$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa File: a4216241-8789-3504-8e99-5bd2f64d40a4.roa (raw, json) Hash identifier: TwduI6q441cV2GtcZ1KaI2di8qTuJa8i7cUcSG4jfnA= Subject key identifier: A3:9E:68:4E:C7:23:C8:29:2A:97:C3:CF:19:C7:E6:A5:14:92:A7:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE2CA6C1B594530D28880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.189.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e2:ca:6c:1b:59:45:30:d2:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=44891164-787b-4cd7-84f8-3086833ddd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:c4:b3:60:ac:4e:f7:24:35:a3:e1:04:b2: 26:7c:c1:6d:c5:d6:8e:2f:f2:94:1f:b8:09:c5:be: 36:11:42:a5:d2:33:3c:67:5b:55:8b:d9:04:cf:2a: 2a:39:61:11:91:2e:df:30:57:36:45:67:2f:a6:6f: d2:bc:3b:9f:1c:40:3d:67:c3:12:fb:a4:8b:65:49: f3:3c:3e:25:18:1a:17:db:1d:86:e7:d3:cb:e1:67: 5c:40:52:f2:d0:19:69:59:1c:6e:42:db:5e:07:44: 92:53:d6:ec:d8:19:1f:4d:8d:fc:01:66:83:73:74: 81:e3:bc:5b:57:29:46:a4:35:b6:88:90:bd:62:e5: bd:0d:0c:49:40:0c:a4:ab:ff:ef:ab:08:fd:ed:bc: 8a:ec:2d:60:1d:b8:90:87:e0:e3:97:3a:c7:48:99: 88:b6:8f:bf:0e:6f:72:0c:9e:70:a1:5c:ac:fe:8e: 04:4a:9d:ce:1a:44:ec:c4:e1:8e:23:3e:1a:8c:ee: 42:d9:8f:d1:dd:f3:3e:40:29:3b:fe:f9:97:8d:2e: 3a:23:dc:be:20:0d:23:be:d5:49:bf:40:cb:4f:0e: 97:a3:2a:39:1b:50:1b:09:81:bd:7d:ce:7b:98:bb: 13:de:01:f0:60:f6:5d:85:f5:ed:d6:3c:30:99:37: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:68:4E:C7:23:C8:29:2A:97:C3:CF:19:C7:E6:A5:14:92:A7:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:51:25:2b:29:8f:7c:3e:af:a8:3c:20:aa:5e:66:ba:a2:a4: 52:4a:ea:b8:fd:87:a5:be:33:7c:69:97:75:61:c4:59:6a:30: fd:1d:1a:26:88:65:ee:58:51:ed:c1:4d:2f:0f:df:3d:13:37: e7:ac:43:15:f4:e7:c0:5b:9e:a1:ea:5f:57:58:b7:0c:ee:fb: 47:af:2d:01:3a:1d:f0:f4:62:d9:fe:04:f5:50:95:b3:c2:b8: d7:cb:9d:84:ef:3a:d4:b2:b1:10:9e:74:1c:b7:72:5d:6c:2c: af:85:44:b8:2a:89:02:68:3c:95:9c:20:01:a4:e1:c6:0e:7c: ed:70:c9:22:5f:29:16:f3:59:56:b6:b6:04:21:c1:09:7c:67: e1:c0:2e:5c:e3:c1:dd:4b:75:dc:55:97:95:41:7b:ce:29:f4: de:a8:f0:23:f7:0f:26:16:cb:3c:b9:65:7f:0a:b3:32:f1:2a: a6:2c:b4:8f:63:64:94:22:fe:00:9c:a5:02:15:bc:e4:b0:35: ad:50:45:29:10:f2:d3:46:b0:10:7b:a1:42:b0:69:38:70:6d: 70:37:ac:c1:62:6e:90:25:f6:da:ac:79:c8:91:37:54:5e:65: e5:84:93:d6:31:31:d3:ba:19:13:c4:7e:99:b3:28:82:55:7f: de:5a:9b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+LKbBtZRTDSiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDQ4OTExNjQtNzg3Yi00Y2Q3LTg0ZjgtMzA4NjgzM2RkZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi23Es2CsTvckNaPhBLImfMFtxdaOL/KUH7gJ xb42EUKl0jM8Z1tVi9kEzyoqOWERkS7fMFc2RWcvpm/SvDufHEA9Z8MS+6SLZUnz PD4lGBoX2x2G59PL4WdcQFLy0BlpWRxuQtteB0SSU9bs2BkfTY38AWaDc3SB47xb VylGpDW2iJC9YuW9DQxJQAykq//vqwj97byK7C1gHbiQh+DjlzrHSJmIto+/Dm9y DJ5woVys/o4ESp3OGkTsxOGOIz4ajO5C2Y/R3fM+QCk7/vmXjS46I9y+IA0jvtVJ v0DLTw6Xoyo5G1AbCYG9fc57mLsT3gHwYPZdhfXt1jwwmTf/EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOeaE7HI8gpKpfDzxnH5qUUkqfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQyMTYyNDEtODc4OS0z NTA0LThlOTktNWJkMmY2NGQ0MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI72gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9RJSspj3w+r6g8IKpeZrqipFJK6rj9h6W+M3xpl3VhxFlqMP0dGiaI Ze5YUe3BTS8P3z0TN+esQxX058BbnqHqX1dYtwzu+0evLQE6HfD0Ytn+BPVQlbPC uNfLnYTvOtSysRCedBy3cl1sLK+FRLgqiQJoPJWcIAGk4cYOfO1wySJfKRbzWVa2 tgQhwQl8Z+HALlzjwd1LddxVl5VBe84p9N6o8CP3DyYWyzy5ZX8KszLxKqYstI9j ZJQi/gCcpQIVvOSwNa1QRSkQ8tNGsBB7oUKwaThwbXA3rMFibpAl9tqseciRN1Re ZeWEk9YxMdO6GRPEfpmzKIJVf95am1U= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:34 2025 by rpki-client