$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa File: bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa (raw, json) Hash identifier: P0sh8XJAlK1fD2JoebwirRkGieO6/i7uvAx5HKVq0ik= Subject key identifier: 37:A2:89:24:3A:1F:CD:95:08:74:05:66:3B:28:80:6E:AC:6F:8B:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB4813473954C10971980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.203.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b4:81:34:73:95:4c:10:97:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=328ac280-012c-44a6-8118-922d6e482fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:9e:cd:3f:ea:4f:c6:b0:67:9a:22:d9:82: 8a:25:fd:48:b2:99:ef:86:7f:6a:ab:cc:ad:f6:84: a5:0b:56:94:21:84:b4:87:8f:be:5f:29:6d:2d:3b: fd:c1:3b:ba:d9:9a:fd:1b:08:c2:bb:0f:f9:ed:7a: 22:c2:66:7c:04:ee:02:c1:52:d4:42:27:e3:73:a0: 0c:fa:4a:1e:28:fa:3e:17:1f:6b:bd:99:c7:34:c1: 4a:5b:c2:de:90:29:90:0d:e5:57:e5:17:d2:68:02: 84:28:bb:1f:94:0d:48:af:a3:5e:3e:aa:52:56:65: 75:5b:ef:48:7a:f7:dc:c5:2a:42:34:41:89:8c:0d: ef:e7:3f:84:58:28:62:7b:45:8d:6d:c9:42:24:38: e6:8a:06:3d:ad:27:fb:f8:98:d5:53:32:9d:6e:59: 53:d4:b1:1c:80:49:4b:1f:e7:d0:12:26:78:cc:76: 43:47:a6:00:d9:19:17:95:34:22:45:a5:17:a7:3e: f5:c6:10:71:92:e2:24:26:b8:50:e3:ff:e5:5d:3d: 17:6b:c8:a6:d3:d9:2c:e9:b1:ca:78:6b:24:72:0c: db:17:46:fe:79:f4:c8:8a:6f:55:7b:10:fc:ba:66: 6e:9f:2b:3b:62:18:0e:28:bb:f3:e4:95:85:83:21: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A2:89:24:3A:1F:CD:95:08:74:05:66:3B:28:80:6E:AC:6F:8B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ad:82:f9:7d:53:e5:72:1b:73:1d:ee:2d:15:b3:7d:7b:b4: 00:90:69:1f:5b:fd:58:e9:d3:8b:bd:eb:8c:dd:c5:9d:f2:84: 7d:25:49:96:c9:be:ad:d1:9b:8d:2b:73:bf:3e:9a:74:98:33: b9:a3:23:b6:dd:11:1c:ab:48:6e:8e:8c:0c:c7:8a:b3:0f:25: 02:0d:bf:45:14:fb:44:0b:95:f1:3e:05:68:6a:0b:ae:1e:21: d6:ee:80:a5:f1:c9:65:2d:cd:66:72:41:bb:4f:b8:e3:0c:82: a0:e9:2f:40:f5:f0:57:bf:06:86:c4:4c:d7:6a:d8:be:c2:3f: 50:e5:f1:cc:5e:f3:fb:72:bd:24:cc:78:f3:cb:ed:ab:b6:aa: 86:78:0e:99:c8:69:1a:df:33:34:f7:21:e0:4b:04:05:b5:6b: 1f:90:4b:0b:8d:f1:e5:c4:b0:72:36:99:02:a8:bd:74:ee:f0: 9a:52:58:f5:f1:c5:47:6e:95:fa:01:b4:aa:a8:24:13:8e:ca: 17:55:51:ce:c9:11:af:0e:2b:e9:19:14:56:be:26:3d:5b:77: c9:ec:0d:96:e9:2d:65:43:a0:bf:9c:f0:cb:20:05:26:4e:dc: 06:18:93:8b:02:97:55:f2:74:9a:7b:59:10:ac:20:db:f9:30: 44:5c:43:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27SBNHOVTBCXGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzI4YWMyODAtMDEyYy00NGE2LTgxMTgtOTIyZDZlNDgyZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXWezT/qT8awZ5oi2YKKJf1Ispnvhn9qq8yt 9oSlC1aUIYS0h4++XyltLTv9wTu62Zr9GwjCuw/57XoiwmZ8BO4CwVLUQifjc6AM +koeKPo+Fx9rvZnHNMFKW8LekCmQDeVX5RfSaAKEKLsflA1Ir6NePqpSVmV1W+9I evfcxSpCNEGJjA3v5z+EWChie0WNbclCJDjmigY9rSf7+JjVUzKdbllT1LEcgElL H+fQEiZ4zHZDR6YA2RkXlTQiRaUXpz71xhBxkuIkJrhQ4//lXT0Xa8im09ks6bHK eGskcgzbF0b+efTIim9VexD8umZunys7YhgOKLvz5JWFgyFkHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeiiSQ6H82VCHQFZjsogG6sb4vtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQ5OGIzNGUtY2ZkNC0z NzBhLTgyYjktNWZmYjYyYjQ0NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOtgvl9U+VyG3Md7i0Vs317tACQaR9b/Vjp04u964zdxZ3yhH0lSZbJ vq3Rm40rc78+mnSYM7mjI7bdERyrSG6OjAzHirMPJQINv0UU+0QLlfE+BWhqC64e IdbugKXxyWUtzWZyQbtPuOMMgqDpL0D18Fe/BobETNdq2L7CP1Dl8cxe8/tyvSTM ePPL7au2qoZ4DpnIaRrfMzT3IeBLBAW1ax+QSwuN8eXEsHI2mQKovXTu8JpSWPXx xUdulfoBtKqoJBOOyhdVUc7JEa8OK+kZFFa+Jj1bd8nsDZbpLWVDoL+c8MsgBSZO 3AYYk4sCl1XydJp7WRCsINv5MERcQ+s= -----END CERTIFICATE-----Generated at Tue Jul 22 04:14:34 2025 by rpki-client