$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ef1deba-c392-3dda-9744-ce63c31c3b31.roa File: 9ef1deba-c392-3dda-9744-ce63c31c3b31.roa (raw, json) Hash identifier: xB5kQdN9ZFvx5rIx1R9jngAQ5Xijuge4pZywJVaxgdw= Subject key identifier: 56:2A:89:67:E3:52:DB:3C:3B:C7:FF:CE:94:6D:53:51:F0:21:9E:12 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB82C3CC43B77156F46080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ef1deba-c392-3dda-9744-ce63c31c3b31.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.190.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:82:c3:cc:43:b7:71:56:f4:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6f7f8690-028c-4f38-923f-41f7a895caff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b6:01:bf:39:99:0f:ae:e8:4e:ee:75:a3:5f: 24:d0:e2:55:84:73:59:1f:b7:45:56:4c:9a:d7:73: b6:cd:6e:e3:57:e1:1a:d1:a8:4f:79:d7:fd:eb:77: dc:63:e1:79:1b:7a:98:48:68:93:c6:4c:64:b8:24: 0c:12:82:3e:c7:ef:f3:29:96:3d:61:39:93:0b:ec: 2b:d4:54:11:9d:7d:39:40:f9:9f:d8:12:69:93:06: 83:f2:7d:65:ac:5b:a2:1b:d1:9e:88:d6:1f:bd:68: 12:0a:e7:c6:74:85:69:f1:c5:36:65:a6:16:2f:0b: b0:f4:40:d5:26:c4:f3:3b:f9:8a:40:2b:1e:15:cf: 6f:51:5c:ce:93:ad:d9:b3:3d:38:b0:72:90:99:56: a4:3d:04:bf:93:65:4c:b3:68:05:41:09:d9:c4:03: b4:cf:7c:3e:30:8a:36:97:ee:ae:6c:85:f7:53:3a: 52:cd:57:ef:34:3a:78:fc:da:55:02:f9:e8:3e:ce: ea:05:9b:5f:06:ea:40:db:e9:29:01:f3:0a:2c:5c: e1:87:81:ca:ce:ee:76:5c:8b:54:a8:c4:cb:ba:6c: ea:70:4c:f6:3d:12:a9:05:76:98:e4:55:d2:91:f5: d5:e8:3e:1b:c1:d7:a0:59:38:6b:06:06:96:46:63: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2A:89:67:E3:52:DB:3C:3B:C7:FF:CE:94:6D:53:51:F0:21:9E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ef1deba-c392-3dda-9744-ce63c31c3b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:51:9c:53:75:ea:94:dc:71:e2:71:83:c4:bf:3f:e5:7a:7f: 14:cb:01:42:31:0b:bf:e8:83:54:cc:3b:82:a8:1a:f5:eb:6f: 2a:d4:5b:d2:00:ab:e7:e0:9d:13:6e:fe:14:d5:e3:d5:7b:de: 03:57:f1:9e:4c:67:9c:0f:52:66:0a:a2:f7:3a:2d:6f:f4:e8: 6f:72:c9:cd:fe:9c:51:58:2a:87:18:ca:28:97:f4:1e:0b:f7: ad:3d:98:d2:c9:2a:7a:06:ec:81:6f:eb:f1:47:1a:d5:90:0c: c9:2a:a7:d6:6d:92:30:33:08:a7:73:c9:63:26:29:dc:83:7b: 69:7f:8e:8a:63:f2:43:00:87:d1:84:3f:4a:d0:1f:5c:34:87: 52:8e:0d:08:2b:15:9e:57:27:cd:aa:eb:a0:a4:a1:06:27:6f: 09:fa:de:3d:fb:2e:1d:ff:06:7b:f6:b2:3e:64:28:49:19:af: ad:83:25:48:fd:a6:71:f9:52:31:43:16:34:77:38:76:f8:16: cd:e6:74:4d:71:f4:86:71:8c:e3:d5:ed:6c:12:cc:e4:aa:2d: 61:47:71:7b:91:3a:7e:ed:a6:7c:6c:db:d1:74:29:34:25:ce: d5:c4:33:5c:1f:99:ef:93:d5:d9:33:70:09:a3:2c:b7:d3:94: a4:ce:69:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24LDzEO3cVb0YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NmY3Zjg2OTAtMDI4Yy00ZjM4LTkyM2YtNDFmN2E4OTVjYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbYBvzmZD67oTu51o18k0OJVhHNZH7dFVkya 13O2zW7jV+Ea0ahPedf963fcY+F5G3qYSGiTxkxkuCQMEoI+x+/zKZY9YTmTC+wr 1FQRnX05QPmf2BJpkwaD8n1lrFuiG9GeiNYfvWgSCufGdIVp8cU2ZaYWLwuw9EDV JsTzO/mKQCseFc9vUVzOk63Zsz04sHKQmVakPQS/k2VMs2gFQQnZxAO0z3w+MIo2 l+6ubIX3UzpSzVfvNDp4/NpVAvnoPs7qBZtfBupA2+kpAfMKLFzhh4HKzu52XItU qMTLumzqcEz2PRKpBXaY5FXSkfXV6D4bwdegWThrBgaWRmNAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYqiWfjUts8O8f/zpRtU1HwIZ4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWVmMWRlYmEtYzM5Mi0z ZGRhLTk3NDQtY2U2M2MzMWMzYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBI772MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtRnFN16pTcceJxg8S/P+V6fxTLAUIxC7/og1TMO4KoGvXrbyrUW9IA q+fgnRNu/hTV49V73gNX8Z5MZ5wPUmYKovc6LW/06G9yyc3+nFFYKocYyiiX9B4L 9609mNLJKnoG7IFv6/FHGtWQDMkqp9ZtkjAzCKdzyWMmKdyDe2l/jopj8kMAh9GE P0rQH1w0h1KODQgrFZ5XJ82q66CkoQYnbwn63j37Lh3/Bnv2sj5kKEkZr62DJUj9 pnH5UjFDFjR3OHb4Fs3mdE1x9IZxjOPV7WwSzOSqLWFHcXuROn7tpnxs29F0KTQl ztXEM1wfme+T1dkzcAmjLLfTlKTOaVs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:26 2025 by rpki-client