$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33efd083-9dff-3773-a9c9-fb53a4c0df82.roa File: 33efd083-9dff-3773-a9c9-fb53a4c0df82.roa (raw, json) Hash identifier: DiYoi9dg+ANVvPiemslaYlC0Bh9x91lveOLvwsi+f5E= Subject key identifier: AA:84:74:CE:7E:14:F0:08:19:FC:9B:A9:E7:55:91:61:BB:AC:0E:06 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB90D0A31CF35F243C6180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33efd083-9dff-3773-a9c9-fb53a4c0df82.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.194.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:90:d0:a3:1c:f3:5f:24:3c:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4f5e9af2-cf5b-4a48-b186-964ffef5b7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:03:ec:02:1d:e9:4f:bf:78:7c:a8:a1:1e: 63:cb:d4:6e:f0:80:c2:d6:9b:79:45:fe:9b:af:89: 0f:b5:fb:3c:09:dc:72:a9:4b:5a:54:7d:a2:0a:47: 37:13:c9:4c:92:e1:ab:e6:d3:93:d9:45:c7:71:37: de:1b:3f:0c:56:ea:8b:b1:89:7e:4a:45:f0:ce:0c: 07:a1:65:99:c7:8d:dc:35:a7:76:f0:e8:3a:d0:51: d2:8f:f3:d8:88:ee:89:b4:64:74:96:b7:b4:7b:38: 44:8c:5d:75:1b:d0:5c:a1:54:3f:fd:d1:56:fa:1f: 9a:0d:04:5f:23:d7:2a:d2:6f:f4:83:9f:20:05:58: 4c:20:9c:e5:b8:50:db:fd:67:8d:dc:1d:9e:a6:3b: 36:6c:d3:26:c0:db:49:f4:e3:9c:99:9d:15:58:53: e5:0f:89:97:d2:62:45:4d:4f:0c:2e:81:d5:65:4d: 03:b4:a3:e8:80:d2:79:b2:8f:60:7e:f3:93:10:11: e2:0f:2b:88:16:ef:b3:e2:83:dc:2c:52:0b:94:cd: 46:1d:e8:97:72:0c:0e:59:70:6b:4b:37:c7:ac:ea: 9f:63:9b:c7:89:1b:47:da:5b:cd:9f:84:65:74:86: c1:ce:b7:ff:db:3c:60:18:14:66:a3:e3:85:92:7a: 23:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:84:74:CE:7E:14:F0:08:19:FC:9B:A9:E7:55:91:61:BB:AC:0E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33efd083-9dff-3773-a9c9-fb53a4c0df82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.194.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:26:93:56:29:0a:7f:7e:4d:91:a5:bb:19:97:3b:19:07:1f: eb:76:9a:bb:a9:ca:4a:a7:01:62:25:a8:15:46:65:33:5a:6d: f4:5c:0d:6c:58:34:d4:fc:f7:bb:90:e3:02:5f:72:6c:f2:02: e0:0b:17:6c:f4:2f:d3:06:40:1b:f0:c1:49:45:b6:c1:47:8a: 6c:07:2f:70:b9:13:19:10:41:db:e8:4e:a4:a3:3f:b1:21:ec: b4:9e:1c:20:17:80:86:a2:d4:54:a7:5c:50:95:81:df:cb:16: fc:21:61:3b:81:15:06:53:92:7d:f3:2a:1f:fb:58:de:de:11: 51:6e:56:50:da:00:70:50:59:49:85:ac:16:f6:19:11:a3:76: b9:4c:81:08:ee:2a:df:28:66:0c:63:ad:62:ab:7b:e7:7e:58: 53:3a:21:88:07:ef:4f:a2:32:02:0e:c4:3c:db:1f:8d:28:ad: 2e:5e:ff:82:a8:33:23:b1:8f:d9:28:dd:bb:67:16:f6:2b:bc: 23:b9:37:74:00:3f:d8:b9:51:83:37:04:84:be:a9:08:ba:6e: e0:0f:c2:7e:17:7d:20:44:ba:98:d5:9c:36:42:46:f7:4d:6a: 57:c7:eb:0f:16:0b:1e:92:e2:d3:a5:3e:2e:42:cd:a9:ec:71: f3:68:04:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25DQoxzzXyQ8YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NGY1ZTlhZjItY2Y1Yi00YTQ4LWIxODYtOTY0ZmZlZjViN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PMD7AId6U+/eHyooR5jy9Ru8IDC1pt5Rf6b r4kPtfs8CdxyqUtaVH2iCkc3E8lMkuGr5tOT2UXHcTfeGz8MVuqLsYl+SkXwzgwH oWWZx43cNad28Og60FHSj/PYiO6JtGR0lre0ezhEjF11G9BcoVQ//dFW+h+aDQRf I9cq0m/0g58gBVhMIJzluFDb/WeN3B2epjs2bNMmwNtJ9OOcmZ0VWFPlD4mX0mJF TU8MLoHVZU0DtKPogNJ5so9gfvOTEBHiDyuIFu+z4oPcLFILlM1GHeiXcgwOWXBr SzfHrOqfY5vHiRtH2lvNn4RldIbBzrf/2zxgGBRmo+OFknojxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqEdM5+FPAIGfybqedVkWG7rA4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNlZmQwODMtOWRmZi0z NzczLWE5YzktZmI1M2E0YzBkZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAmk1YpCn9+TZGluxmXOxkHH+t2mrupykqnAWIlqBVGZTNabfRcDWxY NNT897uQ4wJfcmzyAuALF2z0L9MGQBvwwUlFtsFHimwHL3C5ExkQQdvoTqSjP7Eh 7LSeHCAXgIai1FSnXFCVgd/LFvwhYTuBFQZTkn3zKh/7WN7eEVFuVlDaAHBQWUmF rBb2GRGjdrlMgQjuKt8oZgxjrWKre+d+WFM6IYgH70+iMgIOxDzbH40orS5e/4Ko MyOxj9ko3btnFvYrvCO5N3QAP9i5UYM3BIS+qQi6buAPwn4XfSBEupjVnDZCRvdN alfH6w8WCx6S4tOlPi5CzanscfNoBMo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:10 2025 by rpki-client