$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa File: 89456874-8985-397a-9b6d-53996e8fd57a.roa (raw, json) Hash identifier: s6+lkzt2Wo9jbt1PnshRSAid4hBUdUookStFj+3j2FA= Subject key identifier: A4:50:24:43:7A:FF:1F:65:C2:B4:F1:A1:3D:ED:93:89:3F:D9:62:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC114320633FD584F8C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.223.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c1:14:32:06:33:fd:58:4f:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=43932f75-bc53-469a-a4e0-fbd6abb2221b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:aa:83:47:34:99:0d:af:08:9b:3b:75:f6:ce: 2c:de:82:7c:12:25:65:0a:7c:02:80:b6:83:3d:43: 8f:7a:ae:09:62:92:68:7c:4c:a2:23:38:6f:ad:c7: d2:3a:5d:9b:a7:be:3a:9b:4f:e1:9e:e1:b5:08:f3: 20:ec:07:32:52:44:8a:10:89:e3:57:c4:48:cf:eb: 27:7d:08:b1:a3:9f:fc:48:8e:76:e3:a2:29:42:b5: 74:67:24:36:99:38:9f:66:f7:06:cd:0f:1d:cb:43: ac:a0:23:5d:c8:a8:f2:38:11:43:ef:57:bd:4a:f8: ed:99:66:db:f7:96:35:10:84:ce:63:f2:c6:f6:48: 08:01:e5:cf:05:f0:42:a5:7f:85:d7:a7:3c:22:78: 91:ce:0f:a7:6d:c1:62:b9:be:de:80:4d:15:cd:5d: bc:42:33:9d:7f:41:37:a7:08:66:1e:c9:b7:5e:ee: d7:f0:82:8a:dd:a6:55:30:98:49:51:cb:76:fa:7e: 48:da:35:25:ca:8a:eb:64:20:27:bd:b5:16:b6:6c: bd:b7:ee:db:9c:12:01:54:a7:f3:25:cb:3f:58:f1: a8:73:d8:f3:e8:c0:e4:d2:a9:5e:8d:d9:0c:c1:b5: 32:bd:04:83:f2:67:2e:9c:15:4a:fa:a7:70:b5:0c: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:50:24:43:7A:FF:1F:65:C2:B4:F1:A1:3D:ED:93:89:3F:D9:62:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f1:2e:64:87:ac:80:5d:8f:39:13:21:33:0f:56:db:bf:14: 36:fd:c8:54:3f:f9:ea:13:ca:e9:24:70:a4:1e:d0:83:d3:fb: 61:e5:1c:e2:d1:43:90:bd:49:e9:e2:09:27:91:bc:9f:c5:42: 3b:9c:75:e7:46:1c:8b:a0:4a:5b:de:8e:ea:6b:d2:3c:97:7e: 18:93:3e:ad:d8:27:7e:a8:ed:72:51:15:68:bf:31:e2:ce:1c: 13:e4:e4:99:58:5f:10:d2:bf:ac:ba:ba:da:5d:18:83:38:b3: 28:e3:08:4e:7b:e5:17:bc:a1:c7:6d:d3:03:73:78:24:70:69: ec:5f:71:cb:ca:15:8b:92:4d:ad:c1:14:82:d3:bb:61:60:18: 14:85:72:4b:85:05:09:6b:d5:0a:c0:20:fb:8f:10:6b:a4:84: 46:eb:71:6f:5a:cd:06:b5:fc:88:35:f2:63:48:d9:fc:e2:d3: 02:4b:2b:bf:32:b8:6d:c5:d9:a1:04:1e:4f:57:54:1d:0b:d1: 6a:ec:ad:73:47:3a:1d:c1:92:11:24:92:8b:17:bc:6c:b8:e6: c4:42:ff:22:ec:84:4d:ea:12:39:e2:e4:91:bf:33:a3:6c:bf: ee:86:fe:f6:83:69:1e:e9:9f:a9:5d:22:fd:1c:84:7f:55:b3: 06:a4:ed:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28EUMgYz/VhPjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDM5MzJmNzUtYmM1My00NjlhLWE0ZTAtZmJkNmFiYjIyMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76qDRzSZDa8Imzt19s4s3oJ8EiVlCnwCgLaD PUOPeq4JYpJofEyiIzhvrcfSOl2bp746m0/hnuG1CPMg7AcyUkSKEInjV8RIz+sn fQixo5/8SI5246IpQrV0ZyQ2mTifZvcGzQ8dy0OsoCNdyKjyOBFD71e9SvjtmWbb 95Y1EITOY/LG9kgIAeXPBfBCpX+F16c8IniRzg+nbcFiub7egE0VzV28QjOdf0E3 pwhmHsm3Xu7X8IKK3aZVMJhJUct2+n5I2jUlyorrZCAnvbUWtmy9t+7bnBIBVKfz Jcs/WPGoc9jz6MDk0qlejdkMwbUyvQSD8mcunBVK+qdwtQwnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRQJEN6/x9lwrTxoT3tk4k/2WLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk0NTY4NzQtODk4NS0z OTdhLTliNmQtNTM5OTZlOGZkNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI98gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHxLmSHrIBdjzkTITMPVtu/FDb9yFQ/+eoTyukkcKQe0IPT+2HlHOLR Q5C9SeniCSeRvJ/FQjucdedGHIugSlvejupr0jyXfhiTPq3YJ36o7XJRFWi/MeLO HBPk5JlYXxDSv6y6utpdGIM4syjjCE575Re8ocdt0wNzeCRwaexfccvKFYuSTa3B FILTu2FgGBSFckuFBQlr1QrAIPuPEGukhEbrcW9azQa1/Ig18mNI2fzi0wJLK78y uG3F2aEEHk9XVB0L0WrsrXNHOh3BkhEkkosXvGy45sRC/yLshE3qEjni5JG/M6Ns v+6G/vaDaR7pn6ldIv0chH9Vswak7VE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:19 2025 by rpki-client