$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4dd8bee-a5b0-3170-a1b1-04afda46259c.roa File: a4dd8bee-a5b0-3170-a1b1-04afda46259c.roa (raw, json) Hash identifier: j9YOSmpOu0bzyg1kItgXEUoYwY5bcz2abpw0v7v8j4w= Subject key identifier: 22:FB:F3:A7:AC:FF:A5:DF:16:8D:CA:C9:B0:97:E9:D0:DD:6F:DA:5C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEC5FF95760E4B0A4FE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4dd8bee-a5b0-3170-a1b1-04afda46259c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ec:5f:f9:57:60:e4:b0:a4:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ed42e1cb-96c5-48c1-bb07-33d4a6b7743c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:c8:c6:15:c9:3e:2e:37:f1:33:54:d7:83: 96:3d:59:6a:12:47:f9:39:ff:57:8c:92:c0:99:c2: 58:03:14:03:7f:de:d6:08:76:fe:9e:18:d1:b1:b4: 61:46:93:c9:45:62:71:e2:38:bd:e0:1e:2b:bc:be: 30:2d:62:ec:35:22:7f:f9:e5:70:16:53:36:33:dd: 58:93:39:96:69:81:9a:08:e1:9d:7d:0c:e7:44:4b: 40:95:43:2a:78:98:c2:36:b6:c5:76:7c:7f:3a:ea: a9:28:50:d0:b5:3b:2a:21:74:8a:80:3d:e8:f3:cf: c0:1e:da:a3:59:9c:d5:10:16:0b:a6:76:19:07:02: d4:05:61:22:6c:35:54:05:ed:44:11:ae:ff:d4:57: eb:78:eb:6f:b8:cc:fb:ee:a4:3f:48:e4:04:d3:ba: 62:df:81:3d:db:7d:ac:2b:79:31:b7:d6:bd:5b:cf: 50:d1:ac:96:84:15:f1:76:7c:42:1e:4e:a8:50:3c: b5:da:1a:cc:c4:57:c8:c8:b7:bb:fc:ab:62:62:af: 13:ed:fb:64:99:3e:e1:8f:ee:fd:7a:b6:d7:8a:92: 8c:ce:3a:f9:db:29:35:bb:ca:c1:2a:87:9f:25:2c: 43:ac:c9:e5:ca:20:d4:30:19:07:98:49:b9:db:fe: 2b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FB:F3:A7:AC:FF:A5:DF:16:8D:CA:C9:B0:97:E9:D0:DD:6F:DA:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4dd8bee-a5b0-3170-a1b1-04afda46259c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2b:98:0f:8f:18:0e:4e:71:fb:3d:6e:65:84:6f:69:02:88: db:f2:cf:a6:87:6f:3d:76:0e:cd:93:90:4d:91:d6:a1:8d:2b: 4b:29:e0:31:9a:6a:8e:8e:9a:09:be:94:8a:3a:8d:cc:8d:ce: d0:01:0d:98:f8:55:3a:7d:00:1a:14:23:26:cb:61:e1:df:60: 10:0e:59:47:56:ab:51:19:49:90:c1:39:e4:b2:58:9b:1c:2f: 4a:50:7f:c7:57:af:2b:20:8d:fb:80:f3:3c:54:30:75:01:f1: 39:f7:ac:86:02:52:d7:70:32:7b:07:ca:85:1c:49:7f:f2:7f: f1:fd:0b:a0:35:d6:5b:8f:1b:c0:4c:3a:a8:35:f2:90:3e:86: e2:a2:80:09:3c:1e:26:30:ae:d9:45:b4:27:22:94:f8:3b:83: 4b:12:0b:83:b7:6a:08:45:85:6e:15:11:55:d0:37:a9:b6:47: 47:8d:6b:51:55:94:7d:51:a5:40:f0:ce:74:0f:6d:17:86:2e: 97:81:1a:ac:a4:8f:7e:39:9c:0a:62:d8:46:a6:8a:14:9d:66: 62:12:53:bc:67:db:36:55:af:83:f2:cd:2d:53:ad:2a:86:10: 3e:b2:72:58:c2:18:1d:93:43:c3:15:cd:66:56:34:ee:59:c5: 79:2f:a0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+xf+Vdg5LCk/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZWQ0MmUxY2ItOTZjNS00OGMxLWJiMDctMzNkNGE2Yjc3NDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbIxhXJPi438TNU14OWPVlqEkf5Of9XjJLA mcJYAxQDf97WCHb+nhjRsbRhRpPJRWJx4ji94B4rvL4wLWLsNSJ/+eVwFlM2M91Y kzmWaYGaCOGdfQznREtAlUMqeJjCNrbFdnx/OuqpKFDQtTsqIXSKgD3o88/AHtqj WZzVEBYLpnYZBwLUBWEibDVUBe1EEa7/1FfreOtvuMz77qQ/SOQE07pi34E9232s K3kxt9a9W89Q0ayWhBXxdnxCHk6oUDy12hrMxFfIyLe7/KtiYq8T7ftkmT7hj+79 erbXipKMzjr52yk1u8rBKoefJSxDrMnlyiDUMBkHmEm52/4rnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL786es/6XfFo3KybCX6dDdb9pcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRkZDhiZWUtYTViMC0z MTcwLWExYjEtMDRhZmRhNDYyNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcrmA+PGA5Ocfs9bmWEb2kCiNvyz6aHbz12Ds2TkE2R1qGNK0sp4DGa ao6Omgm+lIo6jcyNztABDZj4VTp9ABoUIybLYeHfYBAOWUdWq1EZSZDBOeSyWJsc L0pQf8dXrysgjfuA8zxUMHUB8Tn3rIYCUtdwMnsHyoUcSX/yf/H9C6A11luPG8BM Oqg18pA+huKigAk8HiYwrtlFtCcilPg7g0sSC4O3aghFhW4VEVXQN6m2R0eNa1FV lH1RpUDwznQPbReGLpeBGqykj345nApi2EamihSdZmISU7xn2zZVr4PyzS1TrSqG ED6ycljCGB2TQ8MVzWZWNO5ZxXkvoAo= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:17 2025 by rpki-client