$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c18701c4-1b4c-353d-a804-66acb4e9b27d.roa File: c18701c4-1b4c-353d-a804-66acb4e9b27d.roa (raw, json) Hash identifier: rsq9sHKWdBXuQOlnU8SG7K8n1cWYekvN/hpJz90CgHs= Subject key identifier: 11:8A:6A:CA:C2:67:FA:E6:BF:3F:20:1A:60:71:A3:B4:27:6F:0C:7F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA0BD3D01B838A47D6600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c18701c4-1b4c-353d-a804-66acb4e9b27d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.245.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a0:bd:3d:01:b8:38:a4:7d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0ba420ea-aa0c-4546-9b4c-5a538c894157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0e:c7:4f:5a:99:8b:c7:13:37:34:fd:36:07: 4f:51:ac:1a:bf:bf:c5:eb:15:58:31:46:9a:81:e3: bb:fd:c5:32:75:ae:e6:7f:66:db:b9:91:e4:b8:57: c1:89:ac:cb:41:43:4d:df:1e:da:25:3b:4a:94:b2: 19:93:0f:82:89:b2:34:dc:2a:6e:0c:b2:83:b5:4b: 4f:72:ca:97:d3:71:1d:fd:c9:a8:be:9b:b6:c0:91: fd:41:ed:f7:80:75:58:9c:45:a4:00:77:65:ba:29: 74:d8:5e:2e:b9:d3:7f:0c:92:f5:b4:32:fc:fb:9d: 34:49:4b:24:f5:1b:21:54:53:d6:de:a8:cc:79:46: d5:71:58:ae:43:fe:7b:44:2b:77:47:aa:24:03:79: b5:58:37:43:f3:77:58:72:11:81:0f:5a:6b:23:b7: d7:80:48:66:fb:94:29:b7:23:cf:3e:6e:32:81:bb: 9d:b8:d5:29:68:d3:6b:23:c9:72:96:40:74:b0:90: ac:01:f8:29:ed:df:4d:ae:7d:31:99:a9:83:24:96: ee:a5:bd:a1:14:9f:e1:15:12:52:5f:f1:99:34:4f: 36:6b:e5:42:9d:73:68:1c:93:99:32:cd:8b:69:68: a9:82:9e:a9:88:91:2d:43:cb:f0:e5:93:a1:6c:ad: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:6A:CA:C2:67:FA:E6:BF:3F:20:1A:60:71:A3:B4:27:6F:0C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c18701c4-1b4c-353d-a804-66acb4e9b27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.245.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a3:0e:e7:7f:3b:08:a4:23:cd:09:90:2f:3d:f8:f9:d8:79: d5:d3:65:af:ed:50:6a:57:d1:3d:fa:fe:23:07:a7:da:e0:45: ec:60:ac:24:ed:ab:f4:4f:80:6e:fd:5b:c2:52:26:fb:e0:e1: 55:e2:d3:e5:02:a3:44:3f:81:f3:05:73:0b:35:76:07:02:a0: 88:e6:49:9d:75:25:3f:25:05:35:5e:7c:41:4e:49:40:13:92: 75:74:9b:f4:4a:a0:94:57:89:f0:eb:e5:4d:b8:30:a9:27:fb: e3:b1:bf:8e:8b:a8:2d:91:e9:a7:f1:c4:27:4d:11:61:61:bc: 53:fb:5c:95:5c:59:e9:16:0f:47:ea:e5:68:2a:ce:92:8c:cb: 8a:9a:6f:12:43:36:e4:de:81:c3:55:df:14:19:00:3e:09:a9: 47:c8:f4:52:58:19:90:a4:16:40:54:25:d3:57:ae:9b:28:b7: 19:2a:b9:ff:e7:ba:64:c8:c8:58:49:c3:1a:c4:25:16:44:05: e4:b2:5d:ff:e8:92:b8:e9:8a:fd:56:d3:1f:e7:e6:ad:4e:4f: b0:fc:ed:3f:95:6c:10:9f:8e:91:21:55:92:b4:7f:3e:28:ae: 4b:6a:ae:5b:5c:e0:b4:50:64:ec:fb:0f:12:2c:33:1a:30:8d: 84:0a:d1:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26C9PQG4OKR9ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGJhNDIwZWEtYWEwYy00NTQ2LTliNGMtNWE1MzhjODk0MTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw7HT1qZi8cTNzT9NgdPUawav7/F6xVYMUaa geO7/cUyda7mf2bbuZHkuFfBiazLQUNN3x7aJTtKlLIZkw+CibI03CpuDLKDtUtP csqX03Ed/cmovpu2wJH9Qe33gHVYnEWkAHdluil02F4uudN/DJL1tDL8+500SUsk 9RshVFPW3qjMeUbVcViuQ/57RCt3R6okA3m1WDdD83dYchGBD1prI7fXgEhm+5Qp tyPPPm4ygbuduNUpaNNrI8lylkB0sJCsAfgp7d9Nrn0xmamDJJbupb2hFJ/hFRJS X/GZNE82a+VCnXNoHJOZMs2LaWipgp6piJEtQ8vw5ZOhbK0QxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGKasrCZ/rmvz8gGmBxo7Qnbwx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzE4NzAxYzQtMWI0Yy0z NTNkLWE4MDQtNjZhY2I0ZTliMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmjDud/OwikI80JkC89+PnYedXTZa/tUGpX0T36/iMHp9rgRexgrCTt q/RPgG79W8JSJvvg4VXi0+UCo0Q/gfMFcws1dgcCoIjmSZ11JT8lBTVefEFOSUAT knV0m/RKoJRXifDr5U24MKkn++Oxv46LqC2R6afxxCdNEWFhvFP7XJVcWekWD0fq 5WgqzpKMy4qabxJDNuTegcNV3xQZAD4JqUfI9FJYGZCkFkBUJdNXrpsotxkquf/n umTIyFhJwxrEJRZEBeSyXf/okrjpiv1W0x/n5q1OT7D87T+VbBCfjpEhVZK0fz4o rktqrltc4LRQZOz7DxIsMxowjYQK0eQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:08 2025 by rpki-client