$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa File: ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa (raw, json) Hash identifier: WSu/4o29KwR00uyTnONaIBLIGrEQfdRMsd5l8Rg9IQo= Subject key identifier: 3B:A2:34:6C:46:1F:72:37:35:9E:C5:0C:9E:18:B3:64:90:EA:15:8C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB932BFA9A88D665FF8580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.199.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:93:2b:fa:9a:88:d6:65:ff:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ad9e69d3-f7e4-4ed2-85aa-9e20bd6e3522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:06:9b:b5:a4:5d:13:0b:77:70:45:29:d8:a5: 29:74:00:9d:2d:de:8a:bc:d9:a9:38:50:e9:a1:1d: ed:62:c8:59:de:df:57:50:c7:e5:e4:c2:48:34:4e: bb:40:e1:7d:1c:21:c0:ff:4a:87:9b:ff:07:8d:b4: c3:10:b6:47:bd:3c:8c:c5:d3:01:89:6d:4e:00:cc: 5a:27:c5:4b:b4:78:55:93:0f:2b:d2:2e:36:57:4c: 25:8c:02:86:c4:d3:f7:54:53:e0:e0:b2:ff:a3:db: b4:30:91:c1:23:21:00:7c:5f:fa:7f:2b:59:90:70: 63:2e:38:82:5b:77:b8:72:90:f4:22:48:bd:4c:36: bd:18:a1:33:0c:51:95:ff:af:49:b4:bb:08:5a:5d: 48:a5:f8:45:b7:0b:6b:00:c7:3b:4f:a3:f3:cc:fc: d6:e5:57:64:25:cb:e4:36:c3:c6:f7:83:d2:23:7e: 56:a2:5e:b3:ae:57:03:70:15:f8:ed:a3:38:11:13: 33:d4:6f:f8:6d:56:f7:69:5c:82:9e:8b:ce:c4:8c: 32:db:c0:8a:0c:08:14:ef:1e:6a:c7:3a:d6:51:6e: dc:06:e8:c3:2f:66:6d:2e:eb:54:1c:3a:bc:74:31: 69:7a:0d:e5:d8:95:4b:a5:22:83:d6:98:67:57:a5: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A2:34:6C:46:1F:72:37:35:9E:C5:0C:9E:18:B3:64:90:EA:15:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f7:1d:23:4e:3e:6d:ba:6f:86:5e:04:cb:f5:85:ab:f2:ec: 4b:d1:db:29:88:1c:ff:79:ff:da:fd:7b:68:b4:ac:4f:13:4c: 42:1b:f6:39:9e:23:02:a9:f0:90:14:87:ec:a3:da:fd:7c:9b: 48:4b:f2:ce:d4:a8:c3:24:2b:1b:ca:40:94:ca:f9:69:59:ab: 82:9a:4c:69:3b:bf:a9:6a:30:cf:73:12:f1:ad:a8:bb:27:cd: 14:e6:b7:a5:78:1b:ae:b6:60:48:17:38:2e:32:ad:8c:4f:79: 4c:23:0f:05:a7:0b:5b:61:d4:44:ad:5f:00:e1:a1:b3:8e:29: bb:eb:53:1a:a7:48:08:92:34:cf:71:48:5c:1a:44:8b:31:39: cc:f9:93:be:b6:b5:7a:70:9f:e0:fb:7e:7f:c6:6c:da:29:cf: 58:fb:6c:48:1e:9f:ef:fd:8e:9c:2b:e4:44:c5:51:8a:7f:a5: 3d:90:aa:5d:99:31:ff:14:12:f7:95:7f:80:f2:98:92:22:fc: 9f:1a:55:44:22:4d:0a:95:87:2b:c0:a7:8f:fb:b1:0e:79:7c: d3:ae:bb:b8:a2:b0:60:55:5b:17:e6:8a:86:15:07:51:04:a0: fc:38:5e:ab:0e:ae:5a:c1:bc:f6:4a:dd:78:3f:04:a0:0c:70: b2:0f:ef:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25Mr+pqI1mX/hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWQ5ZTY5ZDMtZjdlNC00ZWQyLTg1YWEtOWUyMGJkNmUzNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AabtaRdEwt3cEUp2KUpdACdLd6KvNmpOFDp oR3tYshZ3t9XUMfl5MJINE67QOF9HCHA/0qHm/8HjbTDELZHvTyMxdMBiW1OAMxa J8VLtHhVkw8r0i42V0wljAKGxNP3VFPg4LL/o9u0MJHBIyEAfF/6fytZkHBjLjiC W3e4cpD0Iki9TDa9GKEzDFGV/69JtLsIWl1IpfhFtwtrAMc7T6PzzPzW5VdkJcvk NsPG94PSI35Wol6zrlcDcBX47aM4ERMz1G/4bVb3aVyCnovOxIwy28CKDAgU7x5q xzrWUW7cBujDL2ZtLutUHDq8dDFpeg3l2JVLpSKD1phnV6WEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuiNGxGH3I3NZ7FDJ4Ys2SQ6hWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmEyZmExZDktZDVlOS0z YTM3LWE2NmQtYjA2MDA4ZTAzYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr3HSNOPm26b4ZeBMv1havy7EvR2ymIHP95/9r9e2i0rE8TTEIb9jme IwKp8JAUh+yj2v18m0hL8s7UqMMkKxvKQJTK+WlZq4KaTGk7v6lqMM9zEvGtqLsn zRTmt6V4G662YEgXOC4yrYxPeUwjDwWnC1th1EStXwDhobOOKbvrUxqnSAiSNM9x SFwaRIsxOcz5k762tXpwn+D7fn/GbNopz1j7bEgen+/9jpwr5ETFUYp/pT2Qql2Z Mf8UEveVf4DymJIi/J8aVUQiTQqVhyvAp4/7sQ55fNOuu7iisGBVWxfmioYVB1EE oPw4XqsOrlrBvPZK3Xg/BKAMcLIP720= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:17 2025 by rpki-client