$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b86ace9-ca46-3e84-93d3-6afd32452229.roa File: 7b86ace9-ca46-3e84-93d3-6afd32452229.roa (raw, json) Hash identifier: SrQVzRJYyq3zR3F0tOuZYCPij8yuSyOOffM23kkvD6g= Subject key identifier: 94:3A:0C:69:47:13:7D:50:8A:0A:1D:17:63:D0:E5:F4:D9:A7:AE:1C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE6766AF6230595D1CD20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b86ace9-ca46-3e84-93d3-6afd32452229.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.228.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e6:76:6a:f6:23:05:95:d1:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f91a330c-3374-4876-8c07-ab78921d126f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:b2:42:df:ea:2b:cc:c6:d4:34:5d:b0:00: de:f5:3a:01:2b:41:33:21:2c:fc:33:1c:ac:93:8d: fb:37:53:ed:50:09:97:12:78:25:16:6f:14:5b:9d: a8:61:5f:eb:c1:ef:4a:63:48:5f:cf:df:28:f2:97: 99:d2:d3:76:b1:58:40:fc:9d:fd:4f:f1:75:07:79: 6f:fa:09:55:4b:f0:68:76:c6:73:bb:02:2e:a1:69: 15:76:38:6a:94:ce:db:c2:50:0d:39:00:0b:5a:15: 02:dd:bc:37:8f:5e:ec:8e:47:d7:5a:80:45:e0:fa: 38:16:5e:46:72:c4:41:4f:d0:d1:02:35:3b:3f:c1: 14:4e:40:61:5f:c0:84:67:75:db:9a:7c:57:01:24: fa:ab:6c:9c:c9:99:ef:be:d0:78:73:ff:ea:b9:78: ed:e7:a3:0a:dc:84:39:07:cc:9f:ef:17:ee:98:d3: a5:ba:7b:b1:28:02:a1:45:27:2d:20:a6:b4:14:af: 70:b7:e6:62:6a:e2:be:66:52:85:d9:fb:4b:f9:0a: f9:86:9c:25:b5:0b:13:f3:58:c6:de:3f:74:80:c0: e7:9e:54:12:48:d0:6d:37:29:d0:a3:83:b1:c1:a3: 3c:eb:43:70:07:5a:59:fb:95:36:2c:21:ac:ad:5c: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3A:0C:69:47:13:7D:50:8A:0A:1D:17:63:D0:E5:F4:D9:A7:AE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b86ace9-ca46-3e84-93d3-6afd32452229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8c:32:c3:b7:0a:f0:a5:f7:da:a6:da:a8:9e:a5:b9:b0:c0: c7:f7:66:ff:e1:64:87:8f:45:d9:11:23:ec:bf:01:16:33:1a: 28:25:47:00:ea:78:71:ee:29:f8:48:da:bd:f1:57:f8:78:dc: a1:cf:3b:28:6f:33:0d:ed:67:a7:e3:79:80:03:8a:d7:c7:2a: 61:20:51:c8:a9:45:41:ef:31:20:a1:82:0c:ea:74:c6:ac:16: b5:9a:ad:9b:86:e1:d4:8e:d9:99:0a:f5:db:73:0f:f3:f5:37: 15:02:03:02:d5:27:09:33:1f:a2:e1:c2:90:44:1e:76:50:11: 7a:0c:53:be:19:d1:ff:9e:76:03:d0:d0:80:78:21:3f:ba:8b: ec:9a:4a:c3:5b:57:2e:fe:04:81:58:f4:73:99:dc:29:42:d7: eb:a0:73:69:9f:4f:54:d5:bf:ef:85:f0:5b:ff:b1:2e:0a:d0: c1:32:a1:ac:6b:ef:70:60:d0:a7:7f:4c:cb:27:04:f3:52:4e: dc:71:7d:de:69:04:2e:9b:e0:d7:f3:17:ea:d5:25:77:5d:39: 4d:05:dd:79:92:5f:c7:ff:46:51:80:74:11:71:63:4b:9e:40: de:7f:89:1d:2c:e2:87:da:ab:3f:85:f4:21:6c:0d:5f:2a:f8: 90:74:ca:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+Z2avYjBZXRzSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjkxYTMzMGMtMzM3NC00ODc2LThjMDctYWI3ODkyMWQxMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinWyQt/qK8zG1DRdsADe9ToBK0EzISz8Mxys k437N1PtUAmXEnglFm8UW52oYV/rwe9KY0hfz98o8peZ0tN2sVhA/J39T/F1B3lv +glVS/BodsZzuwIuoWkVdjhqlM7bwlANOQALWhUC3bw3j17sjkfXWoBF4Po4Fl5G csRBT9DRAjU7P8EUTkBhX8CEZ3XbmnxXAST6q2ycyZnvvtB4c//quXjt56MK3IQ5 B8yf7xfumNOlunuxKAKhRSctIKa0FK9wt+ZiauK+ZlKF2ftL+Qr5hpwltQsT81jG 3j90gMDnnlQSSNBtNynQo4OxwaM860NwB1pZ+5U2LCGsrVyeOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ6DGlHE31QigodF2PQ5fTZp64cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2I4NmFjZTktY2E0Ni0z ZTg0LTkzZDMtNmFmZDMyNDUyMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqMMsO3CvCl99qm2qiepbmwwMf3Zv/hZIePRdkRI+y/ARYzGiglRwDq eHHuKfhI2r3xV/h43KHPOyhvMw3tZ6fjeYADitfHKmEgUcipRUHvMSChggzqdMas FrWarZuG4dSO2ZkK9dtzD/P1NxUCAwLVJwkzH6LhwpBEHnZQEXoMU74Z0f+edgPQ 0IB4IT+6i+yaSsNbVy7+BIFY9HOZ3ClC1+ugc2mfT1TVv++F8Fv/sS4K0MEyoaxr 73Bg0Kd/TMsnBPNSTtxxfd5pBC6b4NfzF+rVJXddOU0F3XmSX8f/RlGAdBFxY0ue QN5/iR0s4ofaqz+F9CFsDV8q+JB0yrw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:39:19 2025 by rpki-client