$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f1e86c-e421-306f-abc3-3074a3253ad5.roa File: 52f1e86c-e421-306f-abc3-3074a3253ad5.roa (raw, json) Hash identifier: nWbu5wUMmv+PztKykgyik9/EULInDP5/Q7NRAfFQvwU= Subject key identifier: 2D:9B:24:72:09:20:68:13:65:4E:F1:52:CF:FC:72:CE:9B:B8:97:0A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF41CCA3A5012FA186BBA Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f1e86c-e421-306f-abc3-3074a3253ad5.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.188.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f4:1c:ca:3a:50:12:fa:18:6b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e15e8c83-b02d-4205-a004-b6ed8facd2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:61:bf:a1:7d:86:fc:c7:e1:f4:8e:64:db: ac:c6:df:3b:e7:11:aa:0f:bf:43:a6:00:08:63:35: a1:75:b7:6a:a4:cf:83:e1:dd:e1:53:d6:f0:95:73: 2b:7d:0b:76:f6:7c:34:9f:03:a3:a1:5e:e8:8b:06: 32:c5:03:18:b6:52:be:3d:54:aa:4f:c1:36:9a:85: e9:26:da:52:f2:52:19:2e:b7:d2:e0:84:e0:ca:d8: 0b:eb:95:a3:8d:77:c7:a7:2e:f9:c1:1e:06:36:90: e1:ca:27:13:ad:d1:7e:cb:2b:46:95:4d:06:4f:ba: 27:12:cb:80:1f:52:3e:6e:74:cf:da:ce:bc:41:bc: 81:13:92:c1:77:8c:01:74:8c:ea:0c:3e:ec:ff:ac: 7a:7f:aa:5a:1b:79:3c:53:18:c7:45:cf:57:c9:37: 48:5c:e8:95:7c:e9:eb:af:e3:c8:de:bf:d9:28:cf: 5c:31:79:ed:e8:c7:0b:dc:61:71:45:19:59:d4:0a: 9a:5f:5f:ac:b9:79:0e:75:a0:7d:62:29:69:84:b6: e8:fe:7d:09:3f:a2:66:1e:ad:63:64:b7:5d:be:5c: fe:b2:c9:65:7e:a6:22:a3:e3:31:3b:0b:cf:60:36: 6f:70:45:ac:c9:ea:e4:92:db:19:e5:4d:84:00:c8: bb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9B:24:72:09:20:68:13:65:4E:F1:52:CF:FC:72:CE:9B:B8:97:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f1e86c-e421-306f-abc3-3074a3253ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f8:a0:06:fa:6a:32:93:07:92:ec:b2:18:fb:9d:c3:d9:54: c9:53:17:93:bc:0d:06:b2:0e:cd:7c:68:05:a4:ba:83:bd:0e: 40:78:b4:1e:35:ac:57:7d:46:fc:ff:12:f4:bb:fe:73:b1:5f: 1d:8a:a3:22:48:53:8f:57:6d:7b:a7:93:5e:80:3d:c7:e6:b1: 6a:bf:a1:b3:77:0a:c3:b8:09:d3:7e:bb:65:17:8e:18:f1:d4: b2:44:df:04:ca:0d:fb:00:b6:7c:22:48:55:e7:c9:24:cd:56: 21:f7:3a:c0:6c:59:49:0f:f1:27:df:65:f9:ea:ed:e9:58:05: de:5a:01:13:b1:4a:a2:8a:31:a6:9f:9f:a8:ef:ec:77:8d:85: b0:85:80:61:d3:86:9f:07:88:ad:59:b6:7b:e0:3d:47:c1:b6: 08:94:b7:35:16:4d:77:cd:c2:49:ee:80:56:6f:68:82:df:75: 59:9d:2b:cc:17:4c:4c:e7:0c:20:c2:f0:84:87:11:18:a9:26: 4c:c3:95:07:a9:33:1b:ef:0c:a2:94:07:fc:03:63:52:90:3a: c7:24:7f:af:58:0d:34:5a:2d:70:a2:3c:05:93:cd:de:61:77: 68:c8:64:94:b4:e8:96:c4:80:ad:42:cf:ca:7b:ef:47:5a:26: 02:28:5d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/QcyjpQEvoYa7owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTE1ZThjODMtYjAyZC00MjA1LWEwMDQtYjZlZDhmYWNkMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3xhv6F9hvzH4fSOZNusxt875xGqD79DpgAI YzWhdbdqpM+D4d3hU9bwlXMrfQt29nw0nwOjoV7oiwYyxQMYtlK+PVSqT8E2moXp JtpS8lIZLrfS4ITgytgL65WjjXfHpy75wR4GNpDhyicTrdF+yytGlU0GT7onEsuA H1I+bnTP2s68QbyBE5LBd4wBdIzqDD7s/6x6f6paG3k8UxjHRc9XyTdIXOiVfOnr r+PI3r/ZKM9cMXnt6McL3GFxRRlZ1AqaX1+suXkOdaB9YilphLbo/n0JP6JmHq1j ZLddvlz+ssllfqYio+MxOwvPYDZvcEWsyerkktsZ5U2EAMi7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2bJHIJIGgTZU7xUs/8cs6buJcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTJmMWU4NmMtZTQyMS0z MDZmLWFiYzMtMzA3NGEzMjUzYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX4oAb6ajKTB5Lsshj7ncPZVMlTF5O8DQayDs18aAWkuoO9DkB4tB41 rFd9Rvz/EvS7/nOxXx2KoyJIU49XbXunk16APcfmsWq/obN3CsO4CdN+u2UXjhjx 1LJE3wTKDfsAtnwiSFXnySTNViH3OsBsWUkP8SffZfnq7elYBd5aAROxSqKKMaaf n6jv7HeNhbCFgGHThp8HiK1ZtnvgPUfBtgiUtzUWTXfNwknugFZvaILfdVmdK8wX TEznDCDC8ISHERipJkzDlQepMxvvDKKUB/wDY1KQOsckf69YDTRaLXCiPAWTzd5h d2jIZJS06JbEgK1Cz8p770daJgIoXQs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:09 2025 by rpki-client