$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82272fc0-5549-3fcf-a8d1-be8a52dc2c5d.roa File: 82272fc0-5549-3fcf-a8d1-be8a52dc2c5d.roa (raw, json) Hash identifier: JG4yd1P5M6+Bqgq+2BAoFnKBw339kdU3kolyd8YM06o= Subject key identifier: 79:76:B9:62:B9:A0:A2:AF:AD:40:45:40:5A:29:C3:2D:E4:49:C0:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF4D8EFD636428DD57580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82272fc0-5549-3fcf-a8d1-be8a52dc2c5d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.220.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f4:d8:ef:d6:36:42:8d:d5:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0dbf168e-50ea-45ea-a8c7-2e4c26dd7c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:92:6f:b7:d6:70:3b:9c:79:59:6b:5a:1c:34: e9:4d:20:6c:04:da:ea:f5:63:95:2b:c5:80:c0:43: 50:51:ca:c2:4e:aa:90:7c:6b:d8:c1:19:5a:d5:dc: a9:d9:e9:d4:42:72:5e:de:63:57:55:7f:dc:a5:9a: b7:02:83:12:1b:60:3e:f4:45:5f:7a:50:8c:81:93: 74:a8:72:6e:bb:4d:28:7c:17:ad:c5:6e:ce:fc:78: c3:69:d4:74:5f:7d:34:b9:f4:05:29:fc:62:f8:66: db:9f:3c:50:99:aa:a5:14:ad:35:fb:f2:88:3a:67: 58:cf:35:09:76:0f:82:64:eb:6c:81:1f:e3:5d:d1: 5a:c1:3b:5c:96:ab:8b:1b:e3:40:fe:4d:e3:be:ff: 36:45:47:f7:0a:69:d8:11:b3:d7:de:4c:cf:53:65: 36:fa:41:f4:ac:b1:e9:91:66:3d:56:c4:7f:8f:bd: 48:bc:89:47:da:07:51:ce:77:b1:1c:b3:4d:86:a5: 51:89:80:9a:74:a8:1a:b3:85:21:47:95:fa:bc:64: 68:8b:e7:06:4e:6b:7b:fd:6c:34:c1:39:89:7b:ff: 59:8a:c6:93:e1:13:0d:34:65:05:13:f0:a2:3a:15: c0:e8:1f:b8:d3:c9:d8:8b:f0:7c:21:16:f8:40:99: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:B9:62:B9:A0:A2:AF:AD:40:45:40:5A:29:C3:2D:E4:49:C0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82272fc0-5549-3fcf-a8d1-be8a52dc2c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3f:2e:97:4d:13:79:2d:78:07:ff:a4:2e:70:43:34:ab:4e: 91:d9:41:fa:94:50:bf:c9:9e:2f:37:8c:7d:83:27:e8:e2:42: 62:70:7b:9b:c4:e7:bd:ea:99:87:ba:87:be:16:f9:88:3c:7a: 16:7d:dc:76:e5:3a:c9:31:07:f3:29:0c:3e:96:b5:57:4f:9f: f6:2d:38:f3:ee:d9:e8:db:2f:8d:82:d4:4d:6d:5c:d7:1f:57: 95:4a:d4:39:d2:f5:6c:18:00:a4:e6:49:26:b9:5d:25:cc:4a: 50:06:0f:2f:00:d4:6c:37:5f:92:21:c1:74:8a:d6:86:32:68: 8d:a2:12:fe:5d:91:92:ef:84:e8:8f:ef:08:1a:44:4a:4e:44: ab:a5:d4:1a:14:2f:b8:ef:2f:6e:c0:7f:2d:c1:5b:bb:d8:32: ff:39:0f:db:79:fb:d4:ac:41:bb:d7:7b:f9:47:c5:cb:b2:f9: 8c:ac:01:7e:5c:8e:ea:79:6c:00:ae:b6:5a:42:9c:71:e1:83: 3b:44:e2:a7:2d:48:bb:68:3a:9d:a3:ee:c8:7a:a7:2d:2c:d1: a6:37:09:4f:8a:80:c8:83:6d:04:b2:d4:58:75:e5:54:4e:e9: ae:5c:bf:12:a5:bb:48:fa:21:36:7e:ce:98:83:9e:c4:69:8d: 3d:53:14:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/TY79Y2Qo3VdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGRiZjE2OGUtNTBlYS00NWVhLWE4YzctMmU0YzI2ZGQ3YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45Jvt9ZwO5x5WWtaHDTpTSBsBNrq9WOVK8WA wENQUcrCTqqQfGvYwRla1dyp2enUQnJe3mNXVX/cpZq3AoMSG2A+9EVfelCMgZN0 qHJuu00ofBetxW7O/HjDadR0X300ufQFKfxi+GbbnzxQmaqlFK01+/KIOmdYzzUJ dg+CZOtsgR/jXdFawTtclquLG+NA/k3jvv82RUf3CmnYEbPX3kzPU2U2+kH0rLHp kWY9VsR/j71IvIlH2gdRznexHLNNhqVRiYCadKgas4UhR5X6vGRoi+cGTmt7/Ww0 wTmJe/9ZisaT4RMNNGUFE/CiOhXA6B+408nYi/B8IRb4QJl+gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl2uWK5oKKvrUBFQFopwy3kScCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODIyNzJmYzAtNTU0OS0z ZmNmLWE4ZDEtYmU4YTUyZGMyYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU/LpdNE3kteAf/pC5wQzSrTpHZQfqUUL/Jni83jH2DJ+jiQmJwe5vE 573qmYe6h74W+Yg8ehZ93HblOskxB/MpDD6WtVdPn/YtOPPu2ejbL42C1E1tXNcf V5VK1DnS9WwYAKTmSSa5XSXMSlAGDy8A1Gw3X5IhwXSK1oYyaI2iEv5dkZLvhOiP 7wgaREpORKul1BoUL7jvL27Afy3BW7vYMv85D9t5+9SsQbvXe/lHxcuy+YysAX5c jup5bACutlpCnHHhgztE4qctSLtoOp2j7sh6py0s0aY3CU+KgMiDbQSy1Fh15VRO 6a5cvxKlu0j6ITZ+zpiDnsRpjT1TFLM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:43 2025 by rpki-client