$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f5e5d69-5191-3299-8003-3646e306fde0.roa File: 2f5e5d69-5191-3299-8003-3646e306fde0.roa (raw, json) Hash identifier: oQOunJWinSKLCV41/6cHjda9ohMv/GB/Ot+lmzzvFSY= Subject key identifier: D6:72:3E:EB:A0:B1:28:E0:D1:E5:CD:95:48:A8:5B:AA:94:53:FC:B9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC0B29F0F7D8FBCC3EE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f5e5d69-5191-3299-8003-3646e306fde0.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.223.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c0:b2:9f:0f:7d:8f:bc:c3:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=5976ec67-69c4-4208-a590-34d1fbd9c43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:90:c6:47:3e:9a:62:54:ba:81:0b:02:1d: 64:bf:22:46:99:f2:32:27:e9:cc:09:05:86:a8:28: a5:e1:91:ac:fc:a1:99:d4:e8:9e:b4:e5:61:e1:fd: 67:69:96:cd:4c:94:7f:5e:6a:7f:db:f3:0d:85:56: cb:6c:41:e2:67:c7:2d:aa:55:b6:3d:d8:71:c5:76: 19:bb:2c:94:de:53:46:28:d5:1d:cb:80:f2:f1:37: 10:fb:15:99:ad:28:9d:da:a4:6c:f9:89:f6:b1:14: c2:0b:16:0c:27:af:2d:a1:2a:0a:8b:01:36:ab:6c: d9:bb:d3:d3:ea:ed:75:41:d2:b0:f3:2e:f0:90:8d: 33:f5:fd:84:74:80:e4:ef:80:7a:fc:95:c2:c1:d7: 80:a5:c5:ec:bc:94:c7:41:08:99:0c:a2:22:03:bb: 6e:04:4b:9e:39:3b:bd:35:32:09:63:9c:fd:a6:a1: b4:42:5d:45:6c:a9:d2:36:d7:71:bd:92:7b:f7:9b: a6:6d:78:ae:6f:e4:01:c7:39:f9:93:00:e3:46:0a: af:19:17:26:00:c9:41:9d:4e:60:34:8c:76:c9:25: a4:99:6e:a8:53:14:82:e1:55:a3:7c:d0:7e:50:7c: 67:3d:08:ce:91:44:3c:6f:a1:4f:44:4f:86:d9:94: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:72:3E:EB:A0:B1:28:E0:D1:E5:CD:95:48:A8:5B:AA:94:53:FC:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f5e5d69-5191-3299-8003-3646e306fde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:82:fe:4d:e2:b3:2f:c9:d8:d1:82:20:e8:70:ff:6e:f6:cf: 7e:d4:b2:59:01:61:bf:32:08:02:49:1d:74:4e:ad:53:d7:0e: cd:f5:35:5b:71:d9:8c:2c:1d:9c:be:b7:19:f0:0f:ec:46:f4: b9:f5:07:72:7c:06:33:67:11:7e:19:ac:50:6a:c2:55:ca:5f: 0e:d4:2e:be:94:c0:1f:18:98:7d:41:a8:14:7e:c7:19:99:b1: e3:30:81:ce:f8:08:15:dd:81:ed:32:cf:f9:ef:1d:7c:9b:bd: a5:e1:df:d3:85:97:a3:e0:58:27:8b:56:be:19:ad:19:03:b3: a1:3d:cd:73:e6:c9:ee:14:c0:db:2d:aa:bf:5b:96:f1:ac:80: 30:f8:74:cc:a3:2d:2a:db:93:3a:e0:db:52:1b:e3:83:50:5c: 3c:fe:c1:e3:fc:ff:dd:73:0a:89:15:36:4f:b6:6e:5a:f8:ce: f8:31:11:f4:8a:58:af:2e:74:f5:6f:b9:92:fa:d8:44:ad:0b: ff:24:dd:75:ff:bf:6a:dc:4f:39:0c:1f:b0:38:f5:3e:03:80: 5c:01:73:cf:f7:b8:c0:a0:3b:83:c2:a2:c3:7a:6e:d5:72:09: 7b:9b:ff:7a:5d:8c:85:33:ba:7d:16:19:ec:68:73:9b:6c:e4: 96:ef:64:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28Cynw99j7zD7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTk3NmVjNjctNjljNC00MjA4LWE1OTAtMzRkMWZiZDljNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcaQxkc+mmJUuoELAh1kvyJGmfIyJ+nMCQWG qCil4ZGs/KGZ1OietOVh4f1naZbNTJR/Xmp/2/MNhVbLbEHiZ8ctqlW2PdhxxXYZ uyyU3lNGKNUdy4Dy8TcQ+xWZrSid2qRs+Yn2sRTCCxYMJ68toSoKiwE2q2zZu9PT 6u11QdKw8y7wkI0z9f2EdIDk74B6/JXCwdeApcXsvJTHQQiZDKIiA7tuBEueOTu9 NTIJY5z9pqG0Ql1FbKnSNtdxvZJ795umbXiub+QBxzn5kwDjRgqvGRcmAMlBnU5g NIx2ySWkmW6oUxSC4VWjfNB+UHxnPQjOkUQ8b6FPRE+G2ZSYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZyPuugsSjg0eXNlUioW6qUU/y5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmY1ZTVkNjktNTE5MS0z Mjk5LTgwMDMtMzY0NmUzMDZmZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuC/k3isy/J2NGCIOhw/272z37UslkBYb8yCAJJHXROrVPXDs31NVtx 2YwsHZy+txnwD+xG9Ln1B3J8BjNnEX4ZrFBqwlXKXw7ULr6UwB8YmH1BqBR+xxmZ seMwgc74CBXdge0yz/nvHXybvaXh39OFl6PgWCeLVr4ZrRkDs6E9zXPmye4UwNst qr9blvGsgDD4dMyjLSrbkzrg21Ib44NQXDz+weP8/91zCokVNk+2blr4zvgxEfSK WK8udPVvuZL62EStC/8k3XX/v2rcTzkMH7A49T4DgFwBc8/3uMCgO4PCosN6btVy CXub/3pdjIUzun0WGexoc5ts5JbvZD0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:22 2025 by rpki-client