$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa File: afa8bcd3-b419-3678-be0e-fb0871e49b99.roa (raw, json) Hash identifier: Sml6MkOrkmiIAV3rqUN078dJlkeHojISpUvU53YbZAg= Subject key identifier: 45:83:A4:BC:4E:74:76:37:D8:F0:91:9F:85:C4:66:EF:3B:0C:2D:0E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8697E69D8AC7429D2680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.201.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:86:97:e6:9d:8a:c7:42:9d:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ed4dffcb-2e3b-46fc-b02a-dfbe50498f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:6a:54:81:c1:27:d7:44:89:99:84:14:14: 50:b6:d8:d6:6d:00:22:89:cb:51:23:06:f4:59:c9: ab:2c:36:70:82:d8:42:67:60:92:9f:c4:78:7b:75: 5c:ef:16:c5:5b:3e:74:f2:80:d1:1c:cd:88:be:e1: 7e:22:8a:4b:6e:0e:ca:35:12:43:0c:d8:4c:85:ba: 36:a8:ad:b6:a2:04:c4:dd:92:13:16:4d:4a:91:87: eb:f3:5b:8e:8e:7f:59:49:ef:35:4b:02:0d:79:fa: 64:ad:c3:58:71:9a:e0:cc:51:48:7e:0e:8c:11:75: 61:0e:48:3d:a3:7b:45:45:36:7a:59:a0:1f:72:40: 5b:12:6e:17:63:82:55:6c:7b:14:b8:bc:a1:fd:11: 0f:5e:54:08:c9:b6:1a:06:b7:b9:b2:27:65:8c:a2: 0e:d3:f5:a7:0d:83:09:4c:e0:57:f2:b9:ec:b2:c8: 52:bb:50:b0:02:ad:5b:e1:50:3f:3c:b0:8f:32:b7: 11:ff:e4:5a:ed:d1:36:34:99:2e:7c:56:b8:1e:76: d9:72:83:f1:69:16:d4:f3:0a:7d:d7:48:b6:39:f6: cf:dc:a7:12:17:eb:b9:a4:6b:f7:e6:b4:22:62:6c: d7:86:c4:58:21:b7:3d:a4:f8:38:4b:ce:d9:d9:1b: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:A4:BC:4E:74:76:37:D8:F0:91:9F:85:C4:66:EF:3B:0C:2D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:59:c1:a0:16:9c:c8:5e:db:a6:e8:4b:07:45:da:52:1e:e8: 95:46:07:91:82:cc:20:4c:46:84:82:b9:88:0b:84:87:6d:fc: db:6a:08:a9:59:40:eb:05:c2:e2:cf:91:bf:86:55:3f:b2:80: 1a:94:67:d7:b8:2c:b2:f2:64:15:67:a2:8f:2d:fc:85:46:38: 25:d6:88:ef:84:9c:03:d9:4f:1e:f9:e6:33:f6:4e:0c:36:3d: d5:c1:ef:25:d9:f3:2e:90:5f:f0:81:51:34:40:73:4e:3d:1a: a9:99:35:57:26:11:e5:af:9f:38:c2:8f:8d:01:e8:ff:16:1f: c4:5e:72:ff:7d:97:ac:d5:94:5c:63:0a:0d:cc:d9:f2:e0:43: 31:76:ed:b2:5c:83:3c:2b:eb:24:b5:1b:a6:92:37:20:26:2d: a0:5d:e0:03:5d:0c:c9:eb:2a:9f:ca:c8:a0:bc:1b:87:ee:8a: 65:23:74:ef:ed:9d:6a:8c:32:ee:ea:7d:c2:2e:60:4f:8e:69: f6:e5:21:a0:84:20:d1:eb:1e:00:dc:1b:96:63:98:da:20:7f: 2c:26:b6:45:e4:80:24:fe:a5:1a:00:77:5f:9c:56:c7:d1:0c: 13:40:97:ca:a6:21:f2:97:b9:97:43:d5:f1:25:c8:00:3d:5c: ab:20:4e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24aX5p2Kx0KdJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZWQ0ZGZmY2ItMmUzYi00NmZjLWIwMmEtZGZiZTUwNDk4ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv51qVIHBJ9dEiZmEFBRQttjWbQAiictRIwb0 WcmrLDZwgthCZ2CSn8R4e3Vc7xbFWz508oDRHM2IvuF+IopLbg7KNRJDDNhMhbo2 qK22ogTE3ZITFk1KkYfr81uOjn9ZSe81SwINefpkrcNYcZrgzFFIfg6MEXVhDkg9 o3tFRTZ6WaAfckBbEm4XY4JVbHsUuLyh/REPXlQIybYaBre5sidljKIO0/WnDYMJ TOBX8rnssshSu1CwAq1b4VA/PLCPMrcR/+Ra7dE2NJkufFa4HnbZcoPxaRbU8wp9 10i2OfbP3KcSF+u5pGv35rQiYmzXhsRYIbc9pPg4S87Z2Rv+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWDpLxOdHY32PCRn4XEZu87DC0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZhOGJjZDMtYjQxOS0z Njc4LWJlMGUtZmIwODcxZTQ5Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtZwaAWnMhe26boSwdF2lIe6JVGB5GCzCBMRoSCuYgLhIdt/NtqCKlZ QOsFwuLPkb+GVT+ygBqUZ9e4LLLyZBVnoo8t/IVGOCXWiO+EnAPZTx755jP2Tgw2 PdXB7yXZ8y6QX/CBUTRAc049GqmZNVcmEeWvnzjCj40B6P8WH8Recv99l6zVlFxj Cg3M2fLgQzF27bJcgzwr6yS1G6aSNyAmLaBd4ANdDMnrKp/KyKC8G4fuimUjdO/t nWqMMu7qfcIuYE+OafblIaCEINHrHgDcG5ZjmNogfywmtkXkgCT+pRoAd1+cVsfR DBNAl8qmIfKXuZdD1fElyAA9XKsgTiU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:39 2025 by rpki-client