$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa File: 33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa (raw, json) Hash identifier: UKBeUrTO96Z/qvVogi08ifKcC6A+Ej/UUnl7WftaGKI= Subject key identifier: 2E:3C:01:98:3B:87:58:F4:FD:9D:F1:86:10:15:CC:8A:8F:CE:2D:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8A61B1FB294845FD3FA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.195.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8a:61:b1:fb:29:48:45:fd:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b5f59b92-fa7f-4264-8b8d-ae168dd8588e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:a7:61:c2:db:59:e5:49:f2:74:0e:87:b5: 4e:06:e1:0f:7f:b9:f6:d8:01:87:22:62:40:d4:63: 9c:f8:32:cb:93:b8:b8:71:fb:52:7e:cb:99:7b:70: 25:17:dd:19:8d:5e:5e:6c:05:56:75:8f:b8:4f:52: 28:0f:0e:a8:50:92:ad:d0:b3:bf:05:df:a5:4b:54: 86:09:42:6a:c3:6b:bb:29:c4:e5:a8:61:ae:ff:79: 13:59:96:79:c8:db:1b:ff:1b:41:0d:e1:91:e1:4a: 3a:16:c1:f5:cb:24:a8:a3:99:61:5e:6c:8a:54:13: dd:66:0d:d5:67:d1:7f:47:77:a5:1a:70:58:51:d3: 69:a3:3a:e9:a1:1b:96:bf:5d:ce:ad:b9:cc:92:1c: 47:aa:fd:53:9b:b0:5f:3d:33:93:82:21:87:58:cd: e0:93:e7:77:70:f5:7a:53:a0:f9:9d:79:02:a9:f5: 5b:6f:65:10:4c:ad:60:75:5d:7b:5b:9c:79:88:b0: d4:99:77:26:d5:ec:8c:da:cb:3c:eb:c3:f3:8d:b3: e1:52:ff:73:9d:b2:e5:c0:92:d7:a6:8d:91:80:c7: d0:a9:35:de:9e:f7:c5:06:1a:38:a1:9a:9c:a8:28: 7a:62:60:0c:b3:ff:2b:d0:e6:1e:8b:2c:3f:f1:ea: 0e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3C:01:98:3B:87:58:F4:FD:9D:F1:86:10:15:CC:8A:8F:CE:2D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0c:dc:b9:39:03:97:ef:7a:44:23:2b:c5:d8:88:4e:ce:46: 5b:25:05:03:a0:b4:d4:c1:7e:19:5c:a1:3b:e0:23:20:b7:0b: cc:43:b1:7c:78:67:a5:b8:a6:b2:3b:c8:c2:e0:55:64:3e:fa: 9c:56:01:a5:7f:6c:11:14:93:e3:19:9e:a3:0f:2d:1c:d4:6a: cf:b1:9a:4f:29:66:b9:f7:5f:6c:c7:4f:ae:e5:d7:a4:72:c5: 7f:01:3e:84:42:e4:23:5f:c9:22:7e:67:79:d3:25:fb:a6:1b: 55:3d:44:6e:3b:a0:5b:14:b3:ce:f3:0b:ef:1d:0f:51:40:92: a0:d1:9d:f9:f0:be:80:9c:0d:15:26:1d:86:35:6f:a2:83:b1: 36:02:e5:ad:2a:82:28:ac:69:09:cf:f2:8f:2f:02:7e:8f:9c: a1:4b:3a:4e:7b:26:d0:3b:f2:71:47:0d:28:0c:1a:a5:7b:87: 2f:8d:74:9f:09:8b:83:09:af:31:00:2b:cf:e9:ff:83:d3:ea: 63:be:bd:77:16:5d:75:b1:40:50:f9:59:e8:1f:05:30:bd:63: 49:77:41:51:0a:bd:ec:90:37:5b:b6:d1:47:b6:f0:28:7a:14: e9:3a:87:91:13:9c:72:d2:3f:14:40:3f:32:6c:22:32:11:48: 5e:93:09:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24phsfspSEX9P6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjVmNTliOTItZmE3Zi00MjY0LThiOGQtYWUxNjhkZDg1ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB2nYcLbWeVJ8nQOh7VOBuEPf7n22AGHImJA 1GOc+DLLk7i4cftSfsuZe3AlF90ZjV5ebAVWdY+4T1IoDw6oUJKt0LO/Bd+lS1SG CUJqw2u7KcTlqGGu/3kTWZZ5yNsb/xtBDeGR4Uo6FsH1yySoo5lhXmyKVBPdZg3V Z9F/R3elGnBYUdNpozrpoRuWv13OrbnMkhxHqv1Tm7BfPTOTgiGHWM3gk+d3cPV6 U6D5nXkCqfVbb2UQTK1gdV17W5x5iLDUmXcm1eyM2ss868PzjbPhUv9znbLlwJLX po2RgMfQqTXenvfFBho4oZqcqCh6YmAMs/8r0OYeiyw/8eoO+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC48AZg7h1j0/Z3xhhAVzIqPzi0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjMjNkZjQtMjU5Yi0z ZWY3LTg3YzctNWIwYzNlYTAyNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8MwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4M3Lk5A5fvekQjK8XYiE7ORlslBQOgtNTBfhlcoTvgIyC3C8xDsXx4 Z6W4prI7yMLgVWQ++pxWAaV/bBEUk+MZnqMPLRzUas+xmk8pZrn3X2zHT67l16Ry xX8BPoRC5CNfySJ+Z3nTJfumG1U9RG47oFsUs87zC+8dD1FAkqDRnfnwvoCcDRUm HYY1b6KDsTYC5a0qgiisaQnP8o8vAn6PnKFLOk57JtA78nFHDSgMGqV7hy+NdJ8J i4MJrzEAK8/p/4PT6mO+vXcWXXWxQFD5WegfBTC9Y0l3QVEKveyQN1u20Ue28Ch6 FOk6h5ETnHLSPxRAPzJsIjIRSF6TCdY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:19 2025 by rpki-client