$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66977a0c-29cb-395c-8bf2-aa1541edc855.roa File: 66977a0c-29cb-395c-8bf2-aa1541edc855.roa (raw, json) Hash identifier: ONZ/zv9sSwW8/XWVM7mGBJ7uw5ln8YlRRb/aK/wiMJA= Subject key identifier: 19:FF:26:B2:2F:96:99:B9:38:65:0C:4D:B8:09:5B:7D:10:53:04:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCC2C4139B4C316DB4700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66977a0c-29cb-395c-8bf2-aa1541edc855.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.204.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cc:2c:41:39:b4:c3:16:db:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c691b398-53f5-4c05-ab68-81214b8e6a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:74:0c:b7:b4:d7:70:80:ff:e4:d7:19:7a: 64:ba:b9:8f:0c:fe:4a:27:75:07:69:65:44:a2:7a: 77:4b:24:a9:9a:71:db:7b:31:64:cc:90:fa:7d:ae: cb:0d:79:4e:21:9a:04:4c:f1:86:64:91:70:e0:5f: a9:ec:d0:30:11:7b:32:a8:7d:b3:c6:c3:79:15:e3: ae:e7:13:fe:7f:12:98:7b:6d:e8:f7:1e:39:e6:1e: 2c:13:91:44:a4:1e:71:f4:a1:c5:d2:4d:f4:fc:11: ef:85:4b:23:e6:2a:c6:2a:b9:09:a4:2d:41:0a:84: 60:59:33:27:ee:80:c2:ec:c1:d5:da:04:85:8a:9e: 2c:1e:fe:33:2b:d0:5b:9f:06:1d:ba:3e:79:c2:1c: 3f:f7:7c:20:e1:2b:84:e2:b5:b5:28:ae:14:a9:90: 90:34:6b:fe:80:0e:0f:f0:e9:cf:2b:fa:ee:21:f7: 3a:d7:74:ff:c1:16:31:46:b3:9f:08:a4:31:a7:54: 68:cf:0f:33:ab:69:c8:4e:85:63:4b:51:bf:3b:77: 02:28:5f:a5:c6:8a:ee:78:6c:51:f4:77:3f:18:dc: 91:70:09:9b:63:1d:01:a9:75:23:29:7c:83:88:36: 01:2c:5e:6f:ca:fd:42:7f:e4:d1:9b:69:0d:8a:64: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:26:B2:2F:96:99:B9:38:65:0C:4D:B8:09:5B:7D:10:53:04:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66977a0c-29cb-395c-8bf2-aa1541edc855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1c:4a:88:ef:b6:85:ea:ec:ad:c4:c3:63:b0:51:1d:b9:0b: a7:47:f4:d9:36:ef:9d:f2:18:e0:b3:10:e0:55:c4:ac:93:31: 50:86:60:cf:43:e7:75:1c:52:78:9d:fa:d7:e3:06:a7:c9:04: f3:ba:24:32:a6:40:2e:69:84:00:ba:e5:86:e7:39:03:3d:71: 7c:24:1d:68:b1:d1:a3:df:14:40:4b:02:d0:65:75:17:75:cc: 7c:c3:41:53:6e:92:5c:1d:3c:d9:f9:6a:73:56:a7:a1:52:76: 45:d5:aa:e7:02:30:d2:35:48:84:d2:cc:12:c8:ba:fe:41:35: f4:f9:c8:6f:f2:a6:8c:c9:60:fb:22:5f:ca:d5:80:d2:35:48: a1:bd:0c:85:36:be:04:45:51:cc:ad:5b:61:51:61:78:9d:66: 9c:5e:94:70:29:27:24:90:5c:a8:c7:a5:dc:18:46:44:ab:64: 84:4d:81:1e:ba:25:13:38:62:39:1d:e8:b8:a9:3d:6c:bc:76: cf:bf:6c:7e:eb:e2:38:20:2a:a6:b2:f7:88:65:c7:6f:7f:a3: ae:4a:46:ea:9a:1f:90:67:50:57:0d:81:28:53:9b:fd:58:a7: b9:59:ba:c0:bc:ae:4a:58:69:0f:5b:59:29:5e:06:1b:ce:25: ac:1f:a4:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28wsQTm0wxbbRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzY5MWIzOTgtNTNmNS00YzA1LWFiNjgtODEyMTRiOGU2YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnN0DLe013CA/+TXGXpkurmPDP5KJ3UHaWVE onp3SySpmnHbezFkzJD6fa7LDXlOIZoETPGGZJFw4F+p7NAwEXsyqH2zxsN5FeOu 5xP+fxKYe23o9x455h4sE5FEpB5x9KHF0k30/BHvhUsj5irGKrkJpC1BCoRgWTMn 7oDC7MHV2gSFip4sHv4zK9BbnwYduj55whw/93wg4SuE4rW1KK4UqZCQNGv+gA4P 8OnPK/ruIfc613T/wRYxRrOfCKQxp1Rozw8zq2nIToVjS1G/O3cCKF+lxorueGxR 9Hc/GNyRcAmbYx0BqXUjKXyDiDYBLF5vyv1Cf+TRm2kNimSi+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn/JrIvlpm5OGUMTbgJW30QUwTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY5NzdhMGMtMjljYi0z OTVjLThiZjItYWExNTQxZWRjODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAscSojvtoXq7K3Ew2OwUR25C6dH9Nk2753yGOCzEOBVxKyTMVCGYM9D 53UcUnid+tfjBqfJBPO6JDKmQC5phAC65YbnOQM9cXwkHWix0aPfFEBLAtBldRd1 zHzDQVNuklwdPNn5anNWp6FSdkXVqucCMNI1SITSzBLIuv5BNfT5yG/ypozJYPsi X8rVgNI1SKG9DIU2vgRFUcytW2FRYXidZpxelHApJySQXKjHpdwYRkSrZIRNgR66 JRM4Yjkd6LipPWy8ds+/bH7r4jggKqay94hlx29/o65KRuqaH5BnUFcNgShTm/1Y p7lZusC8rkpYaQ9bWSleBhvOJawfpOQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:40 2025 by rpki-client