$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa File: cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa (raw, json) Hash identifier: OJFmKe4VGYMso4nNBmUVfLmTV1h7FZqfZC6nhIgoyGk= Subject key identifier: E5:E8:EC:70:6E:6A:71:6C:78:FF:06:5B:C3:30:16:43:FD:0A:E3:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBD621BA3592E15961F940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.189.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d6:21:ba:35:92:e1:59:61:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=fce41b83-0581-42ec-9914-1617336ee995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:04:ba:08:97:5d:15:b9:03:0b:8e:05:cd: a9:1a:56:18:bf:68:56:64:f9:67:e4:9e:e2:ac:b4: 1e:c5:40:e9:34:16:dd:6c:13:4d:89:bd:36:10:fd: 22:1c:99:fc:b0:c5:96:d5:63:64:75:72:84:ba:6f: 32:9c:0c:e4:66:83:cd:5e:9d:ab:38:ae:09:08:91: ae:f8:3a:57:56:fc:1e:44:da:fe:b3:cd:0a:cb:24: 4f:77:3e:cd:7a:8a:2f:47:87:96:82:e6:dd:53:87: 46:ae:98:af:94:c1:bc:6e:e9:e8:c8:7b:e2:8a:c4: fe:57:57:c5:1d:28:99:56:77:86:1f:c2:b2:0c:7a: 97:44:3e:15:42:aa:0e:16:c0:29:5d:3d:47:93:e9: 10:c7:e5:d4:51:9a:6d:92:d8:11:48:82:a8:30:32: bf:16:09:6a:37:15:5e:27:e1:f6:16:1e:3c:97:61: 53:a9:06:38:cc:35:4f:21:9b:1e:fb:f7:c4:41:de: f1:55:13:6e:ec:a8:6b:3a:1f:5d:8d:ea:7c:80:92: 46:9a:fc:d8:5f:68:cd:b5:96:c0:bc:60:4e:ec:80: f2:45:0e:5e:56:76:51:ff:8a:ad:3b:ea:e9:43:99: 3b:20:68:7d:cc:28:6d:6d:b4:25:91:99:06:2d:8e: a3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E8:EC:70:6E:6A:71:6C:78:FF:06:5B:C3:30:16:43:FD:0A:E3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:fd:58:9e:7e:ef:a5:77:b7:9d:50:3f:86:54:af:14:28:6a: bc:7a:e4:4d:02:c1:8c:d3:90:7d:37:a1:7f:2d:a1:d8:0f:a8: 2c:e7:f1:b8:fc:78:74:59:5e:e3:8e:8b:51:2f:d6:4a:18:4a: b5:3c:76:86:8c:03:c7:40:bf:86:3a:e0:ab:bf:df:ad:f0:14: 4f:3a:b2:21:72:56:5a:4f:27:d1:29:e9:33:e2:70:a7:0e:10: 69:cf:91:07:48:52:51:1a:3f:19:e6:e5:7d:83:e2:be:4f:d5: a0:c6:f7:c8:70:e8:c2:2b:4d:41:c1:61:a6:a8:d4:cd:a9:53: 69:9d:4a:dd:6c:db:a7:70:ab:cb:47:66:3a:bb:07:bf:14:5d: 1e:62:07:f9:1b:78:73:c9:a2:8e:d4:cf:ac:ee:06:69:50:ad: 05:a6:c2:5b:46:47:c6:32:a1:76:45:b7:b4:10:85:45:1e:d2: 46:07:2c:65:34:22:10:fa:c6:0f:be:cb:57:a0:0d:45:c7:ce: 5d:50:d8:1d:f0:2f:37:d2:91:0f:ef:19:22:b9:4c:be:28:51: cb:f4:96:2d:0f:d5:df:f1:64:3f:d3:c6:59:30:51:2b:65:5f: 28:5c:32:5a:77:a3:5b:9c:56:74:28:87:e4:e7:d4:e4:13:e4: 2f:b2:d3:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29YhujWS4Vlh+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZmNlNDFiODMtMDU4MS00MmVjLTk5MTQtMTYxNzMzNmVlOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRcEugiXXRW5AwuOBc2pGlYYv2hWZPln5J7i rLQexUDpNBbdbBNNib02EP0iHJn8sMWW1WNkdXKEum8ynAzkZoPNXp2rOK4JCJGu +DpXVvweRNr+s80KyyRPdz7NeoovR4eWgubdU4dGrpivlMG8bunoyHviisT+V1fF HSiZVneGH8KyDHqXRD4VQqoOFsApXT1Hk+kQx+XUUZptktgRSIKoMDK/FglqNxVe J+H2Fh48l2FTqQY4zDVPIZse+/fEQd7xVRNu7KhrOh9djep8gJJGmvzYX2jNtZbA vGBO7IDyRQ5eVnZR/4qtO+rpQ5k7IGh9zChtbbQlkZkGLY6j3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXo7HBuanFseP8GW8MwFkP9CuPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2IyYjExNzctYWI5OS0z OWFkLTlhZWMtMjQ0MDgyNWJhNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI73QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP9WJ5+76V3t51QP4ZUrxQoarx65E0CwYzTkH03oX8todgPqCzn8bj8 eHRZXuOOi1Ev1koYSrU8doaMA8dAv4Y64Ku/363wFE86siFyVlpPJ9Ep6TPicKcO EGnPkQdIUlEaPxnm5X2D4r5P1aDG98hw6MIrTUHBYaao1M2pU2mdSt1s26dwq8tH Zjq7B78UXR5iB/kbeHPJoo7Uz6zuBmlQrQWmwltGR8YyoXZFt7QQhUUe0kYHLGU0 IhD6xg++y1egDUXHzl1Q2B3wLzfSkQ/vGSK5TL4oUcv0li0P1d/xZD/TxlkwUStl XyhcMlp3o1ucVnQoh+Tn1OQT5C+y06o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:08 2025 by rpki-client