$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa File: a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa (raw, json) Hash identifier: VvIizhJ07Jg77C7uARZyhr/gA3b2m0wlVMDY3rNfUsM= Subject key identifier: FD:BA:41:0A:8E:62:9F:44:12:A5:17:F7:BA:4E:F0:8B:99:2D:6E:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7F395C18A433D472D880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7f:39:5c:18:a4:33:d4:72:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=79858365-962d-48a4-bc07-8028b2baa6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:f9:73:4d:90:d0:9b:4e:da:8d:8e:55:17: cf:a0:86:52:1b:f5:cd:a3:1a:f1:1b:5b:c9:bc:7c: 66:a3:4f:dd:21:6f:be:25:87:75:4d:2a:c1:b0:5b: 1a:3c:6c:64:f3:55:68:bc:b1:bc:85:00:8d:1d:0f: 90:e3:81:05:46:db:99:d7:4f:23:0e:f3:44:bb:3c: 4e:d3:e5:6d:a0:9d:51:c5:c7:9e:79:f1:6d:e3:20: 43:e8:7e:b7:78:90:c7:46:b3:bc:94:b0:eb:c5:01: 63:a7:41:f6:28:99:ee:fb:b2:52:2a:78:af:13:8e: 27:30:58:14:8c:43:8f:44:1d:e2:ea:d0:5f:a1:81: ab:80:0a:6f:51:3d:35:fd:80:66:d0:49:65:c1:52: 5f:a4:ff:00:83:95:05:3f:11:69:9e:43:20:4b:2c: 65:4c:21:5a:94:44:c1:47:a3:8a:91:ec:07:ef:97: 7f:4c:be:a2:6b:23:e3:74:83:9e:d2:4c:c8:df:57: f1:59:a5:61:dd:fa:79:a0:71:49:98:8b:1d:e7:f1: 72:d2:c8:8e:4f:70:0d:77:bb:28:64:77:d7:bf:13: 86:27:bd:53:ef:92:c5:79:fb:d9:ca:68:d0:3e:b8: 14:1b:33:91:ca:01:e8:f9:df:48:17:2b:bc:bd:3a: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BA:41:0A:8E:62:9F:44:12:A5:17:F7:BA:4E:F0:8B:99:2D:6E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6a:c3:47:b2:37:85:bc:0b:db:66:0a:83:4b:d4:c5:c0:a0: 46:82:73:ec:cd:2f:90:e2:48:98:b8:64:58:d4:54:2f:37:b3: 2e:c2:97:6b:b3:d4:5b:d4:6a:78:29:64:39:5c:33:a4:68:72: e7:31:4c:6a:2d:07:a1:3f:09:c8:42:da:db:60:30:46:fe:8f: bf:fc:75:77:06:a1:28:d4:71:98:df:be:1a:8d:81:d8:09:72: 76:7b:d7:49:1f:c9:df:16:2a:8e:d8:29:ee:89:44:24:c6:47: aa:2b:54:62:d0:62:30:59:99:7f:7d:cd:0e:12:ea:50:3f:45: b3:b1:ff:c0:f7:fb:ea:0d:e2:e3:d1:3b:e7:f8:15:31:4a:dd: eb:42:ba:fb:13:93:7a:6c:ab:14:5e:77:5f:0e:3c:52:fa:2b: 70:71:6c:95:c6:11:d0:b9:7f:74:ff:35:01:af:f8:ed:2d:4e: 1d:a3:37:68:59:1f:9e:a4:7c:a3:ec:fe:64:d0:ba:9b:cf:be: 54:04:8b:aa:d0:2e:f8:fa:7d:53:12:65:02:0f:ac:10:da:cf: 5f:62:16:80:9e:8c:a9:e0:a8:82:14:fb:b7:2f:3a:0f:30:a4: 16:09:c5:23:e4:83:30:58:c9:cc:00:f2:8a:f2:d3:44:a5:07: 4d:4c:4a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2385XBikM9Ry2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Nzk4NTgzNjUtOTYyZC00OGE0LWJjMDctODAyOGIyYmFhNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3f5c02Q0JtO2o2OVRfPoIZSG/XNoxrxG1vJ vHxmo0/dIW++JYd1TSrBsFsaPGxk81VovLG8hQCNHQ+Q44EFRtuZ108jDvNEuzxO 0+VtoJ1RxceeefFt4yBD6H63eJDHRrO8lLDrxQFjp0H2KJnu+7JSKnivE44nMFgU jEOPRB3i6tBfoYGrgApvUT01/YBm0EllwVJfpP8Ag5UFPxFpnkMgSyxlTCFalETB R6OKkewH75d/TL6iayPjdIOe0kzI31fxWaVh3fp5oHFJmIsd5/Fy0siOT3ANd7so ZHfXvxOGJ71T75LFefvZymjQPrgUGzORygHo+d9IFyu8vTpCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP26QQqOYp9EEqUX97pO8IuZLW7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVhYWYwNTgtOWZiYy0z NmQ3LTg3N2EtMWE0MjdhYTFlNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1qw0eyN4W8C9tmCoNL1MXAoEaCc+zNL5DiSJi4ZFjUVC83sy7Cl2uz 1FvUangpZDlcM6RocucxTGotB6E/CchC2ttgMEb+j7/8dXcGoSjUcZjfvhqNgdgJ cnZ710kfyd8WKo7YKe6JRCTGR6orVGLQYjBZmX99zQ4S6lA/RbOx/8D3++oN4uPR O+f4FTFK3etCuvsTk3psqxRed18OPFL6K3BxbJXGEdC5f3T/NQGv+O0tTh2jN2hZ H56kfKPs/mTQupvPvlQEi6rQLvj6fVMSZQIPrBDaz19iFoCejKngqIIU+7cvOg8w pBYJxSPkgzBYycwA8ory00SlB01MSkQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:44 2025 by rpki-client