$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa File: ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa (raw, json) Hash identifier: ORG6zghF+Yox8Usg3FXlvcZIwTyDbJtF+c8RVM9LYjU= Subject key identifier: EA:61:33:05:D7:51:72:64:78:4B:C9:9B:75:95:AB:52:BA:8F:B8:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC262A7B2CDC07A588200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.221.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c2:62:a7:b2:cd:c0:7a:58:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6b2e57e7-a98b-4628-b222-604948ac3a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:e9:a7:e8:f8:e0:ff:df:45:a2:82:bb:05: 91:37:3f:a4:53:6d:b7:cb:fa:88:f1:01:0f:9b:3c: 22:0c:17:f3:23:61:5b:27:7b:44:61:f6:cd:00:60: e9:cd:8d:39:04:43:1a:aa:fe:34:86:1e:3c:d6:7e: c5:d7:2d:72:5c:e1:29:33:c7:4d:0a:00:ca:82:87: 65:35:1a:17:68:0b:84:66:0e:58:7d:98:07:dc:9d: 1e:bf:dd:4e:14:b0:5e:0b:10:1b:da:93:d0:4a:a3: 4a:83:b6:94:e5:a0:33:ae:6f:4b:9d:17:a6:ec:9a: e9:f7:c8:fa:0c:a2:bc:8b:13:64:9d:54:23:4f:c0: 0a:60:70:98:8b:7f:eb:cd:67:ac:3c:d8:a3:9c:df: e0:24:f1:cb:71:52:24:80:32:14:04:49:ea:c7:f9: f1:91:32:fe:76:76:f9:d2:72:e9:c1:08:ee:71:f5: bb:42:c8:c0:d3:a8:1b:27:83:cf:ea:38:5b:a7:73: a6:45:52:8d:5d:df:e7:a1:12:7f:de:3c:95:3f:51: 76:71:a3:34:d2:8b:f7:82:2b:72:00:5e:7d:75:c5: a9:9c:aa:1f:ad:32:7b:d6:39:61:3b:87:7f:03:3f: 5f:72:26:1c:2f:9a:71:d0:de:63:f5:bc:8a:a9:06: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:33:05:D7:51:72:64:78:4B:C9:9B:75:95:AB:52:BA:8F:B8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.221.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8b:34:d1:c3:a1:34:20:30:9d:a1:95:56:8a:8b:e6:a6:bb: d6:dd:5a:5a:cc:cb:46:4d:39:02:24:be:f7:fe:3a:cb:b7:26: be:9c:7f:a5:60:5f:a0:28:bd:37:6e:75:87:93:9d:a5:ba:f2: ba:bb:c4:2a:76:8d:ce:72:55:90:6e:e6:de:c9:7e:4c:05:8f: ed:6a:99:d4:76:7d:b5:42:66:95:7b:0f:1b:df:2a:a6:22:2e: d7:11:4d:05:63:60:5c:9a:2c:ff:bd:c1:93:95:64:00:4e:e1: 96:2e:b8:e0:59:0f:d2:a5:5a:6c:61:80:8b:5c:4e:bd:77:af: c4:15:5d:20:54:cd:21:69:61:31:79:a3:2d:82:d1:d4:7d:56: c8:fa:86:e1:d2:a6:3e:d2:64:02:4d:52:1b:8e:aa:58:c6:fd: 90:94:be:60:26:85:ee:ab:50:dd:ee:f8:35:bb:82:c5:9c:07: a9:5e:d3:84:ff:45:d3:be:b8:e1:ed:89:3e:3e:cd:17:5f:54: 8a:17:38:b5:ba:e1:9d:48:59:3b:d1:81:72:75:84:3f:1e:f5: 9d:4f:fe:93:b3:37:18:e3:a2:e1:08:2e:43:92:63:da:72:94: b2:65:80:76:e1:28:0a:a6:00:8c:40:df:f0:79:93:87:e9:7d: 09:97:89:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28Jip7LNwHpYggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NmIyZTU3ZTctYTk4Yi00NjI4LWIyMjItNjA0OTQ4YWMzYTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGbpp+j44P/fRaKCuwWRNz+kU223y/qI8QEP mzwiDBfzI2FbJ3tEYfbNAGDpzY05BEMaqv40hh481n7F1y1yXOEpM8dNCgDKgodl NRoXaAuEZg5YfZgH3J0ev91OFLBeCxAb2pPQSqNKg7aU5aAzrm9LnRem7Jrp98j6 DKK8ixNknVQjT8AKYHCYi3/rzWesPNijnN/gJPHLcVIkgDIUBEnqx/nxkTL+dnb5 0nLpwQjucfW7QsjA06gbJ4PP6jhbp3OmRVKNXd/noRJ/3jyVP1F2caM00ov3gity AF59dcWpnKofrTJ71jlhO4d/Az9fciYcL5px0N5j9byKqQajuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOphMwXXUXJkeEvJm3WVq1K6j7hoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWMwMTI1Y2ItMDYxNy0z ZTZkLTg1YzAtNGJlZjM2NjhhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI90gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyLNNHDoTQgMJ2hlVaKi+amu9bdWlrMy0ZNOQIkvvf+Osu3Jr6cf6Vg X6AovTdudYeTnaW68rq7xCp2jc5yVZBu5t7JfkwFj+1qmdR2fbVCZpV7DxvfKqYi LtcRTQVjYFyaLP+9wZOVZABO4ZYuuOBZD9KlWmxhgItcTr13r8QVXSBUzSFpYTF5 oy2C0dR9Vsj6huHSpj7SZAJNUhuOqljG/ZCUvmAmhe6rUN3u+DW7gsWcB6le04T/ RdO+uOHtiT4+zRdfVIoXOLW64Z1IWTvRgXJ1hD8e9Z1P/pOzNxjjouEILkOSY9py lLJlgHbhKAqmAIxA3/B5k4fpfQmXiSI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:54 2025 by rpki-client