$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb95c95-da7b-3631-9999-6af6ce53b95a.roa File: 4bb95c95-da7b-3631-9999-6af6ce53b95a.roa (raw, json) Hash identifier: TK9iVRhFg8wkY7TYcUO2UzjY4/VDJRDmOvyNu/I1IX4= Subject key identifier: CB:2C:02:6A:EF:89:0F:29:0B:5D:33:68:D6:1C:D7:CE:53:B6:B0:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD5F0F38A76AD53D6A5C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb95c95-da7b-3631-9999-6af6ce53b95a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.246.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d5:f0:f3:8a:76:ad:53:d6:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1e95a240-bd5d-4eaf-a37e-8647da174579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:79:58:38:8a:30:f5:a6:27:7c:2e:c6:fb: 71:e5:cb:96:79:31:70:a1:14:d3:d9:15:fc:7c:3e: 9d:14:cd:df:fc:fe:65:a1:6a:34:de:4a:85:1d:b1: b0:aa:d0:d0:07:6b:4d:66:11:06:b6:b4:3a:3f:e8: d0:89:4a:5c:b2:f4:a7:5d:be:78:e9:b4:f2:1d:ae: 36:9f:bf:b7:b2:1b:cb:d9:73:91:d0:52:7d:8c:4e: 7f:af:40:2e:a4:ca:c5:3a:5a:f8:64:9c:5b:f8:de: dc:e7:5a:82:15:47:db:4f:a1:8b:9c:af:c3:36:0b: 3b:8f:56:2d:2e:4d:c0:5b:85:96:2f:8a:b2:5f:e1: 4f:c0:dc:fc:8f:f1:4f:da:0c:a6:96:5b:aa:3f:35: 21:0d:40:cd:fb:59:a8:aa:8a:a9:25:b0:66:e4:6e: dd:3e:59:b0:f9:8b:e1:85:49:39:3e:14:c3:ea:6c: 8f:e7:6d:2d:55:24:ec:55:3c:9d:3d:b7:69:d3:c8: 17:1d:9b:16:a3:03:54:ee:12:1b:48:e8:d9:59:8c: ba:2a:01:b6:1e:07:fe:5a:73:5f:55:2d:0d:b0:f0: 76:f1:26:0a:4a:7b:b1:5d:58:5e:ff:56:e1:20:02: 54:e3:96:8c:ad:b4:19:bc:df:0c:6c:79:64:fb:97: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:02:6A:EF:89:0F:29:0B:5D:33:68:D6:1C:D7:CE:53:B6:B0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb95c95-da7b-3631-9999-6af6ce53b95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e9:36:da:ef:3f:b7:6e:48:ec:6b:d4:dc:16:8c:36:68:ff: d0:de:a1:3c:c5:73:42:c0:d5:15:84:98:48:18:fa:99:92:67: 47:fd:f6:e3:ba:a1:b9:42:cb:7a:74:ca:43:44:e7:9f:32:bb: 15:4f:4f:5a:61:7a:67:6d:77:bd:53:fa:a7:c8:3e:f4:3d:6b: 48:5c:b4:4e:c9:2f:4f:ab:c5:b7:f1:da:e7:66:c0:19:aa:01: f3:7e:3c:f9:27:2a:2b:f4:38:45:b8:dc:b6:00:3b:67:70:43: 91:e8:f8:27:ec:45:40:b3:ac:36:26:a7:37:2d:b1:a4:09:a4: f9:ab:f7:f2:8d:f3:98:38:d9:aa:a6:e2:13:b2:c0:3d:4c:9a: af:30:8a:b7:22:55:a4:fb:22:1c:37:eb:39:33:26:f3:25:29: ed:1f:f2:0d:89:19:34:21:22:fd:50:d4:af:5e:5b:4f:85:75: 90:77:c2:b7:85:16:fd:ef:7f:b1:8c:76:0e:94:66:61:af:a6: 05:c1:97:42:c7:7a:05:be:5b:03:60:99:15:48:19:2c:d6:6b: 0c:3b:d6:85:a5:51:5c:ac:01:3f:f6:16:e6:3b:d9:ae:09:ae: 9c:2a:f9:e2:ef:e2:22:85:f4:35:61:1a:0f:d3:27:b2:67:f9: c1:f2:ba:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29Xw84p2rVPWpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWU5NWEyNDAtYmQ1ZC00ZWFmLWEzN2UtODY0N2RhMTc0NTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO95WDiKMPWmJ3wuxvtx5cuWeTFwoRTT2RX8 fD6dFM3f/P5loWo03kqFHbGwqtDQB2tNZhEGtrQ6P+jQiUpcsvSnXb546bTyHa42 n7+3shvL2XOR0FJ9jE5/r0AupMrFOlr4ZJxb+N7c51qCFUfbT6GLnK/DNgs7j1Yt Lk3AW4WWL4qyX+FPwNz8j/FP2gymlluqPzUhDUDN+1moqoqpJbBm5G7dPlmw+Yvh hUk5PhTD6myP520tVSTsVTydPbdp08gXHZsWowNU7hIbSOjZWYy6KgG2Hgf+WnNf VS0NsPB28SYKSnuxXVhe/1bhIAJU45aMrbQZvN8MbHlk+5fZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMssAmrviQ8pC10zaNYc185TtrDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGJiOTVjOTUtZGE3Yi0z NjMxLTk5OTktNmFmNmNlNTNiOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfpNtrvP7duSOxr1NwWjDZo/9DeoTzFc0LA1RWEmEgY+pmSZ0f99uO6 oblCy3p0ykNE558yuxVPT1phemdtd71T+qfIPvQ9a0hctE7JL0+rxbfx2udmwBmq AfN+PPknKiv0OEW43LYAO2dwQ5Ho+CfsRUCzrDYmpzctsaQJpPmr9/KN85g42aqm 4hOywD1Mmq8wirciVaT7Ihw36zkzJvMlKe0f8g2JGTQhIv1Q1K9eW0+FdZB3wreF Fv3vf7GMdg6UZmGvpgXBl0LHegW+WwNgmRVIGSzWaww71oWlUVysAT/2FuY72a4J rpwq+eLv4iKF9DVhGg/TJ7Jn+cHyul4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:13 2025 by rpki-client