$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa File: 3cf55895-668b-3307-b6c4-4999da4a3b04.roa (raw, json) Hash identifier: CaWf9jUu+HqLsXmTUaW4ZXRwgQOb1ktvGFzXnHnykhU= Subject key identifier: E0:57:9F:E5:DD:36:E4:B0:7B:68:26:2A:5F:21:F1:BF:71:29:1B:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB9C88151941AE583C5100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.222.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9c:88:15:19:41:ae:58:3c:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cbde491c-9635-4421-aca3-e2774063a775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:a1:22:5f:56:f2:6d:85:15:ae:92:52:fb: 54:20:0f:d4:73:01:07:7d:ad:ad:f3:87:fa:8e:e4: 08:5e:89:e6:8f:41:c9:ea:aa:a5:0f:29:58:a1:6a: 09:d9:87:6f:86:b7:22:7b:25:e4:a4:c4:6a:77:27: a7:07:79:9a:cf:5c:46:e0:34:2d:7b:81:8c:d0:23: 23:74:dd:3b:ad:73:df:b8:b2:e6:1c:bd:04:bb:88: f7:de:cd:53:f0:a9:6d:f7:db:56:33:d0:e7:93:e4: 96:40:e6:81:ec:92:b8:9a:15:d1:d3:00:fe:62:47: d9:53:67:25:d2:af:d4:03:be:40:ff:97:b1:f0:a7: ee:04:73:e0:c5:8c:84:9f:a8:4f:99:14:4b:43:82: 5b:af:22:d2:1e:35:2d:a1:c8:be:11:cb:00:76:96: 07:08:08:c1:ba:77:ac:6d:d4:c2:a7:0a:12:49:53: 0a:ae:56:1c:fc:b3:67:d4:12:16:b2:82:26:f1:01: fa:25:e1:bc:74:86:cd:05:7b:6b:b5:b8:a7:0d:ed: 84:6d:fa:c9:a1:f5:80:60:c3:82:e0:b5:54:75:e5: 6a:9e:d2:8c:c8:6a:0c:e0:ff:47:0e:be:94:3c:73: 60:40:bd:42:2e:94:d6:7d:d5:d0:e4:64:38:c3:39: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:57:9F:E5:DD:36:E4:B0:7B:68:26:2A:5F:21:F1:BF:71:29:1B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d2:0b:15:59:81:64:40:39:30:f7:98:a3:80:33:da:c3:6c: ce:fc:f4:07:9d:c5:82:84:a0:4a:ed:db:c9:fb:12:c0:d4:93: 79:2e:00:d5:40:2b:28:7c:af:42:73:68:76:77:09:52:60:ee: 2a:bd:e6:a5:4a:85:6c:69:cd:4a:e3:18:a3:1e:2b:63:be:7e: 3c:75:5a:e3:d6:b2:ae:a2:b5:26:9b:74:7a:40:33:84:8c:eb: 92:30:ce:6c:a8:dc:87:e1:1d:ad:3c:58:24:40:87:13:bb:d0: 32:67:71:3e:9a:88:a0:70:eb:66:eb:9c:b0:c4:05:0b:3a:02: 4a:7c:65:dd:02:03:93:28:83:9e:2b:5b:6e:c8:11:8c:c3:8e: 88:ef:41:84:bc:d5:ef:aa:d7:2c:22:28:94:d7:d8:0c:80:0b: 88:09:2a:0e:e0:81:90:78:ef:c9:b1:df:19:2f:cc:9f:e0:4f: 0f:1f:82:ff:03:f0:24:03:b4:e7:c3:19:c6:39:92:16:9b:18: 22:93:41:83:d0:0a:80:66:1c:80:0c:49:da:2d:e1:6d:d0:42: 3d:ab:18:91:f8:ee:c8:8d:45:f1:bc:1d:49:b2:05:95:10:a2: 49:0c:af:3e:eb:5d:8a:a7:4f:40:55:c9:43:a1:24:78:c2:8d: 16:76:22:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25yIFRlBrlg8UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2JkZTQ5MWMtOTYzNS00NDIxLWFjYTMtZTI3NzQwNjNhNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fChIl9W8m2FFa6SUvtUIA/UcwEHfa2t84f6 juQIXonmj0HJ6qqlDylYoWoJ2YdvhrcieyXkpMRqdyenB3maz1xG4DQte4GM0CMj dN07rXPfuLLmHL0Eu4j33s1T8Klt99tWM9Dnk+SWQOaB7JK4mhXR0wD+YkfZU2cl 0q/UA75A/5ex8KfuBHPgxYyEn6hPmRRLQ4JbryLSHjUtoci+EcsAdpYHCAjBunes bdTCpwoSSVMKrlYc/LNn1BIWsoIm8QH6JeG8dIbNBXtrtbinDe2EbfrJofWAYMOC 4LVUdeVqntKMyGoM4P9HDr6UPHNgQL1CLpTWfdXQ5GQ4wznUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBXn+XdNuSwe2gmKl8h8b9xKRuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NmNTU4OTUtNjY4Yi0z MzA3LWI2YzQtNDk5OWRhNGEzYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/SCxVZgWRAOTD3mKOAM9rDbM789AedxYKEoErt28n7EsDUk3kuANVA Kyh8r0JzaHZ3CVJg7iq95qVKhWxpzUrjGKMeK2O+fjx1WuPWsq6itSabdHpAM4SM 65Iwzmyo3IfhHa08WCRAhxO70DJncT6aiKBw62brnLDEBQs6Akp8Zd0CA5Mog54r W27IEYzDjojvQYS81e+q1ywiKJTX2AyAC4gJKg7ggZB478mx3xkvzJ/gTw8fgv8D 8CQDtOfDGcY5khabGCKTQYPQCoBmHIAMSdot4W3QQj2rGJH47siNRfG8HUmyBZUQ okkMrz7rXYqnT0BVyUOhJHjCjRZ2IgY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:30 2025 by rpki-client