$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f2e60b-7b8c-3a13-9e02-3053ac51b8a7.roa File: c2f2e60b-7b8c-3a13-9e02-3053ac51b8a7.roa (raw, json) Hash identifier: H1H6RkNt7xtzYbbSea1TXfkxvoEENTeUrbDw8RL5Wgo= Subject key identifier: 96:DB:4A:19:C8:69:38:51:C4:0D:57:83:47:38:5A:A3:D6:28:78:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBEFEBFA9F0C563E86AD40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f2e60b-7b8c-3a13-9e02-3053ac51b8a7.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.227.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ef:eb:fa:9f:0c:56:3e:86:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0fdfcdf7-0436-4ca1-b78e-73598e6e5b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:9f:62:d9:23:03:6a:95:3e:5d:6c:64:0b: a5:28:18:8f:c6:8c:fe:b4:83:2c:bf:7d:8e:0b:b3: af:56:c2:93:69:78:ce:ce:04:aa:c1:23:ef:10:ff: 48:13:b8:64:c5:7e:55:75:0a:a6:36:5a:62:6e:ae: 15:2b:fc:eb:09:ec:54:28:b0:75:68:bf:39:88:c6: ae:fa:b6:b2:b8:c7:f1:da:1d:c7:93:43:a5:9a:40: 46:58:dc:94:8e:f0:92:a9:aa:7b:01:91:2c:98:20: f5:76:23:72:76:73:ec:3a:1f:90:80:0a:ff:9a:e8: 68:fe:88:4a:23:97:db:4e:f2:72:6e:de:b4:9b:8f: 1f:44:13:10:82:66:62:5d:85:aa:ac:84:79:da:eb: f1:76:2e:e8:ec:fd:fe:89:b6:0a:7a:85:ed:a3:8a: 63:df:9e:b5:fe:0e:e7:c7:9f:98:29:0c:e5:9c:7b: ad:6f:cb:1a:e4:e9:e5:31:bb:2c:e3:84:37:7d:73: da:72:d2:5a:b9:06:23:4e:26:65:60:6f:fe:71:c8: 97:99:c3:f6:96:90:e0:7c:c1:17:7e:2c:e9:48:5e: f6:3b:8c:3d:66:d0:de:f5:8d:3e:34:21:26:ae:51: 95:17:42:80:26:96:bb:e0:4b:ff:22:da:04:f8:34: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DB:4A:19:C8:69:38:51:C4:0D:57:83:47:38:5A:A3:D6:28:78:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f2e60b-7b8c-3a13-9e02-3053ac51b8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.227.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:be:5d:b5:f5:3d:cd:f3:3f:ff:fc:5c:85:2a:c9:fa:fb:6c: 37:d4:3f:e7:74:79:e4:ba:06:40:79:23:9c:22:7a:37:97:0d: 58:41:2d:14:28:4c:7e:bc:45:43:cd:fa:b9:ee:18:0e:d1:3d: 93:0b:d0:af:9c:3b:d4:f4:8f:74:ea:17:f9:64:20:4e:2a:00: 1b:f5:1e:c0:61:08:62:c4:0c:dd:75:d8:31:95:00:82:2b:d6: 87:76:ef:7d:ad:0d:d6:5b:76:e6:0a:b7:79:3b:b3:73:0b:0d: 63:cf:07:5b:c4:9a:6b:a8:b9:03:1b:ae:cc:8a:fa:1f:1a:45: cb:68:25:77:0d:70:5d:09:e8:03:64:e9:3d:f7:4a:df:77:8a: 02:68:42:48:64:49:cc:05:72:8f:fb:a1:b0:61:d6:cc:dd:83: 0c:16:1f:8c:5a:b9:5b:eb:01:d8:b9:51:75:94:ef:cc:87:2a: e4:0e:86:62:ad:60:24:89:be:72:6c:af:82:61:50:8d:da:b6: 22:2e:8c:4a:6b:b9:32:ed:c5:86:07:31:48:90:a6:27:4c:85: 23:ba:45:6c:ad:a8:b0:bf:0a:a5:da:ec:e5:03:9d:6c:7d:ed: 96:96:22:80:81:ce:ca:27:17:20:40:06:c6:ed:62:64:f5:a0: 3a:47:08:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+/r+p8MVj6GrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGZkZmNkZjctMDQzNi00Y2ExLWI3OGUtNzM1OThlNmU1YjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltWfYtkjA2qVPl1sZAulKBiPxoz+tIMsv32O C7OvVsKTaXjOzgSqwSPvEP9IE7hkxX5VdQqmNlpibq4VK/zrCexUKLB1aL85iMau +rayuMfx2h3Hk0OlmkBGWNyUjvCSqap7AZEsmCD1diNydnPsOh+QgAr/muho/ohK I5fbTvJybt60m48fRBMQgmZiXYWqrIR52uvxdi7o7P3+ibYKeoXto4pj3561/g7n x5+YKQzlnHutb8sa5OnlMbss44Q3fXPactJauQYjTiZlYG/+cciXmcP2lpDgfMEX fizpSF72O4w9ZtDe9Y0+NCEmrlGVF0KAJpa74Ev/ItoE+DRQbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbbShnIaThRxA1Xg0c4WqPWKHgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzJmMmU2MGItN2I4Yy0z YTEzLTllMDItMzA1M2FjNTFiOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+NwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK+XbX1Pc3zP//8XIUqyfr7bDfUP+d0eeS6BkB5I5wiejeXDVhBLRQo TH68RUPN+rnuGA7RPZML0K+cO9T0j3TqF/lkIE4qABv1HsBhCGLEDN112DGVAIIr 1od2732tDdZbduYKt3k7s3MLDWPPB1vEmmuouQMbrsyK+h8aRctoJXcNcF0J6ANk 6T33St93igJoQkhkScwFco/7obBh1szdgwwWH4xauVvrAdi5UXWU78yHKuQOhmKt YCSJvnJsr4JhUI3atiIujEpruTLtxYYHMUiQpidMhSO6RWytqLC/CqXa7OUDnWx9 7ZaWIoCBzsonFyBABsbtYmT1oDpHCD0= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:04 2025 by rpki-client