$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a452bfe8-c4fb-37a9-8f45-794d9268dfb3.roa File: a452bfe8-c4fb-37a9-8f45-794d9268dfb3.roa (raw, json) Hash identifier: gCwGNbymTtQYKW5b8bSu4hPttPCO7JS80mL2Cb1A8Vs= Subject key identifier: 7F:30:4D:E9:A8:F9:1B:6E:46:1A:D4:CE:AD:7C:99:DC:0E:99:83:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBCE153CB24F3C017A3080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a452bfe8-c4fb-37a9-8f45-794d9268dfb3.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.198.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ce:15:3c:b2:4f:3c:01:7a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=30821b96-136e-4983-b3a5-349e0a02f950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d9:73:2c:a3:ef:05:58:fb:f2:43:da:17:bd: 5d:da:7b:89:0d:aa:83:5d:a9:cc:b9:7e:b6:b5:46: e4:67:1a:46:9c:68:e0:aa:9f:d5:e2:1b:71:32:47: f7:de:8a:ff:4b:ae:1f:e3:80:d0:93:60:3a:54:65: dc:fe:69:6d:72:4b:01:66:b2:ed:ff:69:e8:d1:3c: 0a:ba:4a:6b:35:3e:86:70:c5:73:38:c1:3e:3b:fc: 90:e2:f3:2a:15:45:10:01:75:2a:b9:e8:31:50:89: 1b:96:76:95:7a:55:f6:42:21:0e:53:84:49:96:27: 32:bf:6a:83:07:e9:75:9c:0c:f8:e8:9f:34:f3:22: 98:34:0c:95:92:87:06:77:f1:e1:7d:96:17:ab:a4: 76:26:e4:15:9d:d8:9a:8c:21:8b:d4:d5:3f:e6:9e: 48:aa:7c:2e:12:c5:25:d8:28:58:7b:80:48:e0:11: 63:bf:5e:89:71:ce:c2:53:17:1e:c0:bd:94:3f:77: a2:ab:77:ff:fb:f4:dd:dd:af:cb:28:b1:e6:a1:13: 50:84:0d:ea:4b:09:6c:6a:57:af:57:d1:bb:95:72: 1d:06:b5:50:5a:b7:51:4a:6e:c0:19:6e:0f:3a:66: 31:49:83:f3:63:24:86:88:7a:a2:35:a6:33:09:71: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:30:4D:E9:A8:F9:1B:6E:46:1A:D4:CE:AD:7C:99:DC:0E:99:83:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a452bfe8-c4fb-37a9-8f45-794d9268dfb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f5:99:8a:55:04:78:14:53:0d:1c:30:a0:e5:52:08:6d:7b: ca:90:84:fb:da:93:6c:f2:02:32:a6:7b:2d:5a:24:2c:81:a0: 7a:56:db:28:98:95:ca:35:f3:92:9b:43:8d:f9:dc:ef:8b:0a: d4:bb:0a:d1:bd:0b:81:e3:3f:ff:da:b1:39:7d:40:6c:37:23: 16:87:86:84:65:a3:5c:ba:34:aa:f3:64:a3:41:3f:b1:5c:72: 09:9d:8b:0b:a8:00:fd:ef:a6:a8:87:51:da:6c:36:e0:3b:1e: 0a:15:81:1a:af:46:06:ca:39:c7:bb:5a:24:3e:13:b6:e6:91: 12:57:fa:54:c5:31:f5:5c:80:e8:f5:0b:0c:d6:3e:85:45:6b: 28:07:2f:4a:a9:7f:f3:4c:47:26:63:9c:b3:b0:de:27:ec:ba: 24:d0:3d:12:91:87:53:91:73:6a:cc:77:d0:eb:cb:77:63:5e: b5:01:6e:a7:47:0b:89:72:97:71:95:cf:d3:80:1f:dd:6c:d2: c2:b7:5f:19:b5:67:77:41:5f:49:bb:0d:aa:d2:7f:7a:03:6e: e7:c1:d7:99:3d:50:35:89:4d:f8:3c:0d:ed:ff:4a:75:b5:25: 23:f3:f9:67:df:aa:6a:b8:62:91:4a:41:b6:90:60:9c:ff:58: 7f:fa:77:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG284VPLJPPAF6MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzA4MjFiOTYtMTM2ZS00OTgzLWIzYTUtMzQ5ZTBhMDJmOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dlzLKPvBVj78kPaF71d2nuJDaqDXanMuX62 tUbkZxpGnGjgqp/V4htxMkf33or/S64f44DQk2A6VGXc/mltcksBZrLt/2no0TwK ukprNT6GcMVzOME+O/yQ4vMqFUUQAXUquegxUIkblnaVelX2QiEOU4RJlicyv2qD B+l1nAz46J808yKYNAyVkocGd/HhfZYXq6R2JuQVndiajCGL1NU/5p5IqnwuEsUl 2ChYe4BI4BFjv16Jcc7CUxcewL2UP3eiq3f/+/Td3a/LKLHmoRNQhA3qSwlsalev V9G7lXIdBrVQWrdRSm7AGW4POmYxSYPzYySGiHqiNaYzCXG3RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8wTemo+RtuRhrUzq18mdwOmYMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQ1MmJmZTgtYzRmYi0z N2E5LThmNDUtNzk0ZDkyNjhkZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8awMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD1mYpVBHgUUw0cMKDlUghte8qQhPvak2zyAjKmey1aJCyBoHpW2yiY lco185KbQ4353O+LCtS7CtG9C4HjP//asTl9QGw3IxaHhoRlo1y6NKrzZKNBP7Fc cgmdiwuoAP3vpqiHUdpsNuA7HgoVgRqvRgbKOce7WiQ+E7bmkRJX+lTFMfVcgOj1 CwzWPoVFaygHL0qpf/NMRyZjnLOw3ifsuiTQPRKRh1ORc2rMd9Dry3djXrUBbqdH C4lyl3GVz9OAH91s0sK3Xxm1Z3dBX0m7DarSf3oDbufB15k9UDWJTfg8De3/SnW1 JSPz+Wffqmq4YpFKQbaQYJz/WH/6d9M= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:19 2025 by rpki-client