$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7cec720-b3a4-3c24-8b2c-f482e9adc79c.roa File: a7cec720-b3a4-3c24-8b2c-f482e9adc79c.roa (raw, json) Hash identifier: MbM4ES/DM9KFzBq5tAQqF0a2hYAbjVIgiczRY24fBTs= Subject key identifier: A3:AF:1B:56:15:12:D9:81:2C:15:37:7B:83:2D:E9:D1:BA:C1:4E:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC5B7EBF8D24DB790FB40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7cec720-b3a4-3c24-8b2c-f482e9adc79c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.240.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c5:b7:eb:f8:d2:4d:b7:90:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=72ce03f6-0efc-47da-9289-d9e7bcce9581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:cb:02:4f:1c:52:17:3e:b2:a0:1a:ff:aa: 40:1c:fc:3c:78:82:65:30:e1:2d:ac:05:1a:78:1a: 52:36:0b:28:3a:f2:fe:f7:89:5b:a6:f0:62:38:dc: 29:86:3d:3f:99:3f:ad:80:b9:61:c8:20:46:6e:cb: bd:fb:90:91:f9:34:e8:ea:96:a6:fa:0e:0b:44:ee: ee:53:f3:c6:13:8b:7f:4c:88:c7:bf:e1:ff:dc:c3: dd:af:54:36:c9:e7:6f:a1:e5:41:ff:3e:7f:ed:4e: c2:ba:f1:1d:dc:a7:3c:19:37:7c:25:d5:3d:ca:26: 62:78:5d:93:d1:3f:ff:f1:03:67:80:1e:e9:a7:fe: 07:9b:6b:35:5f:8b:df:60:4d:83:fb:d2:39:b1:65: 4a:8b:f2:2b:2b:a7:f6:4c:3e:98:5c:84:59:fc:f3: c3:cd:62:ec:7e:da:45:e8:48:16:f3:37:b8:0e:2a: 87:66:d1:77:d3:ae:ac:a4:17:0f:21:f9:8d:2e:66: f2:1f:7e:0a:e6:60:1d:b9:4e:e9:c3:2e:3a:e8:ef: 09:2b:1b:59:13:33:4f:11:61:cb:8b:69:c9:34:f6: 35:1e:8d:eb:bc:54:d7:fc:58:d7:f4:a4:f3:fc:95: 72:be:04:69:eb:a5:e9:92:7a:c8:08:e4:20:17:ba: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AF:1B:56:15:12:D9:81:2C:15:37:7B:83:2D:E9:D1:BA:C1:4E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7cec720-b3a4-3c24-8b2c-f482e9adc79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9a:1d:62:cb:0f:a7:20:9b:eb:1a:5d:b8:87:46:8f:ba:58: 87:f9:b5:54:33:08:9c:04:a0:49:ba:e7:bc:02:fb:63:d7:21: 02:9b:86:18:04:3c:23:5b:66:89:d8:05:94:6a:06:0e:86:2f: c6:a0:66:c0:0b:51:3c:69:0a:03:ce:d7:87:d5:96:4c:e8:57: 90:19:88:cb:c3:21:d6:eb:2a:a9:79:32:05:08:c9:77:27:5e: ad:0e:b0:c0:38:df:eb:65:25:c1:ab:95:09:e0:0a:89:cf:62: fd:b7:5d:ad:22:a1:6e:33:88:78:e9:b7:01:89:37:09:c9:9a: 93:e2:9c:5b:c2:ec:07:c0:e7:cc:09:9c:37:5b:da:aa:97:29: 08:3e:2a:11:cc:cb:03:1e:72:b9:42:ac:84:4f:4b:1a:09:fe: 14:c6:c5:f7:68:f4:d9:c9:89:07:a3:5a:4d:25:b2:23:21:85: d1:6a:f7:c4:c5:77:21:91:3d:2b:d2:25:ef:4c:39:0f:92:de: 98:96:0b:c7:74:3b:8f:f4:68:08:36:d2:0b:17:4c:b8:7f:72: c3:6d:e3:32:52:7e:3b:aa:c3:64:51:ca:06:dd:74:6e:55:b1: bd:30:da:b9:c7:73:c4:22:1c:21:c9:88:dd:43:ba:7a:6e:3d: ca:0d:3b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28W36/jSTbeQ+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzJjZTAzZjYtMGVmYy00N2RhLTkyODktZDllN2JjY2U5NTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3DLAk8cUhc+sqAa/6pAHPw8eIJlMOEtrAUa eBpSNgsoOvL+94lbpvBiONwphj0/mT+tgLlhyCBGbsu9+5CR+TTo6pam+g4LRO7u U/PGE4t/TIjHv+H/3MPdr1Q2yedvoeVB/z5/7U7CuvEd3Kc8GTd8JdU9yiZieF2T 0T//8QNngB7pp/4Hm2s1X4vfYE2D+9I5sWVKi/IrK6f2TD6YXIRZ/PPDzWLsftpF 6EgW8ze4DiqHZtF3066spBcPIfmNLmbyH34K5mAduU7pwy466O8JKxtZEzNPEWHL i2nJNPY1Ho3rvFTX/FjX9KTz/JVyvgRp66XpknrICOQgF7rfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOvG1YVEtmBLBU3e4Mt6dG6wU7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTdjZWM3MjAtYjNhNC0z YzI0LThiMmMtZjQ4MmU5YWRjNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/CgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6aHWLLD6cgm+saXbiHRo+6WIf5tVQzCJwEoEm657wC+2PXIQKbhhgE PCNbZonYBZRqBg6GL8agZsALUTxpCgPO14fVlkzoV5AZiMvDIdbrKql5MgUIyXcn Xq0OsMA43+tlJcGrlQngConPYv23Xa0ioW4ziHjptwGJNwnJmpPinFvC7AfA58wJ nDdb2qqXKQg+KhHMywMecrlCrIRPSxoJ/hTGxfdo9NnJiQejWk0lsiMhhdFq98TF dyGRPSvSJe9MOQ+S3piWC8d0O4/0aAg20gsXTLh/csNt4zJSfjuqw2RRygbddG5V sb0w2rnHc8QiHCHJiN1DunpuPcoNO3o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:10 2025 by rpki-client