$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8467a26-7b54-33b6-9b1e-6ae7d705602c.roa File: c8467a26-7b54-33b6-9b1e-6ae7d705602c.roa (raw, json) Hash identifier: /SlAzZmvEzncKiXXKRh2Vof0ZbvNbF3YMr+7IfNQkPc= Subject key identifier: 28:59:5D:C7:01:02:31:30:0E:DC:4C:53:D5:48:F6:C5:1F:F2:02:E3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB7D5E7F1A9A0EE0193D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8467a26-7b54-33b6-9b1e-6ae7d705602c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.198.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7d:5e:7f:1a:9a:0e:e0:19:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1bbeee69-a608-4482-bc60-48a086d8e9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:5f:1f:82:8b:5b:fc:f0:95:e2:72:f9:db: b4:f2:51:9e:88:f1:1c:b2:14:a4:8a:99:1f:88:c8: 6d:20:df:6a:ef:78:7a:fd:84:74:2e:8c:f0:00:24: 6a:12:85:92:02:64:c5:13:af:de:0a:f2:d0:e0:7b: c7:b2:30:b6:8b:f9:fa:9c:4d:ca:8f:98:75:b3:b8: f8:0e:4d:68:32:46:4c:39:32:1c:c0:ec:43:75:96: 03:ae:e8:ad:54:4f:e1:25:62:81:d9:2a:4c:ed:29: 38:14:44:9b:2c:8e:93:5a:6c:db:97:88:29:b2:9c: d7:58:49:96:87:a9:eb:80:50:5f:63:19:f1:ae:4d: 90:be:48:88:d7:ba:8f:e4:5b:cb:33:58:ef:58:3d: cd:7a:1f:83:76:7f:2c:25:26:54:71:83:7e:42:01: b5:72:1c:87:0a:aa:e1:22:89:10:c4:48:ce:e7:d3: 88:61:60:26:d1:d5:b4:44:1c:2a:f0:2f:1f:cc:a9: 09:8f:d5:04:23:3f:03:14:c4:b6:5f:f0:7e:b4:0d: 3d:16:1a:f3:d3:41:2e:f6:5d:c8:8c:2d:7c:5b:cb: 95:4f:64:47:e9:32:49:a9:61:12:6f:9c:47:32:cb: a0:80:50:44:a9:b0:a0:dd:6f:e9:56:84:0e:9b:3d: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:59:5D:C7:01:02:31:30:0E:DC:4C:53:D5:48:F6:C5:1F:F2:02:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8467a26-7b54-33b6-9b1e-6ae7d705602c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:67:ea:2f:bd:a9:3d:22:f5:3f:e1:7f:a3:bc:12:29:ec:b2: 42:ad:7a:33:0f:48:64:25:85:55:e1:80:11:29:b2:69:48:53: c7:40:1b:4b:44:39:b1:cc:79:25:3d:50:e2:0f:73:4a:b2:85: 27:8e:07:fe:f2:8c:c0:bf:c3:09:88:a6:c9:3a:60:c9:bc:f6: 0a:20:14:fd:97:42:a2:68:86:49:b4:4e:ec:83:32:88:50:7a: 6b:42:74:3a:72:cb:4f:19:88:6a:85:8e:ff:b0:65:93:60:70: 29:5b:d5:34:32:c0:db:2f:31:b2:b5:f4:e4:37:2f:72:c0:40: 52:8c:60:10:c4:6b:ea:e6:e0:f3:dc:17:4a:83:6c:c0:d6:48: 04:00:f9:cf:cb:67:3c:65:bf:f7:84:3d:d9:96:47:39:75:ab: 15:31:bd:11:f5:ee:f1:b6:f5:85:80:9e:8f:9e:29:ee:09:b4: e5:4a:ee:0e:7b:69:af:3f:50:59:2a:f8:25:59:ef:84:5d:5f: ce:7a:35:db:72:2f:25:59:dc:0f:aa:75:98:89:7f:56:56:90: 3f:c0:45:0d:0c:52:a8:80:65:2e:d9:66:5e:a3:89:76:5c:c8: 44:6b:28:1c:02:6d:21:07:c9:f5:59:87:20:5d:fd:0c:4f:2e: d6:cb:86:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG231efxqaDuAZPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWJiZWVlNjktYTYwOC00NDgyLWJjNjAtNDhhMDg2ZDhlOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4JfH4KLW/zwleJy+du08lGeiPEcshSkipkf iMhtIN9q73h6/YR0LozwACRqEoWSAmTFE6/eCvLQ4HvHsjC2i/n6nE3Kj5h1s7j4 Dk1oMkZMOTIcwOxDdZYDruitVE/hJWKB2SpM7Sk4FESbLI6TWmzbl4gpspzXWEmW h6nrgFBfYxnxrk2QvkiI17qP5FvLM1jvWD3Neh+Ddn8sJSZUcYN+QgG1chyHCqrh IokQxEjO59OIYWAm0dW0RBwq8C8fzKkJj9UEIz8DFMS2X/B+tA09Fhrz00Eu9l3I jC18W8uVT2RH6TJJqWESb5xHMsuggFBEqbCg3W/pVoQOmz23mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChZXccBAjEwDtxMU9VI9sUf8gLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzg0NjdhMjYtN2I1NC0z M2I2LTliMWUtNmFlN2Q3MDU2MDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdn6i+9qT0i9T/hf6O8EinsskKtejMPSGQlhVXhgBEpsmlIU8dAG0tE ObHMeSU9UOIPc0qyhSeOB/7yjMC/wwmIpsk6YMm89gogFP2XQqJohkm0TuyDMohQ emtCdDpyy08ZiGqFjv+wZZNgcClb1TQywNsvMbK19OQ3L3LAQFKMYBDEa+rm4PPc F0qDbMDWSAQA+c/LZzxlv/eEPdmWRzl1qxUxvRH17vG29YWAno+eKe4JtOVK7g57 aa8/UFkq+CVZ74RdX856NdtyLyVZ3A+qdZiJf1ZWkD/ARQ0MUqiAZS7ZZl6jiXZc yERrKBwCbSEHyfVZhyBd/QxPLtbLhs4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:36 2025 by rpki-client