$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4903038-309d-3c7e-8ab1-835b0f0d3b93.roa File: c4903038-309d-3c7e-8ab1-835b0f0d3b93.roa (raw, json) Hash identifier: 0Ky8cIA7Wlo5HnItmpJUTjsl2pN4uPzVdwcdvHhT/Mk= Subject key identifier: AB:64:06:FA:18:ED:80:DC:9B:52:3D:BD:D1:23:0A:4D:D3:DE:1A:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7C91071F4CF9F70AC660 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4903038-309d-3c7e-8ab1-835b0f0d3b93.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.189.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7c:91:07:1f:4c:f9:f7:0a:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2f773e99-a326-4c3c-9129-f774813bb998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:94:7a:d6:b3:f5:92:71:a3:62:6a:55:2e: 4a:4a:84:26:b2:aa:e0:a4:66:17:ca:5a:f8:61:73: 1d:b6:90:2f:ea:ba:57:f0:a0:50:43:5d:fb:6c:63: 66:43:d2:7c:f1:84:84:5a:7e:54:9a:aa:43:1f:58: 70:ea:e7:c5:e6:51:31:e5:e4:06:0c:74:40:6f:c4: df:50:05:a7:35:10:23:6b:08:7c:e4:88:61:0c:ac: 5d:f0:08:19:cb:b1:40:4b:5b:48:b5:58:d4:ab:a2: d5:c7:b2:eb:ee:72:45:36:ee:a5:87:f8:a4:cd:87: e7:7e:e2:8b:6f:8f:73:ca:ca:f5:0b:9c:6c:5e:51: fa:e4:c4:6f:92:1a:49:f5:8d:03:fd:c1:30:7e:8c: 52:03:62:61:61:d4:97:37:a7:cf:76:0a:c5:ea:99: 07:72:23:20:c3:74:65:cd:04:a0:9c:87:73:66:e8: 3d:8d:00:a5:c2:db:15:c6:a2:84:05:46:b2:8c:6f: f6:e7:57:73:cc:85:fd:58:93:63:4e:49:8f:5c:2f: 18:ad:d2:c5:61:76:77:4a:a6:17:f3:06:27:10:bf: f9:86:3a:69:3b:bc:2f:32:f3:2b:7e:93:5e:b8:52: a9:72:be:34:f9:b8:e8:10:4e:cd:fb:52:38:94:fb: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:06:FA:18:ED:80:DC:9B:52:3D:BD:D1:23:0A:4D:D3:DE:1A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4903038-309d-3c7e-8ab1-835b0f0d3b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:22:96:00:a3:f2:bd:8b:24:b8:23:f5:31:e6:94:6f:0c:17: be:1e:7c:a8:1f:06:e8:aa:f3:44:b3:5a:a2:90:62:a9:4f:80: b9:e8:34:69:cb:e2:a4:b6:cf:48:c6:b9:6b:0c:b5:a2:01:b2: 5b:d6:a0:40:a0:e8:73:d9:ba:11:7b:95:f9:be:8e:e4:9b:70: 32:53:72:47:8c:1d:1f:3a:98:71:88:b8:3e:2c:70:e1:16:6a: a2:75:47:cb:19:3a:6c:d2:59:6c:cf:1d:b3:d6:23:c3:a1:9e: 57:b5:39:53:c5:6a:a3:cb:f5:ee:02:c4:4e:0e:9a:b7:9f:b1: ee:05:24:42:42:27:a9:30:eb:2e:fc:15:2a:62:48:39:c9:02: 95:98:ce:aa:84:55:07:67:11:01:7e:03:75:4b:ba:90:5e:f4: b9:16:01:52:08:88:e8:27:d8:5b:aa:2d:1d:46:3c:52:39:55: 3f:c9:86:9a:85:8e:a3:eb:7d:23:20:64:04:21:d1:5c:be:a5: d0:95:14:38:a0:82:1f:e8:5f:5a:e3:05:6b:40:2f:16:bc:90: 28:a4:5b:02:16:49:de:ac:9f:a0:e1:f1:7e:3b:bd:d9:65:0c: d6:a1:af:d1:97:1d:3d:ed:db:3c:39:47:da:42:4b:9d:f9:15: 2e:85:5b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23yRBx9M+fcKxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmY3NzNlOTktYTMyNi00YzNjLTkxMjktZjc3NDgxM2JiOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif6Uetaz9ZJxo2JqVS5KSoQmsqrgpGYXylr4 YXMdtpAv6rpX8KBQQ137bGNmQ9J88YSEWn5UmqpDH1hw6ufF5lEx5eQGDHRAb8Tf UAWnNRAjawh85IhhDKxd8AgZy7FAS1tItVjUq6LVx7Lr7nJFNu6lh/ikzYfnfuKL b49zysr1C5xsXlH65MRvkhpJ9Y0D/cEwfoxSA2JhYdSXN6fPdgrF6pkHciMgw3Rl zQSgnIdzZug9jQClwtsVxqKEBUayjG/251dzzIX9WJNjTkmPXC8YrdLFYXZ3SqYX 8wYnEL/5hjppO7wvMvMrfpNeuFKpcr40+bjoEE7N+1I4lPsolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtkBvoY7YDcm1I9vdEjCk3T3hoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzQ5MDMwMzgtMzA5ZC0z YzdlLThhYjEtODM1YjBmMGQzYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI71AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEilgCj8r2LJLgj9THmlG8MF74efKgfBuiq80SzWqKQYqlPgLnoNGnL 4qS2z0jGuWsMtaIBslvWoECg6HPZuhF7lfm+juSbcDJTckeMHR86mHGIuD4scOEW aqJ1R8sZOmzSWWzPHbPWI8Ohnle1OVPFaqPL9e4CxE4Omrefse4FJEJCJ6kw6y78 FSpiSDnJApWYzqqEVQdnEQF+A3VLupBe9LkWAVIIiOgn2FuqLR1GPFI5VT/JhpqF jqPrfSMgZAQh0Vy+pdCVFDiggh/oX1rjBWtALxa8kCikWwIWSd6sn6Dh8X47vdll DNahr9GXHT3t2zw5R9pCS535FS6FW/g= -----END CERTIFICATE-----Generated at Tue Jul 22 04:23:11 2025 by rpki-client