$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b558e4d-59a0-3f4a-9bdb-fc3ecc3974e0.roa File: 4b558e4d-59a0-3f4a-9bdb-fc3ecc3974e0.roa (raw, json) Hash identifier: 14sil1JSoaHsaTFnybqWrWqsHseycZfgIYIPr1RlG5E= Subject key identifier: 26:1A:88:2C:42:93:E2:6D:DC:0D:04:7A:94:E9:90:F3:53:5E:44:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB886CC9C9A7E0D7F83A50 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b558e4d-59a0-3f4a-9bdb-fc3ecc3974e0.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.243.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:88:6c:c9:c9:a7:e0:d7:f8:3a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8547d979-9b72-4fe5-a340-f5a6de8142a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:0d:e6:08:a2:b3:f7:be:f2:69:95:b6:e4: 21:b7:ff:1a:b9:97:7d:79:02:4c:72:09:06:6f:0f: 11:93:88:59:c3:77:48:5f:93:56:9b:62:16:1d:ba: 8b:d3:82:f8:83:98:8e:95:ba:2e:55:97:74:56:fe: ce:83:55:d0:e2:6f:59:56:50:00:dd:c3:a0:c9:eb: a9:70:4f:71:06:d7:4b:89:c0:ae:75:0d:16:e9:b9: 13:05:59:07:74:10:66:a4:9c:00:9c:1c:eb:f8:6b: cf:92:f3:81:e4:8c:eb:41:af:be:ca:89:ea:d2:16: 4d:81:ca:83:99:8c:a6:bd:8f:6a:b6:a1:01:45:d0: 34:97:b9:95:b3:1b:2b:68:9c:f4:5d:11:c5:7a:2a: e2:67:59:a9:40:c4:1a:0f:ad:6f:44:56:90:6b:6e: b2:87:48:1a:ee:0f:6f:97:0a:7c:db:e6:43:e1:f9: e6:2a:38:1b:b7:e8:83:ac:1f:6a:5f:45:bd:45:1e: a7:81:e4:3a:fa:df:04:9b:c1:1f:f0:15:dc:e0:55: 35:f7:70:11:ca:db:90:ee:e5:df:11:48:c2:ca:97: 80:4f:b1:d6:bf:f9:a0:59:bc:d2:91:8b:08:c9:14: ad:12:3a:38:32:a6:17:13:38:91:c6:86:62:d8:20: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1A:88:2C:42:93:E2:6D:DC:0D:04:7A:94:E9:90:F3:53:5E:44:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b558e4d-59a0-3f4a-9bdb-fc3ecc3974e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1a:90:73:bf:bc:b4:d2:6d:d7:7d:37:03:7b:e6:fc:70:c1: 80:be:55:fe:d0:5f:a6:97:cf:70:0c:b6:51:22:2d:2c:e3:3f: 72:78:a6:2f:78:13:70:bb:b4:d3:2f:6d:4a:e1:c1:fe:02:36: 39:06:e7:32:95:30:df:46:6b:2b:7c:be:ed:00:54:ce:24:49: 78:95:11:c4:0d:7f:e6:96:90:18:68:35:fb:97:2b:30:c0:4c: 9f:ef:55:75:bc:43:9f:22:d7:7b:49:7c:f1:16:5a:8c:6c:0c: 78:b7:41:35:30:54:32:f9:72:a3:35:da:51:e7:4d:59:c1:99: 24:00:5a:00:97:be:64:c0:68:01:83:f1:b2:99:6d:c0:fc:9e: 62:8c:bb:0a:4b:25:bb:25:99:79:14:bf:15:b9:5c:5e:d0:c7: 88:81:69:9d:d3:55:f4:fb:aa:45:3c:cf:6e:5b:bc:42:6c:5b: 48:ac:22:f0:6f:bc:ef:14:10:af:6e:62:68:0e:68:d7:ad:91: b4:6a:76:b1:cc:d1:e6:62:27:fb:f6:26:c3:ae:da:67:16:1b: 94:a9:5a:f4:7d:5f:88:41:f3:7a:2d:a4:1b:40:e7:c3:6f:74: 20:3a:55:ed:9f:7e:1f:ac:0a:21:e5:a1:da:f5:a9:1e:9f:75: 62:b7:74:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24hsycmn4Nf4OlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODU0N2Q5NzktOWI3Mi00ZmU1LWEzNDAtZjVhNmRlODE0MmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKIN5giis/e+8mmVtuQht/8auZd9eQJMcgkG bw8Rk4hZw3dIX5NWm2IWHbqL04L4g5iOlbouVZd0Vv7Og1XQ4m9ZVlAA3cOgyeup cE9xBtdLicCudQ0W6bkTBVkHdBBmpJwAnBzr+GvPkvOB5IzrQa++yonq0hZNgcqD mYymvY9qtqEBRdA0l7mVsxsraJz0XRHFeiriZ1mpQMQaD61vRFaQa26yh0ga7g9v lwp82+ZD4fnmKjgbt+iDrB9qX0W9RR6ngeQ6+t8Em8Ef8BXc4FU193ARytuQ7uXf EUjCypeAT7HWv/mgWbzSkYsIyRStEjo4MqYXEziRxoZi2CAZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYaiCxCk+Jt3A0EepTpkPNTXkRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGI1NThlNGQtNTlhMC0z ZjRhLTliZGItZmMzZWNjMzk3NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQakHO/vLTSbdd9NwN75vxwwYC+Vf7QX6aXz3AMtlEiLSzjP3J4pi94 E3C7tNMvbUrhwf4CNjkG5zKVMN9Gayt8vu0AVM4kSXiVEcQNf+aWkBhoNfuXKzDA TJ/vVXW8Q58i13tJfPEWWoxsDHi3QTUwVDL5cqM12lHnTVnBmSQAWgCXvmTAaAGD 8bKZbcD8nmKMuwpLJbslmXkUvxW5XF7Qx4iBaZ3TVfT7qkU8z25bvEJsW0isIvBv vO8UEK9uYmgOaNetkbRqdrHM0eZiJ/v2JsOu2mcWG5SpWvR9X4hB83otpBtA58Nv dCA6Ve2ffh+sCiHlodr1qR6fdWK3dLU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:01 2025 by rpki-client