$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/428689c8-361d-3545-a4f4-1f9de3315cd9.roa File: 428689c8-361d-3545-a4f4-1f9de3315cd9.roa (raw, json) Hash identifier: zuUHyjrvQMM83TI0T9nE5Ph9DTmAc5fwKzb41ld4wow= Subject key identifier: 56:A9:E5:88:FA:EB:88:F2:39:4B:67:6D:9C:00:5E:7F:19:0A:C2:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC98B7F51A935A3DB1C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/428689c8-361d-3545-a4f4-1f9de3315cd9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.222.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c9:8b:7f:51:a9:35:a3:db:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=82b0eed6-9425-4b38-8de6-b5f4ea1c74d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:12:a3:6f:9b:6d:af:e1:99:b8:f9:01:10: a4:97:01:84:00:db:a6:19:cf:3b:b0:3b:62:05:28: fc:5e:6f:77:43:44:6c:bc:06:fc:89:d5:9e:1e:72: 8d:80:b8:ee:81:3d:96:a3:ea:16:71:a2:82:bb:d5: c5:8f:2d:1a:a1:ed:76:d2:99:e8:c8:b2:c4:fd:2b: d8:91:98:6d:38:0f:6b:b7:69:2a:2f:a1:92:39:91: 87:67:3c:1c:16:28:7a:ba:f0:7d:07:24:41:c6:a5: 1d:b4:00:10:c3:80:28:ac:62:6b:b1:d1:22:b8:fd: 92:02:ff:75:19:56:1f:26:a8:b9:d6:c6:12:01:89: af:73:ae:6f:d1:60:3c:d9:2c:e6:eb:b1:3f:5a:38: b7:62:87:42:fe:98:a4:68:99:ed:3b:ec:a1:d4:12: bf:e0:b9:10:0c:19:40:d2:3b:a3:f7:93:f5:b7:1c: da:3d:5a:49:c6:58:bf:21:c1:94:80:dc:03:b4:f2: a0:46:8a:3c:03:fd:75:c1:41:ba:aa:e8:b5:11:ad: df:0c:a5:04:7c:ea:3f:e8:15:3d:bd:3e:40:77:2f: 23:c6:ad:78:fc:c1:7e:42:98:b1:0c:4a:3e:b6:16: 1d:53:30:6a:f4:b2:67:28:58:61:59:3f:36:aa:76: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A9:E5:88:FA:EB:88:F2:39:4B:67:6D:9C:00:5E:7F:19:0A:C2:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/428689c8-361d-3545-a4f4-1f9de3315cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:96:40:11:a0:80:96:34:51:d5:4c:9b:45:02:44:2f:fa:4b: 8e:d3:d1:e8:e1:93:a8:e6:bb:bc:b1:37:74:90:d3:f5:f4:c1: e8:2f:37:35:49:11:6e:6f:33:69:f7:bf:7c:fe:56:78:77:f7: 92:06:3d:9c:47:84:48:c9:a9:14:5b:6b:93:67:e4:d2:80:52: 5e:1d:31:9b:23:a8:94:20:75:5e:83:54:83:db:fe:78:f3:16: d8:d2:56:09:24:1d:39:8d:9f:ad:2a:e6:02:b2:af:e7:49:92: 68:9f:8c:97:96:ea:b4:f8:a5:a5:ee:15:2b:1e:3f:a7:e8:f1: 64:70:85:a1:c7:11:54:26:3d:c9:22:c9:c8:a2:ae:f5:4c:a8: d0:f3:6b:33:2b:69:ae:de:23:5a:78:1a:82:6e:b8:19:89:39: f0:b6:4e:9e:7d:08:1b:ca:f1:34:8a:ff:83:54:f4:6c:0a:2f: 04:73:a4:de:1c:2b:5a:ab:22:71:58:2e:45:37:36:66:91:87: 25:00:4b:4c:c9:c5:30:a0:eb:f9:d0:6b:37:d4:dc:5f:67:31: 8f:80:0b:2a:42:9e:71:79:77:12:f1:ab:1e:c5:ac:f1:dc:90: c6:94:f7:17:8c:1b:33:1b:cd:5c:2e:bd:50:65:f1:d5:32:24: 7a:d7:ca:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28mLf1GpNaPbHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODJiMGVlZDYtOTQyNS00YjM4LThkZTYtYjVmNGVhMWM3NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzwSo2+bba/hmbj5ARCklwGEANumGc87sDti BSj8Xm93Q0RsvAb8idWeHnKNgLjugT2Wo+oWcaKCu9XFjy0aoe120pnoyLLE/SvY kZhtOA9rt2kqL6GSOZGHZzwcFih6uvB9ByRBxqUdtAAQw4AorGJrsdEiuP2SAv91 GVYfJqi51sYSAYmvc65v0WA82Szm67E/Wji3YodC/pikaJntO+yh1BK/4LkQDBlA 0juj95P1txzaPVpJxli/IcGUgNwDtPKgRoo8A/11wUG6qui1Ea3fDKUEfOo/6BU9 vT5Ady8jxq14/MF+QpixDEo+thYdUzBq9LJnKFhhWT82qnY/hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFap5Yj664jyOUtnbZwAXn8ZCsKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDI4Njg5YzgtMzYxZC0z NTQ1LWE0ZjQtMWY5ZGUzMzE1Y2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI964MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmWQBGggJY0UdVMm0UCRC/6S47T0ejhk6jmu7yxN3SQ0/X0wegvNzVJ EW5vM2n3v3z+Vnh395IGPZxHhEjJqRRba5Nn5NKAUl4dMZsjqJQgdV6DVIPb/njz FtjSVgkkHTmNn60q5gKyr+dJkmifjJeW6rT4paXuFSseP6fo8WRwhaHHEVQmPcki yciirvVMqNDzazMraa7eI1p4GoJuuBmJOfC2Tp59CBvK8TSK/4NU9GwKLwRzpN4c K1qrInFYLkU3NmaRhyUAS0zJxTCg6/nQazfU3F9nMY+ACypCnnF5dxLxqx7FrPHc kMaU9xeMGzMbzVwuvVBl8dUyJHrXygo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:33 2025 by rpki-client