$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa File: 64843a99-637f-3b90-b32c-77f6cdcea810.roa (raw, json) Hash identifier: MOU3j+VzWGJWQsmvZR/7Tf7SKjKLhIU8MbE0ar0eui8= Subject key identifier: 62:34:AB:6C:22:2E:18:17:C9:D4:40:C4:66:AE:E9:31:49:B6:49:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEB48C6141A449A56E7C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:eb:48:c6:14:1a:44:9a:56:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ec76d2de-f358-4597-9e56-e6172d347503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:31:96:85:e9:ae:97:05:d1:a2:76:d8:d1: c6:79:5b:03:ca:73:42:9a:a9:04:19:9c:12:20:cb: b7:22:61:82:ba:d8:d9:e3:56:d6:5d:db:a1:b0:b6: 92:f3:87:21:76:99:47:c0:16:ec:2a:73:7a:e0:95: f0:76:81:09:38:80:b9:2a:cd:31:70:d9:f3:47:7d: ff:5e:93:c5:c3:bd:16:b0:39:67:9b:95:e2:50:01: a2:53:ef:83:2a:b4:eb:c1:15:98:0b:3b:31:61:ae: 98:fa:c5:20:94:09:7d:54:22:de:33:4b:18:20:0d: d2:94:05:bf:7c:27:f1:c2:4f:e6:f5:fe:b5:75:b8: 5f:1c:84:53:57:63:05:69:a2:e3:98:23:4d:3a:54: ef:62:c3:87:34:05:cb:72:8b:83:23:8a:88:13:4c: cb:58:08:f1:1f:d9:bd:08:1c:f8:33:d7:9b:bd:d2: 0d:9f:40:49:3b:c4:28:80:fe:3c:7e:0f:69:50:ec: a0:7b:6f:b2:75:2d:fb:24:9d:02:f9:f3:44:b6:4b: 91:7a:32:5a:9e:44:9e:04:45:23:d1:85:e3:9c:73: 7a:5d:02:b8:cf:f3:b8:7e:ee:f3:c5:e9:4f:38:22: f3:f5:80:b0:de:40:0c:fe:e2:5e:ad:78:2b:af:ab: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:AB:6C:22:2E:18:17:C9:D4:40:C4:66:AE:E9:31:49:B6:49:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:34:24:76:0b:49:dd:38:a4:21:0e:05:6c:62:44:9d:05:29: 20:05:b6:34:5f:64:84:6a:6f:82:f9:2c:32:b7:cd:c4:e9:5a: c5:da:8d:e6:f4:30:d7:44:56:42:2d:6f:b1:73:6b:9f:b1:d3: 12:bf:0a:07:70:1f:6a:cd:c1:41:d2:64:59:e0:59:fe:63:7b: 49:6e:0e:ae:84:b0:17:f8:2f:09:97:c5:73:2a:0a:a2:2f:10: 2b:af:e1:07:9b:46:78:7b:44:97:20:8d:ac:dc:dd:12:ab:ce: 33:16:58:b0:6c:d8:ae:e2:19:d6:cd:04:3d:26:22:13:08:72: 84:37:19:d9:51:70:86:b0:a6:32:06:f7:82:79:d1:56:6d:4b: cd:b9:7f:74:90:54:68:d5:08:3c:c0:dd:02:57:f1:6a:79:ff: 3c:37:21:05:38:41:ae:73:aa:cd:e6:d2:37:0a:b3:90:a1:fa: cb:d9:fe:22:4e:12:cb:df:ce:c0:bc:cd:b7:bb:5e:7e:de:15: 3c:25:b5:12:e8:e4:b4:52:66:77:ac:f8:72:16:c1:38:9a:14: 45:e6:cd:8b:ac:98:40:db:bc:a9:14:d4:bc:7d:e9:aa:95:25: 44:56:61:77:6a:b9:b4:39:72:26:30:6f:72:7a:0c:44:6b:f1: 4a:ad:74:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+tIxhQaRJpW58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZWM3NmQyZGUtZjM1OC00NTk3LTllNTYtZTYxNzJkMzQ3NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX4xloXprpcF0aJ22NHGeVsDynNCmqkEGZwS IMu3ImGCutjZ41bWXduhsLaS84chdplHwBbsKnN64JXwdoEJOIC5Ks0xcNnzR33/ XpPFw70WsDlnm5XiUAGiU++DKrTrwRWYCzsxYa6Y+sUglAl9VCLeM0sYIA3SlAW/ fCfxwk/m9f61dbhfHIRTV2MFaaLjmCNNOlTvYsOHNAXLcouDI4qIE0zLWAjxH9m9 CBz4M9ebvdINn0BJO8QogP48fg9pUOyge2+ydS37JJ0C+fNEtkuRejJankSeBEUj 0YXjnHN6XQK4z/O4fu7zxelPOCLz9YCw3kAM/uJerXgrr6vNdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI0q2wiLhgXydRAxGau6TFJtkmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjQ4NDNhOTktNjM3Zi0z YjkwLWIzMmMtNzdmNmNkY2VhODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo0JHYLSd04pCEOBWxiRJ0FKSAFtjRfZIRqb4L5LDK3zcTpWsXajeb0 MNdEVkItb7Fza5+x0xK/CgdwH2rNwUHSZFngWf5je0luDq6EsBf4LwmXxXMqCqIv ECuv4QebRnh7RJcgjazc3RKrzjMWWLBs2K7iGdbNBD0mIhMIcoQ3GdlRcIawpjIG 94J50VZtS825f3SQVGjVCDzA3QJX8Wp5/zw3IQU4Qa5zqs3m0jcKs5Ch+svZ/iJO EsvfzsC8zbe7Xn7eFTwltRLo5LRSZnes+HIWwTiaFEXmzYusmEDbvKkU1Lx96aqV JURWYXdqubQ5ciYwb3J6DERr8UqtdGc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:18 2025 by rpki-client