyZmItYmNjZDFlNzZlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZcu+MhVbeIAIfPQtscsN9JMGl8Dv+cV2i+cX0MjeTjYbgbsw4ntZOQ T+4F+DUbiZo90WdsC9Zb/esrMHs+tFe9qTX9lAgGAPBftIHmXSKaFIfinZnf9eoj y2T9j4A2pATVD1MD/zGO6Ftf8SP+B3gFXxtTj7S3MovezAwEQ30H8jO8qgdIf5Vv TzfRBRbpS7r7lscjjDLmzKlj10LSBcAu1/mFhyE3TXAH9iQlwsWZLWwinZOBBHRQ AlsBQFPpFXBguOH1tXFXnDs6Dajil0RR7U+VsgyBOhupb+VLTMAT5VGjpYD9tZYs 0vHqLe58VuBPxCBMwbznefaYdPCbzxI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:29:31 2025 by rpki-client