$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40fdc6e7-0e4b-31f9-9912-c7bb9d2cfa95.roa File: 40fdc6e7-0e4b-31f9-9912-c7bb9d2cfa95.roa (raw, json) Hash identifier: l6KEe4Ii5LTbmcLZTEqYpXbRD5Hf9CKJq4PifJzr9oU= Subject key identifier: 34:A1:A3:18:F5:7A:23:EF:BB:23:10:8D:25:73:B5:99:B8:9C:0B:C4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB781E9C5D30C7B44EBF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40fdc6e7-0e4b-31f9-9912-c7bb9d2cfa95.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.201.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:78:1e:9c:5d:30:c7:b4:4e:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=bc8efeb4-75ea-4189-8e18-3d9d155da3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:d6:a8:50:fa:32:c4:31:e5:27:69:8f:75: f3:7f:28:66:54:b8:6d:48:92:be:8a:47:0f:03:76: 62:8e:df:04:a9:46:0e:ad:e4:ba:73:65:b1:f6:06: e8:18:fa:dc:e5:b2:ba:a5:91:97:82:1a:7d:ef:7c: b2:8e:d1:a8:f2:39:28:a8:02:7b:6d:26:be:78:31: 59:d3:b7:a8:b5:cf:ed:6a:ea:79:15:11:15:9d:8c: 1c:ab:66:ba:9e:d0:5a:bf:5d:67:e4:10:ba:f7:9e: b4:0e:f9:d9:2c:a6:0c:c5:3f:3d:f9:af:a7:d6:11: be:d4:dd:32:ca:db:9b:83:75:3e:30:f5:cc:7a:20: 4c:48:ad:c8:63:b1:90:23:17:8c:7f:d3:6a:9d:26: 11:16:96:1e:bb:cd:56:ab:80:9a:4f:19:cb:d4:e7: af:15:ab:f6:bf:5a:02:c4:ad:78:36:c4:70:1f:41: 72:88:8e:6c:24:5d:90:72:f3:71:8e:d5:fc:6f:7d: 3d:41:9c:37:9e:56:d3:3f:dd:b8:bd:07:c5:8e:95: 1b:43:53:cf:b7:dd:f7:3d:cd:5c:f3:c3:76:f2:14: d4:d5:f2:21:f0:ee:f4:dd:82:c0:6a:74:12:2d:01: e9:af:8d:22:b6:99:c6:f3:77:0c:a3:c8:88:bc:4f: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A1:A3:18:F5:7A:23:EF:BB:23:10:8D:25:73:B5:99:B8:9C:0B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40fdc6e7-0e4b-31f9-9912-c7bb9d2cfa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9d:a1:4d:70:e9:36:2d:66:71:52:49:da:a8:ef:f5:ee:ad: cb:e8:61:16:e5:e3:17:df:46:98:01:e4:a4:5b:c8:ed:59:70: 03:80:09:6b:66:8b:ff:30:51:5e:55:3b:8a:b2:d6:99:36:1e: a3:0b:16:6d:51:ee:08:e0:46:c9:d1:b1:ad:8a:cc:24:86:65: a8:84:d0:12:92:b3:49:d6:9e:29:af:b1:ca:0f:78:ad:85:f9: 92:d4:ec:94:fd:91:4d:1b:d3:9b:95:03:16:df:9a:17:b8:2a: 5e:33:68:d6:fc:1a:58:d6:8b:33:91:28:5e:17:7b:10:51:fc: 38:fe:8e:e6:4d:bf:ea:e1:4d:92:6d:3f:5f:32:30:76:0e:ba: cc:97:ad:43:82:76:ff:89:a4:4a:2c:74:e4:fa:18:02:0a:2f: 58:4e:89:14:91:3a:c0:e6:ce:2b:13:81:05:64:9f:b8:ec:92: e1:10:5f:62:0d:60:7e:3f:7e:db:0a:24:db:a5:e1:53:b3:62: ef:dd:9e:44:46:88:3e:f4:d0:7b:a3:1c:a9:2c:e5:33:5e:0e: cd:db:69:14:2a:e0:da:8b:66:08:d0:10:8b:2e:e3:a3:eb:27: 37:db:a3:42:c3:49:ce:cd:45:78:5a:ba:64:24:7f:23:c8:b7: d9:c7:d0:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23genF0wx7ROv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YmM4ZWZlYjQtNzVlYS00MTg5LThlMTgtM2Q5ZDE1NWRhM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVnWqFD6MsQx5Sdpj3XzfyhmVLhtSJK+ikcP A3Zijt8EqUYOreS6c2Wx9gboGPrc5bK6pZGXghp973yyjtGo8jkoqAJ7bSa+eDFZ 07eotc/taup5FREVnYwcq2a6ntBav11n5BC69560DvnZLKYMxT89+a+n1hG+1N0y ytubg3U+MPXMeiBMSK3IY7GQIxeMf9NqnSYRFpYeu81Wq4CaTxnL1OevFav2v1oC xK14NsRwH0FyiI5sJF2QcvNxjtX8b309QZw3nlbTP924vQfFjpUbQ1PPt933Pc1c 88N28hTU1fIh8O703YLAanQSLQHpr40itpnG83cMo8iIvE+6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDShoxj1eiPvuyMQjSVztZm4nAvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDBmZGM2ZTctMGU0Yi0z MWY5LTk5MTItYzdiYjlkMmNmYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8kjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+doU1w6TYtZnFSSdqo7/XurcvoYRbl4xffRpgB5KRbyO1ZcAOACWtm i/8wUV5VO4qy1pk2HqMLFm1R7gjgRsnRsa2KzCSGZaiE0BKSs0nWnimvscoPeK2F +ZLU7JT9kU0b05uVAxbfmhe4Kl4zaNb8GljWizORKF4XexBR/Dj+juZNv+rhTZJt P18yMHYOusyXrUOCdv+JpEosdOT6GAIKL1hOiRSROsDmzisTgQVkn7jskuEQX2IN YH4/ftsKJNul4VOzYu/dnkRGiD700HujHKks5TNeDs3baRQq4NqLZgjQEIsu46Pr Jzfbo0LDSc7NRXhaumQkfyPIt9nH0OA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:59 2025 by rpki-client