$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99c9f036-b96c-3f8f-8f15-c3e435023031.roa File: 99c9f036-b96c-3f8f-8f15-c3e435023031.roa (raw, json) Hash identifier: bXz600TR4YvbZ4dFdPf0WrfZZlGQ66D7j1V/E6B3Vs8= Subject key identifier: 70:9C:F1:42:0A:4A:8D:14:AE:F5:2F:D8:5B:43:7D:E7:E8:99:40:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD6CD9654B263E8F2F800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99c9f036-b96c-3f8f-8f15-c3e435023031.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.201.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d6:cd:96:54:b2:63:e8:f2:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ab00ac60-70c3-4a6c-b546-7d94dec31c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:a5:f5:06:1a:ec:c1:15:28:0b:10:09:d9: ec:29:16:28:3a:1c:76:ae:90:97:4c:aa:62:cb:af: 26:ff:db:60:b1:40:0a:00:64:82:16:6f:3d:34:a0: 38:2e:ee:86:63:f0:43:92:b5:a0:be:09:e6:ba:68: 26:f3:93:6c:de:86:ab:35:04:dd:fc:78:25:f0:d2: be:da:01:90:c8:81:6e:9f:0d:76:4b:9f:2c:52:f8: 63:f2:b6:80:c4:57:e7:47:62:c1:27:4e:a8:8c:25: 09:1a:fc:2c:c9:3b:ce:7c:ae:15:27:0b:4c:fb:63: b7:08:79:08:21:5d:7d:d1:35:9b:4c:dd:dd:85:96: a9:b3:c0:1f:30:ec:04:ad:4d:53:67:62:0b:c9:28: ba:d1:b5:3b:a1:95:bf:d8:a2:a3:b4:16:8b:18:a8: a5:e7:ea:38:d8:ac:36:e9:1d:fd:bd:7a:66:a4:1b: 50:0b:aa:78:2e:81:f9:c8:97:02:21:7c:ab:96:4d: 6f:4f:44:ae:17:0a:39:e7:69:06:7b:a0:86:92:30: a6:35:b9:56:62:16:d7:0b:3a:ce:69:22:05:aa:4f: a7:af:e2:c7:8f:96:5d:a2:78:aa:eb:d4:ea:2b:58: a0:0a:a4:cc:bf:81:1d:89:8a:30:03:3a:dd:d1:f7: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:F1:42:0A:4A:8D:14:AE:F5:2F:D8:5B:43:7D:E7:E8:99:40:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99c9f036-b96c-3f8f-8f15-c3e435023031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:25:b0:33:23:75:f4:2a:38:3e:f7:46:65:9a:96:94:82:2a: 32:24:35:3e:47:72:ec:21:3e:ed:d2:8a:8d:86:a7:20:d0:2c: 4a:8d:af:fe:9e:54:e2:04:85:c5:14:60:4c:f6:29:e8:67:35: fa:e7:aa:60:b8:41:4f:64:3c:2b:6a:76:a5:81:24:e9:ed:92: 52:ce:42:a4:25:78:72:36:07:e2:ae:ff:64:2b:9e:41:86:c0: 6b:22:89:bf:31:6a:1a:e8:26:81:6e:10:5e:e6:5c:43:f0:e8: 81:7a:4b:3d:f1:65:18:68:f0:7e:7f:5a:67:3a:b1:6d:e7:67: 38:16:68:a6:ec:78:db:26:8a:b1:db:c2:c1:60:55:48:05:3d: 79:2b:4b:7b:1e:59:1b:5c:ae:0f:21:8e:b0:42:3f:37:ef:ee: a9:ab:98:ae:2a:1f:06:87:f4:8b:88:ad:3d:7f:19:74:0f:3f: da:5b:71:53:6e:d3:0b:bb:26:e4:8a:38:14:81:34:e6:ba:55: 8d:40:08:ad:17:17:39:c9:91:bd:74:1b:86:37:91:09:33:81: c3:39:6d:a3:11:bc:70:d3:df:3e:16:e3:c8:f4:a5:4c:9f:7f: 5b:32:0e:13:4a:a5:31:c4:92:c6:fe:64:f6:b9:6e:d5:bb:64: 25:26:cd:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29bNllSyY+jy+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWIwMGFjNjAtNzBjMy00YTZjLWI1NDYtN2Q5NGRlYzMxYzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobKl9QYa7MEVKAsQCdnsKRYoOhx2rpCXTKpi y68m/9tgsUAKAGSCFm89NKA4Lu6GY/BDkrWgvgnmumgm85Ns3oarNQTd/Hgl8NK+ 2gGQyIFunw12S58sUvhj8raAxFfnR2LBJ06ojCUJGvwsyTvOfK4VJwtM+2O3CHkI IV190TWbTN3dhZaps8AfMOwErU1TZ2ILySi60bU7oZW/2KKjtBaLGKil5+o42Kw2 6R39vXpmpBtQC6p4LoH5yJcCIXyrlk1vT0SuFwo552kGe6CGkjCmNblWYhbXCzrO aSIFqk+nr+LHj5Zdoniq69TqK1igCqTMv4EdiYowAzrd0feXMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCc8UIKSo0UrvUv2FtDfefomUCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTljOWYwMzYtYjk2Yy0z ZjhmLThmMTUtYzNlNDM1MDIzMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8lsDMjdfQqOD73RmWalpSCKjIkNT5HcuwhPu3Sio2GpyDQLEqNr/6e VOIEhcUUYEz2KehnNfrnqmC4QU9kPCtqdqWBJOntklLOQqQleHI2B+Ku/2QrnkGG wGsiib8xahroJoFuEF7mXEPw6IF6Sz3xZRho8H5/Wmc6sW3nZzgWaKbseNsmirHb wsFgVUgFPXkrS3seWRtcrg8hjrBCPzfv7qmrmK4qHwaH9IuIrT1/GXQPP9pbcVNu 0wu7JuSKOBSBNOa6VY1ACK0XFznJkb10G4Y3kQkzgcM5baMRvHDT3z4W48j0pUyf f1syDhNKpTHEksb+ZPa5btW7ZCUmzWE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:15 2025 by rpki-client