$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/792ef1be-26c3-3fe8-9f8e-589e619ec83a.roa File: 792ef1be-26c3-3fe8-9f8e-589e619ec83a.roa (raw, json) Hash identifier: nFqH4aDIH+p/efACstMuDPlMZe0GCRcjblGwcBNagW0= Subject key identifier: 3F:BB:B2:DE:47:22:E9:62:98:5A:FA:A2:CA:DE:DC:B7:E1:3E:26:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE40D81ACC1E3B322ABA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/792ef1be-26c3-3fe8-9f8e-589e619ec83a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.242.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e4:0d:81:ac:c1:e3:b3:22:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9f477579-51e2-43b4-bec1-521b77838aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:18:a5:06:d8:c1:01:87:ce:fa:39:e1:5f: 2e:da:3e:26:ed:13:49:69:de:ff:46:74:cd:dd:6d: 7a:13:48:f8:c9:c8:e5:4a:b3:91:54:7d:92:8a:e2: 41:27:ff:5f:ad:30:3d:a6:08:42:e3:22:70:b8:46: d1:b7:78:c6:57:9e:e5:68:91:6e:94:5b:22:5d:ce: 54:f3:01:8d:e3:0b:3e:c3:b9:70:4d:16:32:c8:5a: 81:d9:21:86:27:fc:71:4a:0d:af:1c:7f:2b:ee:7f: e1:6c:23:77:84:d7:27:00:64:41:48:27:44:2f:f6: aa:8f:4c:e5:93:d0:22:7b:d1:9a:dd:28:19:0c:33: dd:7e:55:19:e9:72:ca:b8:ea:ae:8b:1c:5b:3a:21: 99:00:86:ec:04:cf:09:b4:bd:14:b3:0f:82:c7:36: 58:51:e9:85:3a:8d:53:4c:d5:24:e9:5e:da:21:cc: 0b:0e:dc:1a:5c:03:f3:f8:08:6b:4a:cb:a9:1d:f0: 01:17:75:ae:0e:51:f7:36:21:95:fd:98:a7:27:80: 10:3a:ce:75:d3:9c:da:55:bb:73:8f:7f:a3:fa:2b: bb:1a:2c:f2:a1:77:86:a3:bb:a6:74:6c:d0:51:28: a8:8b:80:5e:7a:ba:17:84:27:e4:a8:92:59:6e:54: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BB:B2:DE:47:22:E9:62:98:5A:FA:A2:CA:DE:DC:B7:E1:3E:26:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/792ef1be-26c3-3fe8-9f8e-589e619ec83a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.242.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:98:5f:d2:a6:b4:96:f4:1a:49:f8:93:fc:8d:cd:81:0a:02: 69:18:25:78:2b:a6:86:c9:0b:69:e6:42:32:88:3a:3c:0d:c9: fc:03:68:c7:a9:0e:01:c7:6c:fc:87:1e:8b:48:25:f9:cc:e3: f7:87:fc:7d:af:80:af:fd:dd:c9:1a:88:59:ec:12:20:9a:7b: 0b:d2:7c:fd:80:18:f4:4d:37:69:39:8d:eb:46:db:c8:9f:59: a2:93:0d:c4:73:ff:45:ee:2c:f7:96:8c:69:9c:43:3d:3c:91: 65:06:c6:cc:5a:5d:47:1e:0e:53:48:1c:b4:dd:2a:70:56:6e: 73:47:cd:31:ea:cb:23:ee:90:af:6c:8a:a0:1a:a8:df:7b:44: ec:17:f2:a0:c0:a1:7a:97:16:a8:b9:47:65:6d:43:cb:2f:5c: 1e:15:4f:c2:a6:7f:03:cb:07:43:e8:b9:6b:9d:d1:f2:21:78: d8:ed:9d:5f:43:fd:9c:53:7b:8d:12:0d:85:94:35:b1:da:d8: 09:85:e4:68:29:89:da:1f:37:54:5e:6c:62:6c:70:25:53:fe: 8a:ab:eb:62:7d:94:a3:6b:04:aa:eb:95:03:29:d3:3a:a1:59: 7d:bd:f1:07:4a:2a:b4:e1:0a:09:e0:82:d5:96:8d:65:cd:01: bc:33:b2:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+QNgazB47Miq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWY0Nzc1NzktNTFlMi00M2I0LWJlYzEtNTIxYjc3ODM4YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2roYpQbYwQGHzvo54V8u2j4m7RNJad7/RnTN 3W16E0j4ycjlSrORVH2SiuJBJ/9frTA9pghC4yJwuEbRt3jGV57laJFulFsiXc5U 8wGN4ws+w7lwTRYyyFqB2SGGJ/xxSg2vHH8r7n/hbCN3hNcnAGRBSCdEL/aqj0zl k9Aie9Ga3SgZDDPdflUZ6XLKuOquixxbOiGZAIbsBM8JtL0Usw+CxzZYUemFOo1T TNUk6V7aIcwLDtwaXAPz+AhrSsupHfABF3WuDlH3NiGV/ZinJ4AQOs5105zaVbtz j3+j+iu7GizyoXeGo7umdGzQUSioi4BeeroXhCfkqJJZblQS2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+7st5HIulimFr6osre3LfhPiaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzkyZWYxYmUtMjZjMy0z ZmU4LTlmOGUtNTg5ZTYxOWVjODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKYX9KmtJb0Gkn4k/yNzYEKAmkYJXgrpobJC2nmQjKIOjwNyfwDaMep DgHHbPyHHotIJfnM4/eH/H2vgK/93ckaiFnsEiCaewvSfP2AGPRNN2k5jetG28if WaKTDcRz/0XuLPeWjGmcQz08kWUGxsxaXUceDlNIHLTdKnBWbnNHzTHqyyPukK9s iqAaqN97ROwX8qDAoXqXFqi5R2VtQ8svXB4VT8KmfwPLB0PouWud0fIheNjtnV9D /ZxTe40SDYWUNbHa2AmF5GgpidofN1RebGJscCVT/oqr62J9lKNrBKrrlQMp0zqh WX298QdKKrThCgnggtWWjWXNAbwzsoY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:12 2025 by rpki-client