$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b531f7f9-e14c-3864-bedb-2175cd9996f8.roa File: b531f7f9-e14c-3864-bedb-2175cd9996f8.roa (raw, json) Hash identifier: AjvI4NDyjT6cAJNKnqnZIEEMzCmIYHoiYhi/EXMQM8Q= Subject key identifier: E9:A0:77:BA:BC:6E:14:33:11:B2:11:39:6F:FC:DF:D0:3C:FC:D6:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7BECC9DEB6782788A300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b531f7f9-e14c-3864-bedb-2175cd9996f8.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.221.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7b:ec:c9:de:b6:78:27:88:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=616edcd1-06b9-4f9e-a954-78399aedbb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e6:cd:78:c2:10:49:8a:99:dc:12:51:d7:af: 18:fd:08:0f:74:d5:31:61:59:b9:3a:dd:1c:92:cb: d6:01:a4:e3:05:06:65:71:76:af:6b:3b:6c:ec:bb: 93:25:6a:98:3d:02:73:d0:ee:b4:0f:22:0b:14:b9: f8:fe:cb:92:b9:6b:63:21:00:ef:74:bc:b5:28:83: 3b:81:4d:18:9a:a4:06:f4:80:bf:f6:50:d7:9b:7a: e9:61:76:43:b7:7e:38:80:1b:04:d6:b3:48:bb:5e: 69:21:75:9c:33:17:53:e0:17:6a:8d:df:9d:30:ce: 0d:af:cc:47:c8:9d:0f:5a:ba:32:86:13:e5:d0:fd: 84:ba:b9:f2:36:32:d0:a4:49:b4:67:79:c1:07:78: 72:ad:2d:dd:95:44:04:4c:5d:70:3b:2e:3e:2b:ab: da:fb:bf:d9:6e:4f:db:21:2d:b6:76:6f:f6:97:3b: 49:c0:e2:1e:a0:fb:1b:38:92:83:84:73:22:2e:49: 4f:7d:b2:d1:be:ce:d3:d5:04:53:c3:c6:40:59:93: 3a:c0:9f:4f:f9:27:12:eb:23:ba:9e:96:4e:cf:c2: e4:40:0b:64:00:c0:c6:97:8a:74:61:99:86:7b:61: 9b:71:e0:b1:96:35:19:99:57:a1:0a:8a:97:cd:b8: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A0:77:BA:BC:6E:14:33:11:B2:11:39:6F:FC:DF:D0:3C:FC:D6:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b531f7f9-e14c-3864-bedb-2175cd9996f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.221.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:af:c2:ed:fb:f1:dc:8c:4a:33:29:bb:17:15:0f:06:bc:ec: da:50:98:33:12:6b:c3:96:c2:ea:bb:7a:03:7d:05:7f:a4:a3: 13:94:ef:64:58:ef:d3:f4:12:ef:e0:7b:19:8a:9a:6c:fe:c4: 30:bc:0a:e0:e7:a6:7d:a2:9a:e0:17:74:3a:da:3b:ef:6f:24: c3:b8:4c:12:c3:ff:0b:05:ec:2f:1d:03:75:ef:73:62:67:2b: f3:33:d1:6b:fa:6b:af:7e:c5:f8:f8:5b:1d:81:26:f6:9b:19: 27:5f:0e:b3:90:8c:37:bd:9b:73:34:8f:60:8a:b7:3b:b5:33: 3f:89:74:d6:11:e5:e1:aa:c0:ba:c6:5d:59:79:00:58:7a:4d: f1:ad:4e:c6:45:4d:1d:2c:13:e6:b9:44:5c:01:5b:85:13:0a: 97:2e:22:03:ea:36:b2:9f:50:e0:0b:04:ff:ee:22:3f:6c:0c: 4c:a6:66:88:c7:54:36:d6:26:d7:d9:92:95:7f:e3:7b:79:2a: d0:75:a1:d4:76:48:15:b5:e3:2a:23:46:a0:56:9b:71:8f:be: 5b:31:6d:6b:11:03:78:cf:26:d9:d0:e1:fe:93:2e:da:1b:f4: da:14:7b:36:01:95:a4:10:10:82:b9:92:3d:77:06:57:b8:14: 81:9b:a1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23vsyd62eCeIowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjE2ZWRjZDEtMDZiOS00ZjllLWE5NTQtNzgzOTlhZWRiYjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiubNeMIQSYqZ3BJR168Y/QgPdNUxYVm5Ot0c ksvWAaTjBQZlcXavazts7LuTJWqYPQJz0O60DyILFLn4/suSuWtjIQDvdLy1KIM7 gU0YmqQG9IC/9lDXm3rpYXZDt344gBsE1rNIu15pIXWcMxdT4Bdqjd+dMM4Nr8xH yJ0PWroyhhPl0P2EurnyNjLQpEm0Z3nBB3hyrS3dlUQETF1wOy4+K6va+7/Zbk/b IS22dm/2lztJwOIeoPsbOJKDhHMiLklPfbLRvs7T1QRTw8ZAWZM6wJ9P+ScS6yO6 npZOz8LkQAtkAMDGl4p0YZmGe2GbceCxljUZmVehCoqXzbh1KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmgd7q8bhQzEbIROW/839A8/NYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjUzMWY3ZjktZTE0Yy0z ODY0LWJlZGItMjE3NWNkOTk5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI90QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKvwu378dyMSjMpuxcVDwa87NpQmDMSa8OWwuq7egN9BX+koxOU72RY 79P0Eu/gexmKmmz+xDC8CuDnpn2imuAXdDraO+9vJMO4TBLD/wsF7C8dA3Xvc2Jn K/Mz0Wv6a69+xfj4Wx2BJvabGSdfDrOQjDe9m3M0j2CKtzu1Mz+JdNYR5eGqwLrG XVl5AFh6TfGtTsZFTR0sE+a5RFwBW4UTCpcuIgPqNrKfUOALBP/uIj9sDEymZojH VDbWJtfZkpV/43t5KtB1odR2SBW14yojRqBWm3GPvlsxbWsRA3jPJtnQ4f6TLtob 9NoUezYBlaQQEIK5kj13Ble4FIGboaQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:23 2025 by rpki-client