$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b856218d-866d-30b8-940e-104d842a3b28.roa File: b856218d-866d-30b8-940e-104d842a3b28.roa (raw, json) Hash identifier: XbUUSlDg+8fbn9fok+8FxEANjLxfDhfYz9wBb2Do9wE= Subject key identifier: 15:23:71:FB:03:42:85:F0:5A:36:F4:8C:20:D7:19:33:5F:AC:64:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBE54994A563A493404B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b856218d-866d-30b8-940e-104d842a3b28.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.194.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e5:49:94:a5:63:a4:93:40:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=dad28070-70e3-49f7-b6a9-13fd88042841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:70:36:8d:62:07:a0:c1:c7:10:3d:e9:b0: 2c:66:bd:9d:b6:f6:e4:40:35:15:22:41:91:4b:82: 29:b8:cc:0f:5f:4a:47:6b:5c:06:75:c2:ba:eb:8e: 22:98:aa:02:f5:c3:8e:68:4f:76:3e:68:21:38:b5: 57:f9:ef:b5:f6:4a:97:f8:3b:90:8a:f7:78:01:a7: e3:1e:b7:ef:48:52:c8:b9:81:75:5a:c8:a8:5c:99: db:eb:76:44:dc:21:62:e5:22:0c:ab:24:26:d2:e3: 05:3c:4c:49:a9:96:4a:c5:0b:31:44:81:ee:35:0c: c7:68:12:81:2b:7e:bf:02:ff:08:21:7f:1d:53:27: a0:f6:71:26:c3:0c:94:fc:38:51:42:b5:f4:a9:13: b7:5f:4d:82:91:2b:d9:bb:32:ff:6d:fd:e8:fb:72: 3d:51:27:2d:93:36:38:25:5c:10:c9:8f:1d:09:a4: 89:3a:af:5b:66:1b:b8:fc:42:41:9e:05:53:11:63: 3b:02:82:fa:08:04:9a:c7:90:2c:05:c6:74:22:67: 08:1e:fb:33:bd:f3:5a:70:80:67:81:86:79:46:7a: 9c:c6:5f:63:b3:51:0d:e5:7d:b3:6c:07:e5:5b:0a: c8:38:cd:ed:7a:69:07:1a:4c:e3:5a:b0:99:84:6c: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:23:71:FB:03:42:85:F0:5A:36:F4:8C:20:D7:19:33:5F:AC:64:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b856218d-866d-30b8-940e-104d842a3b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.194.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:53:65:7e:b7:9a:be:a6:1e:6b:0a:2d:9b:6a:34:53:a9:98: 68:f8:4b:e2:ce:eb:32:04:23:04:7f:be:4a:c7:88:3c:8d:9b: 1b:0f:b7:e8:3f:d8:db:d4:c8:5e:a3:e3:bc:a6:07:38:fe:c1: 2e:f7:78:30:04:e9:ac:a0:7a:c3:c2:ab:a1:74:0b:63:5b:d7: f8:f8:31:b5:39:58:eb:a2:88:e3:40:74:43:ad:e6:b1:88:35: 3a:18:fb:73:81:b0:fa:96:a0:64:09:ae:b7:db:b8:52:39:11: 4c:b1:a7:6d:87:c2:8d:56:54:da:db:9f:28:be:07:ae:2e:45: ad:cf:1d:f2:ad:8b:3a:21:bd:22:b6:02:a6:7e:78:3d:c3:41: 0a:05:ac:2b:13:22:51:1e:21:cc:cb:df:45:5c:0a:b6:0c:36: 71:fd:4f:dc:90:ef:a3:2e:91:37:a9:06:a2:9a:c2:39:72:af: b3:26:16:ea:84:31:c1:8b:94:37:92:ea:a4:e3:9f:ad:8e:56: 3d:b3:62:32:1c:61:0b:d8:f7:75:14:d3:2a:01:2a:af:e5:47: 7e:ca:6d:6f:56:d3:00:c7:90:03:a6:b1:71:68:cb:ae:f0:2e: 3b:33:6c:85:39:96:14:7a:a9:52:9d:03:18:cc:2e:c0:a5:da: 08:02:d1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+VJlKVjpJNASwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZGFkMjgwNzAtNzBlMy00OWY3LWI2YTktMTNmZDg4MDQyODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcJwNo1iB6DBxxA96bAsZr2dtvbkQDUVIkGR S4IpuMwPX0pHa1wGdcK6644imKoC9cOOaE92PmghOLVX+e+19kqX+DuQivd4Aafj HrfvSFLIuYF1WsioXJnb63ZE3CFi5SIMqyQm0uMFPExJqZZKxQsxRIHuNQzHaBKB K36/Av8IIX8dUyeg9nEmwwyU/DhRQrX0qRO3X02CkSvZuzL/bf3o+3I9USctkzY4 JVwQyY8dCaSJOq9bZhu4/EJBngVTEWM7AoL6CASax5AsBcZ0ImcIHvszvfNacIBn gYZ5Rnqcxl9js1EN5X2zbAflWwrIOM3temkHGkzjWrCZhGzXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUjcfsDQoXwWjb0jCDXGTNfrGRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjg1NjIxOGQtODY2ZC0z MGI4LTk0MGUtMTA0ZDg0MmEzYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBTZX63mr6mHmsKLZtqNFOpmGj4S+LO6zIEIwR/vkrHiDyNmxsPt+g/ 2NvUyF6j47ymBzj+wS73eDAE6aygesPCq6F0C2Nb1/j4MbU5WOuiiONAdEOt5rGI NToY+3OBsPqWoGQJrrfbuFI5EUyxp22Hwo1WVNrbnyi+B64uRa3PHfKtizohvSK2 AqZ+eD3DQQoFrCsTIlEeIczL30VcCrYMNnH9T9yQ76MukTepBqKawjlyr7MmFuqE McGLlDeS6qTjn62OVj2zYjIcYQvY93UU0yoBKq/lR37KbW9W0wDHkAOmsXFoy67w LjszbIU5lhR6qVKdAxjMLsCl2ggC0fA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:15 2025 by rpki-client