$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/631ef0d1-671d-30da-8d6a-222f60141fa1.roa File: 631ef0d1-671d-30da-8d6a-222f60141fa1.roa (raw, json) Hash identifier: v5bqdjQrPPGsjvjf5otlqOvGuMe3xS3wjaldmQxYPz0= Subject key identifier: FA:B5:38:43:FB:4E:88:51:9E:69:8A:31:1E:5C:99:E3:2D:5B:7E:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC6FE43405BCB95E72080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/631ef0d1-671d-30da-8d6a-222f60141fa1.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.234.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c6:fe:43:40:5b:cb:95:e7:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=69bd2ccb-34c1-47a4-ae55-ba1b6fe0615f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:76:be:f6:16:e8:a1:4a:d6:1d:ff:d5:7f: 03:7f:14:d1:c5:be:40:7d:ed:98:ce:63:a7:cb:16: a5:52:1d:8c:93:76:c9:56:21:ac:4c:55:45:58:d1: ab:20:3b:4e:9f:08:5e:64:fc:1d:ea:a8:c9:7b:01: b1:11:f3:a0:eb:fc:22:88:53:c5:82:6a:fc:b8:fb: f5:b0:c9:2a:e7:c7:d4:55:8c:1b:e9:0e:15:d3:8e: 19:db:7b:00:e9:1a:ef:c4:5b:60:67:00:24:02:5e: 91:c0:c8:5b:05:fd:aa:4b:26:72:35:8c:4d:b8:4d: 1e:65:9b:e2:6b:c6:41:8e:81:eb:d6:80:cc:e4:bf: 81:a5:cb:45:30:42:46:ee:a5:49:74:41:33:65:95: 75:5c:e6:64:34:59:6a:7b:db:38:55:c9:d0:5b:23: 71:1d:76:44:a7:0a:26:ac:b1:a3:cc:31:cd:ee:78: d7:16:53:ca:c3:49:5f:71:c4:bc:4d:b5:b8:ed:20: 89:90:9a:73:1e:73:b4:bf:70:f5:64:d7:f0:b1:fd: 0b:29:07:11:c7:bb:60:d0:ee:26:a5:78:80:b2:ba: b8:7a:18:a9:94:f1:9f:24:cf:8b:51:79:51:43:4f: f1:be:c4:23:aa:fb:ed:76:cb:86:a1:fe:91:5a:f8: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B5:38:43:FB:4E:88:51:9E:69:8A:31:1E:5C:99:E3:2D:5B:7E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/631ef0d1-671d-30da-8d6a-222f60141fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.234.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0a:d0:c9:98:be:63:41:d5:72:4f:0b:35:0e:02:4d:28:22: 31:bf:a6:90:6f:7c:ed:2a:8c:a4:ba:67:65:2f:05:af:00:c8: a6:8c:24:15:5f:cb:c6:38:e2:8e:78:cc:b8:c2:f1:b8:47:a3: 2d:10:0f:37:2a:6b:f7:73:a4:f6:d6:64:4e:1e:a6:8b:0f:3c: d9:92:09:a1:75:11:e2:c9:3a:c0:b8:21:1e:09:63:0c:ad:50: 6f:c0:48:3c:b8:ff:96:e4:f6:09:3d:ac:fd:4e:c9:4c:a6:05: bc:11:2d:96:40:24:38:64:9e:01:a3:a5:54:8d:88:7f:47:69: 5f:61:5c:fd:34:f1:52:bb:88:57:16:b2:f8:12:84:35:5d:a8: f5:0c:7b:ba:b4:6f:eb:be:2e:4c:21:53:45:eb:f2:f0:89:2c: 8d:a5:65:7f:f7:43:f0:2b:b2:57:57:0f:9c:3a:c8:70:f9:27: b3:a0:9a:8a:94:58:69:24:45:a4:1f:ea:bc:e6:99:1f:ce:98: 00:ef:b9:c3:2b:ad:5c:27:ed:d3:24:11:43:f0:15:22:c8:f3: ae:6b:bc:27:30:3e:b4:2a:79:6e:c7:86:4d:93:f5:67:64:a2: 9b:a3:fc:dc:a3:18:8a:3d:33:f4:d5:00:ae:54:74:ec:a2:57: 34:37:61:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28b+Q0Bby5XnIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjliZDJjY2ItMzRjMS00N2E0LWFlNTUtYmExYjZmZTA2MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5B2vvYW6KFK1h3/1X8DfxTRxb5Afe2YzmOn yxalUh2Mk3bJViGsTFVFWNGrIDtOnwheZPwd6qjJewGxEfOg6/wiiFPFgmr8uPv1 sMkq58fUVYwb6Q4V044Z23sA6RrvxFtgZwAkAl6RwMhbBf2qSyZyNYxNuE0eZZvi a8ZBjoHr1oDM5L+BpctFMEJG7qVJdEEzZZV1XOZkNFlqe9s4VcnQWyNxHXZEpwom rLGjzDHN7njXFlPKw0lfccS8TbW47SCJkJpzHnO0v3D1ZNfwsf0LKQcRx7tg0O4m pXiAsrq4ehiplPGfJM+LUXlRQ0/xvsQjqvvtdsuGof6RWvh82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq1OEP7TohRnmmKMR5cmeMtW35GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjMxZWYwZDEtNjcxZC0z MGRhLThkNmEtMjIyZjYwMTQxZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+rgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgK0MmYvmNB1XJPCzUOAk0oIjG/ppBvfO0qjKS6Z2UvBa8AyKaMJBVf y8Y44o54zLjC8bhHoy0QDzcqa/dzpPbWZE4eposPPNmSCaF1EeLJOsC4IR4JYwyt UG/ASDy4/5bk9gk9rP1OyUymBbwRLZZAJDhkngGjpVSNiH9HaV9hXP008VK7iFcW svgShDVdqPUMe7q0b+u+LkwhU0Xr8vCJLI2lZX/3Q/ArsldXD5w6yHD5J7OgmoqU WGkkRaQf6rzmmR/OmADvucMrrVwn7dMkEUPwFSLI865rvCcwPrQqeW7Hhk2T9Wdk opuj/NyjGIo9M/TVAK5UdOyiVzQ3YfM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:23 2025 by rpki-client