$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b9f5235-d4bc-3ab8-a6ac-138bf7569a83.roa File: 7b9f5235-d4bc-3ab8-a6ac-138bf7569a83.roa (raw, json) Hash identifier: XNkD07ZjXFAbX5jysWJeaY9P7ejAmsNfSjwjyETrmS8= Subject key identifier: 67:0A:A7:A6:86:5C:88:16:42:52:09:6F:CF:C7:24:C6:8A:A5:2E:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A920623F3484D9AAED93F0F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b9f5235-d4bc-3ab8-a6ac-138bf7569a83.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.220.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:23:f3:48:4d:9a:ae:d9:3f:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=63003ee5-8290-4c4e-b8a3-46a530b19ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7e:d4:1f:08:26:c4:6e:e6:81:61:1f:95:20: 79:ed:d0:97:14:0b:b9:97:9a:e5:b1:66:de:35:7e: 8b:a1:f5:a0:73:fa:42:a8:36:c2:44:50:ba:1a:7a: e0:fd:b4:d0:e5:22:6e:6d:03:62:66:25:13:bb:76: 74:4c:18:65:d8:27:dc:4c:96:7c:1e:f0:d4:c2:8c: 1f:c0:b0:c3:cb:0e:87:70:2f:16:57:e4:b2:c8:81: 25:73:e5:27:82:06:d7:6e:7f:e9:37:31:e5:57:25: 8e:bf:1c:1b:18:e3:a0:86:aa:1a:43:a8:ad:d1:d6: 26:5e:0c:c9:a3:23:30:0e:62:08:28:72:c5:b8:5c: 84:14:f5:68:33:aa:51:d7:05:ef:1e:aa:25:64:4f: cf:87:5f:7c:a8:36:47:c4:30:d1:79:85:41:e7:6e: 15:80:c1:66:c5:ae:aa:4f:ca:30:2f:7b:e6:0a:15: ac:93:1d:2d:e2:e6:26:fb:9f:53:95:81:65:ca:64: 73:30:fd:97:60:22:18:dd:50:f5:c4:0e:55:8b:d4: 20:20:1f:2f:04:39:01:be:39:30:e8:bc:56:23:80: d9:88:1f:58:62:85:9c:d1:4d:2c:da:2a:0b:37:36: 8d:e8:d8:52:5d:53:2d:d3:3a:c3:88:05:b8:68:47: fd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:A7:A6:86:5C:88:16:42:52:09:6F:CF:C7:24:C6:8A:A5:2E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b9f5235-d4bc-3ab8-a6ac-138bf7569a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cf:e9:ba:09:57:b0:93:8b:1b:2e:b6:1c:bd:04:be:99:fd: 5d:00:b7:8e:78:b0:aa:1a:b6:60:ed:eb:e7:eb:3e:0e:17:89: 10:37:97:13:38:f2:be:90:fe:8b:e8:97:12:c1:51:e3:e4:23: 6d:46:82:80:37:35:42:79:fc:e1:32:3a:dc:a2:c0:cf:fc:ab: 88:0d:57:66:64:f8:d2:c9:be:cb:fc:b7:8b:72:fb:63:39:e7: 7c:f0:b7:eb:c8:b4:7e:6c:53:39:71:dc:dd:cb:2b:10:52:82: da:ff:49:b3:79:b9:96:b7:6f:a1:28:e9:1c:0f:58:5a:35:9f: 64:87:20:ec:5c:ec:e7:99:42:79:3c:1f:ed:04:8c:38:88:61: de:a4:58:2f:cd:9e:4a:e9:b8:7b:c1:ba:3d:ba:bd:09:26:2c: 77:70:90:79:ae:18:7e:8a:3d:49:35:f8:c5:9e:8b:b7:9e:77: 5f:cd:88:cc:f9:cd:e4:ed:53:62:2d:74:7d:69:4e:68:0e:7d: 69:ae:18:6f:70:e6:49:9d:a4:14:f0:95:e1:a4:c2:75:a5:f8: 71:93:67:20:27:1e:50:d8:42:32:bc:db:82:d7:d7:f5:cd:46: 28:b7:48:8d:57:88:7b:3d:ab:2e:c1:8e:c9:cf:43:de:c8:be: 09:48:8d:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqSBiPzSE2artk/D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk NjMwMDNlZTUtODI5MC00YzRlLWI4YTMtNDZhNTMwYjE5ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA737UHwgmxG7mgWEflSB57dCXFAu5l5rlsWbe NX6LofWgc/pCqDbCRFC6Gnrg/bTQ5SJubQNiZiUTu3Z0TBhl2CfcTJZ8HvDUwowf wLDDyw6HcC8WV+SyyIElc+UnggbXbn/pNzHlVyWOvxwbGOOghqoaQ6it0dYmXgzJ oyMwDmIIKHLFuFyEFPVoM6pR1wXvHqolZE/Ph198qDZHxDDReYVB524VgMFmxa6q T8owL3vmChWskx0t4uYm+59TlYFlymRzMP2XYCIY3VD1xA5Vi9QgIB8vBDkBvjkw 6LxWI4DZiB9YYoWc0U0s2ioLNzaN6NhSXVMt0zrDiAW4aEf9ewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGcKp6aGXIgWQlIJb8/HJMaKpS7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2I5ZjUyMzUtZDRiYy0z YWI4LWE2YWMtMTM4YmY3NTY5YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCI9wwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMs/puglXsJOLGy62HL0Evpn9XQC3jniwqhq2YO3r5+s+DheJEDeXEzjy vpD+i+iXEsFR4+QjbUaCgDc1Qnn84TI63KLAz/yriA1XZmT40sm+y/y3i3L7Yznn fPC368i0fmxTOXHc3csrEFKC2v9Js3m5lrdvoSjpHA9YWjWfZIcg7Fzs55lCeTwf 7QSMOIhh3qRYL82eSum4e8G6Pbq9CSYsd3CQea4Yfoo9STX4xZ6Lt553X82IzPnN 5O1TYi10fWlOaA59aa4Yb3DmSZ2kFPCV4aTCdaX4cZNnICceUNhCMrzbgtfX9c1G KLdIjVeIez2rLsGOyc9D3si+CUiNJg== -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:34 2025 by rpki-client