$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa File: a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa (raw, json) Hash identifier: ZtUqDFmt8E85U7/joSr81mcwT8ROdKprdHXMSaqCSmE= Subject key identifier: 2C:8A:8D:21:20:87:89:5C:92:B0:7F:3D:FF:70:FD:11:2C:31:5F:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB80E96AA15AFA497838E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.240.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:80:e9:6a:a1:5a:fa:49:78:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3c3aaf5d-6326-4d77-9370-8cdfdb4b492f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:a6:fa:fb:cb:8a:f1:e0:96:58:5c:2a:a6: 18:74:4e:13:75:61:09:f2:95:5e:cd:e2:de:29:09: 25:7b:f8:19:47:74:eb:35:90:46:f6:ff:01:61:2c: 0b:77:98:ce:43:8c:70:ad:1c:4c:c4:9b:85:3b:66: ac:c1:97:64:1a:eb:2d:f8:b9:e2:94:80:64:87:12: 23:3b:02:b3:c9:34:7b:61:a8:55:71:d7:af:19:7d: b9:c7:44:73:e2:b9:99:2e:58:73:de:69:99:d7:00: 4f:61:e8:f6:34:69:4c:bc:c3:1c:ef:fc:4b:ec:f5: 0c:d2:fb:1e:aa:f9:cb:bc:77:77:95:61:0a:12:5d: 47:7b:c3:d8:5e:e9:a0:ef:2d:75:01:4e:c8:b3:96: f6:17:2b:00:fb:30:72:86:ad:a8:d2:05:52:0d:c4: 59:8a:f8:3a:7e:85:5e:f1:dc:01:c5:a6:b0:2e:99: 87:7a:79:be:5f:e6:16:dc:8c:7f:36:cf:8c:c7:ee: 95:66:1f:55:69:c4:5c:84:b3:e3:c2:a6:b6:ae:6a: 0f:d0:ac:aa:fe:0b:66:d9:7d:46:28:65:22:39:50: e7:35:25:31:da:cf:43:ce:fe:84:be:a8:4a:a5:7e: 00:be:c5:ab:98:10:bd:41:05:f1:71:be:08:63:41: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:8D:21:20:87:89:5C:92:B0:7F:3D:FF:70:FD:11:2C:31:5F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:90:be:cd:d4:ac:a8:12:01:15:ae:6b:04:0c:c1:c5:15:ee: ff:66:40:59:17:49:eb:5b:79:b2:de:e5:ff:7b:aa:e9:42:33: 5b:41:4d:63:24:98:ac:0b:21:57:16:22:eb:02:fc:38:ef:68: 4b:52:64:67:45:57:76:c5:76:98:74:36:3b:26:94:35:e7:54: 47:02:f4:35:30:5d:20:7f:b2:74:2a:6c:a6:99:8b:4f:5c:90: 4d:6c:10:2b:a8:28:7a:e4:79:f3:fd:65:aa:2b:0e:c7:54:2b: a3:ea:bf:36:88:07:d8:49:b0:b7:40:c5:75:7c:de:b3:e6:0e: 6c:b6:0e:54:3c:cd:ba:64:0b:25:c5:b2:87:60:de:f9:f7:9a: 11:53:4b:c4:af:68:95:d9:b1:2c:ae:74:c8:e5:9e:51:96:0e: 57:7b:c5:07:b7:4d:82:f5:3f:2f:09:a5:81:5a:7c:48:9f:ae: a0:fc:af:2d:53:03:dc:6d:f6:d7:d9:7b:39:1d:2a:f4:f3:8b: 90:b6:5d:07:61:e6:12:7f:59:11:88:60:e9:9d:9f:74:29:8c: c5:0f:ef:02:77:23:eb:45:9e:b0:b8:d5:9b:a1:ee:72:15:dc: fa:f3:5c:d8:3f:56:50:c8:46:b7:13:71:2f:4b:2c:cb:54:79: f3:45:30:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24DpaqFa+kl4OOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk M2MzYWFmNWQtNjMyNi00ZDc3LTkzNzAtOGNkZmRiNGI0OTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2m+vvLivHgllhcKqYYdE4TdWEJ8pVezeLe KQkle/gZR3TrNZBG9v8BYSwLd5jOQ4xwrRxMxJuFO2aswZdkGust+LnilIBkhxIj OwKzyTR7YahVcdevGX25x0Rz4rmZLlhz3mmZ1wBPYej2NGlMvMMc7/xL7PUM0vse qvnLvHd3lWEKEl1He8PYXumg7y11AU7Is5b2FysA+zByhq2o0gVSDcRZivg6foVe 8dwBxaawLpmHenm+X+YW3Ix/Ns+Mx+6VZh9VacRchLPjwqa2rmoP0Kyq/gtm2X1G KGUiOVDnNSUx2s9Dzv6EvqhKpX4AvsWrmBC9QQXxcb4IY0GeiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyKjSEgh4lckrB/Pf9w/REsMV/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRhYTIzMGEtZTQ2NC0z ZWFkLWE1NDMtMTNlOGQ3YTNkZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKQvs3UrKgSARWuawQMwcUV7v9mQFkXSetbebLe5f97qulCM1tBTWMk mKwLIVcWIusC/DjvaEtSZGdFV3bFdph0NjsmlDXnVEcC9DUwXSB/snQqbKaZi09c kE1sECuoKHrkefP9ZaorDsdUK6PqvzaIB9hJsLdAxXV83rPmDmy2DlQ8zbpkCyXF sodg3vn3mhFTS8SvaJXZsSyudMjlnlGWDld7xQe3TYL1Py8JpYFafEifrqD8ry1T A9xt9tfZezkdKvTzi5C2XQdh5hJ/WRGIYOmdn3QpjMUP7wJ3I+tFnrC41Zuh7nIV 3PrzXNg/VlDIRrcTcS9LLMtUefNFMKg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:40 2025 by rpki-client