$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f014759-4396-34b0-8281-c94c834cab54.roa File: 3f014759-4396-34b0-8281-c94c834cab54.roa (raw, json) Hash identifier: d1qCv+rLD8dkP4g/nNNkSK3oVoUhMEkbq7zdpIdQS28= Subject key identifier: 35:FB:28:9E:8B:B7:E6:BB:11:3A:B3:36:D5:4D:53:E2:4C:49:4F:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8402844686459DB4FC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f014759-4396-34b0-8281-c94c834cab54.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 19527 IP address blocks: 35.215.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:84:02:84:46:86:45:9d:b4:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0cbd40d7-1a05-4f89-91ca-90b47ba5f63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:92:8f:3e:9e:bf:c9:45:27:5a:57:7c:05: 08:69:96:00:8b:be:d2:ba:0e:e0:21:61:0c:17:f5: 87:75:f6:47:79:11:52:d9:f6:80:65:30:78:59:4d: 01:28:68:4e:46:2b:cc:e5:b7:dd:00:48:bd:e4:ca: 01:28:69:cc:c3:c6:aa:f8:f2:78:c6:bd:d9:67:4e: d6:ed:48:4d:03:c5:af:14:70:69:05:77:3e:53:4b: 2f:46:d7:3c:13:fa:47:be:cf:0e:e9:39:3e:24:9b: 87:47:4d:92:ae:68:45:22:81:5e:8a:55:0f:be:46: 6d:12:c6:be:88:f9:6a:68:82:ea:6e:42:a9:7b:8a: 05:e5:81:ad:85:c9:34:f7:17:e4:e1:34:6a:1d:01: f4:7c:d1:9f:09:92:a7:97:59:f2:41:0d:1a:bb:b1: 7d:91:32:e7:ae:57:80:6a:1d:6a:4c:84:79:4d:17: 52:e6:4c:8f:80:51:c3:72:dc:50:5e:b4:ec:15:4c: 69:47:24:a3:46:63:ee:9f:79:08:bb:0f:9b:a0:30: 2a:c8:ab:98:b0:44:a2:6c:42:7f:e3:b3:18:fe:79: 66:5d:e8:ab:b0:54:55:73:dd:f2:3d:23:c8:c4:be: d5:c6:82:2a:e1:cc:22:48:e8:2b:07:e3:4d:b9:08: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FB:28:9E:8B:B7:E6:BB:11:3A:B3:36:D5:4D:53:E2:4C:49:4F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f014759-4396-34b0-8281-c94c834cab54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.215.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:59:80:03:54:e5:8f:84:1f:8e:ef:b0:60:0a:6e:76:1c:c5: e7:66:07:e6:04:9a:60:d4:c2:26:aa:bb:1f:5a:16:a0:20:16: 0e:a2:c0:3f:24:10:50:b5:91:3a:de:b3:ae:fd:02:63:86:1d: 23:22:48:cb:d4:83:74:2f:07:29:36:b2:4d:f8:9d:d8:63:f1: 6b:9e:e6:8e:ec:b6:2b:36:ad:77:4f:28:e1:14:16:e8:dd:7f: de:be:0e:94:cd:2b:20:a5:f8:b0:e6:3b:a9:73:0b:5e:0c:50: 83:3b:62:c9:6a:a3:5b:64:4d:0b:c1:51:e6:e9:8d:a4:1b:6b: a1:e0:d3:8c:bc:30:0d:a8:ef:4d:ef:a7:34:e4:5f:88:f8:b8: 70:16:74:db:82:91:6e:83:13:ff:76:6f:9d:4c:ad:a7:a7:91: ed:5a:52:80:69:99:0b:be:a7:63:72:6e:a1:de:90:39:b5:aa: f9:6e:f7:78:2d:65:e4:6d:a4:58:72:06:0a:72:4a:24:16:ed: 9a:1f:49:5d:f2:64:0b:65:83:ac:e5:d2:81:d3:27:85:19:f3: dd:0d:e3:62:65:2d:e5:da:0c:93:5e:f9:be:3a:e5:45:93:da: fd:4c:10:38:d2:46:7c:2d:dd:35:d8:79:cb:2f:0e:71:44:2f: 78:34:6b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24QChEaGRZ20/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGNiZDQwZDctMWEwNS00Zjg5LTkxY2EtOTBiNDdiYTVmNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwISSjz6ev8lFJ1pXfAUIaZYAi77Sug7gIWEM F/WHdfZHeRFS2faAZTB4WU0BKGhORivM5bfdAEi95MoBKGnMw8aq+PJ4xr3ZZ07W 7UhNA8WvFHBpBXc+U0svRtc8E/pHvs8O6Tk+JJuHR02SrmhFIoFeilUPvkZtEsa+ iPlqaILqbkKpe4oF5YGthck09xfk4TRqHQH0fNGfCZKnl1nyQQ0au7F9kTLnrleA ah1qTIR5TRdS5kyPgFHDctxQXrTsFUxpRySjRmPun3kIuw+boDAqyKuYsESibEJ/ 47MY/nlmXeirsFRVc93yPSPIxL7VxoIq4cwiSOgrB+NNuQhENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX7KJ6Lt+a7ETqzNtVNU+JMSU89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2YwMTQ3NTktNDM5Ni0z NGIwLTgyODEtYzk0YzgzNGNhYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBZgANU5Y+EH47vsGAKbnYcxedmB+YEmmDUwiaqux9aFqAgFg6iwD8k EFC1kTres679AmOGHSMiSMvUg3QvByk2sk34ndhj8Wue5o7stis2rXdPKOEUFujd f96+DpTNKyCl+LDmO6lzC14MUIM7Yslqo1tkTQvBUebpjaQba6Hg04y8MA2o703v pzTkX4j4uHAWdNuCkW6DE/92b51Mraenke1aUoBpmQu+p2NybqHekDm1qvlu93gt ZeRtpFhyBgpySiQW7ZofSV3yZAtlg6zl0oHTJ4UZ890N42JlLeXaDJNe+b465UWT 2v1MEDjSRnwt3TXYecsvDnFEL3g0a34= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:13 2025 by rpki-client