$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/677413ea-6c67-3fa5-85d0-3d12c7844d0c.roa File: 677413ea-6c67-3fa5-85d0-3d12c7844d0c.roa (raw, json) Hash identifier: 9dO3yPDJg3JDTE3ZbfYcpFzARlzaaM2bLlIG5bA9VHc= Subject key identifier: 88:DB:AF:BA:AB:81:1C:B6:B1:A9:40:37:DF:D1:24:98:4B:5F:83:70 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB752B7DA0BF1D6A89400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/677413ea-6c67-3fa5-85d0-3d12c7844d0c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.205.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b7:52:b7:da:0b:f1:d6:a8:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=023f6df4-9ed3-4135-b10e-8670dc5a70ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1d:14:e7:be:d0:a9:33:67:e5:05:b0:aa:8e: 98:6d:c2:bb:44:ea:b3:e9:63:7c:57:9a:f9:83:eb: 9a:2c:8e:fa:4d:86:0e:6b:b6:f1:f7:ed:ed:d9:8e: be:3d:d8:9f:59:c5:3e:af:4c:f4:09:52:d1:c9:ab: e6:96:34:ba:e7:da:60:d6:f0:78:08:f8:bd:65:54: 04:d6:38:5e:7c:83:ad:bc:5b:90:1c:ea:aa:31:1f: a7:6e:22:21:cc:b2:d8:5e:15:85:de:4e:04:51:f6: 5c:6c:7b:66:64:57:6d:7f:2d:62:fd:1d:00:10:16: f8:7e:ab:7c:05:20:f8:c1:e7:cd:e3:89:84:ef:2a: bc:5b:19:03:d6:41:46:0f:e0:7a:67:b9:c2:8e:25: 56:da:38:7f:5f:db:0f:be:7e:b7:1a:76:9b:2e:2b: 3a:93:0c:76:47:6a:29:ec:ef:8c:73:f8:0b:d6:c2: 5d:fa:c7:74:4f:d3:bb:3d:92:f7:84:4e:23:5c:4f: a7:78:6f:26:04:10:0b:de:5e:d4:08:fa:32:26:46: 85:e8:44:11:12:d0:8c:1a:ae:aa:94:a9:64:91:e8: 1e:60:34:e6:9d:5b:08:89:3f:83:fc:27:20:5d:ff: 4e:87:c6:c8:84:a1:0b:0b:d6:3a:70:0f:89:fd:c7: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DB:AF:BA:AB:81:1C:B6:B1:A9:40:37:DF:D1:24:98:4B:5F:83:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/677413ea-6c67-3fa5-85d0-3d12c7844d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.205.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f0:f5:50:5d:ff:68:43:03:58:7e:26:c4:d2:46:40:dc:98: fe:38:c2:96:d1:d0:56:69:08:ee:83:a7:37:a6:85:94:ff:1b: 5d:f9:9d:7f:5e:26:c7:b3:55:bb:33:b9:eb:52:43:86:4f:2f: 88:e8:27:b4:63:c3:9b:e2:50:b9:4f:b5:9a:49:14:59:fb:d0: a0:d3:57:99:a6:10:95:fe:b8:6c:ef:de:e5:3c:c5:ba:69:e2: 8d:c2:be:80:37:5c:3c:81:a2:5f:55:b6:71:9e:96:f7:f0:a9: b8:68:de:43:72:f7:eb:82:35:3b:03:59:a0:f7:ea:c9:59:b7: 36:3e:7e:17:e3:62:83:36:1e:3e:9f:56:24:f4:cb:c3:80:fa: 71:f1:91:a7:f9:58:6a:4c:7f:97:7d:b3:a3:15:fb:85:ca:59: 55:8e:44:a0:7d:5d:1b:7d:57:49:46:b2:01:d8:4c:0d:73:39: f4:2d:ef:16:39:58:71:bd:5d:d9:7f:4f:d8:34:54:db:36:4b: 2b:ca:be:0c:dc:1a:79:f6:2f:fa:21:8d:78:13:4a:f9:41:69: 64:39:36:d0:2d:2e:28:f9:bc:76:4a:d3:38:54:e7:30:7d:8c: 24:19:08:d2:00:ba:06:76:1f:09:5f:1b:5c:07:a6:da:11:f7: 33:0b:6c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27dSt9oL8daolAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDIzZjZkZjQtOWVkMy00MTM1LWIxMGUtODY3MGRjNWE3MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB0U577QqTNn5QWwqo6YbcK7ROqz6WN8V5r5 g+uaLI76TYYOa7bx9+3t2Y6+PdifWcU+r0z0CVLRyavmljS659pg1vB4CPi9ZVQE 1jhefIOtvFuQHOqqMR+nbiIhzLLYXhWF3k4EUfZcbHtmZFdtfy1i/R0AEBb4fqt8 BSD4wefN44mE7yq8WxkD1kFGD+B6Z7nCjiVW2jh/X9sPvn63GnabLis6kwx2R2op 7O+Mc/gL1sJd+sd0T9O7PZL3hE4jXE+neG8mBBAL3l7UCPoyJkaF6EQREtCMGq6q lKlkkegeYDTmnVsIiT+D/CcgXf9Oh8bIhKELC9Y6cA+J/ce22wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjbr7qrgRy2salAN9/RJJhLX4NwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjc3NDEzZWEtNmM2Ny0z ZmE1LTg1ZDAtM2QxMmM3ODQ0ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI80wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnw9VBd/2hDA1h+JsTSRkDcmP44wpbR0FZpCO6DpzemhZT/G135nX9e JsezVbszuetSQ4ZPL4joJ7Rjw5viULlPtZpJFFn70KDTV5mmEJX+uGzv3uU8xbpp 4o3CvoA3XDyBol9VtnGelvfwqbho3kNy9+uCNTsDWaD36slZtzY+fhfjYoM2Hj6f ViT0y8OA+nHxkaf5WGpMf5d9s6MV+4XKWVWORKB9XRt9V0lGsgHYTA1zOfQt7xY5 WHG9Xdl/T9g0VNs2SyvKvgzcGnn2L/ohjXgTSvlBaWQ5NtAtLij5vHZK0zhU5zB9 jCQZCNIAugZ2HwlfG1wHptoR9zMLbOM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:14:35 2025 by rpki-client