$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33a53a07-cfb6-3c18-b9ef-d26144b90532.roa File: 33a53a07-cfb6-3c18-b9ef-d26144b90532.roa (raw, json) Hash identifier: poFBPmgRDpF4rlfGWhHi2AbZIrrioTlJE8T+QNkoInI= Subject key identifier: 3F:C4:3E:7D:32:67:DA:AB:23:53:C8:7A:E6:E7:B8:5B:F0:81:E7:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA20A9AD79AC16CA50900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33a53a07-cfb6-3c18-b9ef-d26144b90532.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.201.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a2:0a:9a:d7:9a:c1:6c:a5:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7ff68c9b-d58b-4212-a5d0-8056b48e7af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:fd:3e:c6:a4:04:02:55:c3:f3:a0:7e:bd: 2d:73:20:81:e1:dc:7f:9d:a1:20:c6:fd:aa:82:d2: 17:5a:07:a9:32:a0:a6:bc:2c:83:d9:b0:41:4e:ee: 4b:bf:4a:6f:1e:08:7b:b2:73:7e:05:3b:a6:e5:89: 63:b9:0d:94:ed:22:9d:65:ad:cd:b1:9d:a2:98:dd: b1:8a:0a:0f:78:e7:53:f9:31:9c:5f:a7:1e:25:88: b5:14:5b:fb:f6:c7:c3:0a:4b:6b:7d:24:49:35:73: 7f:2b:ea:87:a1:cd:01:14:44:ab:09:2e:b6:d3:e4: 65:e4:46:72:4a:6c:ed:f5:cb:7e:7e:c6:47:42:bd: 62:1a:2c:74:8c:7d:ad:ff:3b:6a:e5:aa:16:dc:ac: ee:6d:c3:e7:2f:4a:b2:98:93:fb:b9:82:08:b6:aa: ce:0d:c1:8e:e6:cb:1a:ed:29:46:10:74:16:52:d3: df:26:b2:c7:34:85:2d:60:9b:71:73:24:fd:72:b5: 81:25:4e:3b:56:94:02:03:6c:d6:25:4a:1a:3c:b4: 8a:7f:7c:fa:fc:c7:c3:3c:d5:0f:ed:a5:00:8a:aa: af:d5:35:cb:4c:66:fc:57:b9:17:b5:aa:0e:ac:53: 6d:69:a8:1f:59:56:70:90:43:c0:80:1a:54:2d:54: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C4:3E:7D:32:67:DA:AB:23:53:C8:7A:E6:E7:B8:5B:F0:81:E7:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33a53a07-cfb6-3c18-b9ef-d26144b90532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e1:dd:a4:81:7f:71:a7:35:d9:df:65:a1:9b:a0:2e:3f:ee: 67:2c:bb:7b:d5:e6:65:f4:b0:48:c6:ee:33:fc:61:be:69:24: 0f:01:10:69:18:0c:b5:77:49:6b:18:09:15:f9:ee:d6:20:cf: 02:e0:b3:a6:81:a2:72:38:a7:01:8d:e9:fa:68:32:00:c1:35: ae:26:f2:90:83:67:c1:43:66:6a:81:3e:0c:c3:ec:d6:1c:cd: 7f:d5:8c:e4:ba:1b:d6:20:0b:f2:93:bc:88:07:70:cc:92:9e: 46:a1:ad:6d:96:33:80:14:94:85:8f:d9:73:f0:c8:7a:c6:92: a0:90:0a:36:70:0d:2c:61:5d:33:25:ba:6c:93:1b:a9:1f:e7: 25:e8:15:c4:37:8b:67:ab:97:60:c6:62:49:70:dc:71:f9:39: 10:8b:73:90:95:1d:93:67:6f:af:0d:e6:22:1f:bc:e5:f3:a3: 77:c1:18:e3:0c:1a:1f:cc:a9:ca:03:d9:bd:a8:97:d2:0f:d4: 15:96:30:55:09:98:38:84:ad:29:c4:44:aa:0d:ef:81:fa:e7: 7b:97:37:cc:8b:75:65:97:54:ec:89:3d:7f:9d:0c:85:0b:0f: ac:30:39:c1:23:cf:c5:75:3a:f8:e0:5c:8d:c6:a0:f3:ea:1a: f1:a9:ad:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26IKmteawWylCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2ZmNjhjOWItZDU4Yi00MjEyLWE1ZDAtODA1NmI0OGU3YWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAP9PsakBAJVw/Ogfr0tcyCB4dx/naEgxv2q gtIXWgepMqCmvCyD2bBBTu5Lv0pvHgh7snN+BTum5YljuQ2U7SKdZa3NsZ2imN2x igoPeOdT+TGcX6ceJYi1FFv79sfDCktrfSRJNXN/K+qHoc0BFESrCS620+Rl5EZy Smzt9ct+fsZHQr1iGix0jH2t/ztq5aoW3KzubcPnL0qymJP7uYIItqrODcGO5ssa 7SlGEHQWUtPfJrLHNIUtYJtxcyT9crWBJU47VpQCA2zWJUoaPLSKf3z6/MfDPNUP 7aUAiqqv1TXLTGb8V7kXtaoOrFNtaagfWVZwkEPAgBpULVQU6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/EPn0yZ9qrI1PIeubnuFvwgeeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNhNTNhMDctY2ZiNi0z YzE4LWI5ZWYtZDI2MTQ0YjkwNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3h3aSBf3GnNdnfZaGboC4/7mcsu3vV5mX0sEjG7jP8Yb5pJA8BEGkY DLV3SWsYCRX57tYgzwLgs6aBonI4pwGN6fpoMgDBNa4m8pCDZ8FDZmqBPgzD7NYc zX/VjOS6G9YgC/KTvIgHcMySnkahrW2WM4AUlIWP2XPwyHrGkqCQCjZwDSxhXTMl umyTG6kf5yXoFcQ3i2erl2DGYklw3HH5ORCLc5CVHZNnb68N5iIfvOXzo3fBGOMM Gh/MqcoD2b2ol9IP1BWWMFUJmDiErSnERKoN74H653uXN8yLdWWXVOyJPX+dDIUL D6wwOcEjz8V1OvjgXI3GoPPqGvGprSA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:43 2025 by rpki-client