$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03b3499-ae88-3bdc-bf42-e19787270eb6.roa File: d03b3499-ae88-3bdc-bf42-e19787270eb6.roa (raw, json) Hash identifier: dSvSzEP10FgJf9aa6itB53l5Li3auoOWVNmIhtK5wj4= Subject key identifier: D9:67:3F:7F:AC:3C:DE:56:6A:0A:B1:02:36:69:22:81:4F:C0:CE:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA3143D3C104F1400DC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03b3499-ae88-3bdc-bf42-e19787270eb6.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.243.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a3:14:3d:3c:10:4f:14:00:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1c159279-aad9-4e56-9061-026746296ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:63:61:a9:01:e6:15:24:c9:76:82:c7:2c: 4f:52:c9:85:bd:6f:a6:76:ff:92:49:08:5c:a1:eb: a9:28:df:63:a0:b3:5e:51:c5:17:0e:9c:44:46:24: 27:7e:84:29:bc:e1:3a:01:6c:28:4d:e8:4c:34:5b: 30:33:4a:27:26:42:7c:e2:68:29:33:73:0d:6d:d3: f4:24:a8:b9:f4:aa:a8:c6:33:ad:b1:49:52:d6:9a: 34:aa:6d:c3:48:c2:85:ba:e8:82:7b:50:63:c0:4a: 93:f0:71:5d:ed:96:89:cb:b2:18:d5:e1:21:a2:d4: 6e:5c:e5:ba:84:80:b3:59:8e:e2:7d:cf:fc:0e:c2: a0:57:d4:cc:c4:55:eb:a0:c2:4b:84:ce:6b:b8:a7: 80:2d:de:a1:7b:a5:c6:9b:45:1c:df:95:8e:f0:71: 44:05:42:00:5a:f6:eb:8c:b1:7b:e5:3f:74:eb:f6: 55:c5:a9:77:c2:41:78:ef:47:6d:15:20:c8:8c:21: be:df:55:c7:b9:18:07:b6:3b:76:95:9b:50:d8:4e: 7f:01:b5:71:a9:4b:f7:0b:eb:9b:3f:d8:14:22:ca: 15:c6:30:55:03:85:ac:06:41:2a:bf:b5:b7:aa:18: e5:b0:2b:72:05:45:4f:bf:20:03:91:9f:6f:57:2a: ed:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:3F:7F:AC:3C:DE:56:6A:0A:B1:02:36:69:22:81:4F:C0:CE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03b3499-ae88-3bdc-bf42-e19787270eb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:97:38:22:61:21:90:b3:26:26:29:4a:95:54:22:71:4d:f8: 43:4c:c2:98:92:4f:9e:a0:ec:d4:54:f9:9e:5e:91:26:76:31: bf:d0:99:85:1c:64:ef:bf:46:8c:e7:9d:b2:9e:3f:bd:67:6f: 53:cb:64:e1:8d:48:a7:f0:22:7b:31:73:cd:44:b2:22:05:0a: 96:45:7d:cc:d6:2c:90:2a:f2:9b:77:f6:ed:0d:a8:f9:18:39: d4:03:c1:3c:ac:81:8e:01:67:18:63:36:10:27:8d:dc:e2:ba: 12:03:92:b6:fd:9f:12:0e:69:05:e8:d0:3c:c0:34:2c:9f:e4: 81:12:88:16:e3:4d:4b:2c:2e:78:df:68:68:ed:17:84:38:db: 3b:d4:5f:43:33:c3:ad:7c:da:95:5c:88:41:b3:53:62:9d:fa: 7c:e4:f2:eb:d1:a0:92:66:45:b9:31:7f:98:25:b2:4a:de:ab: 46:d6:b4:c2:53:07:c0:54:38:a6:63:41:fc:8b:78:04:c4:4e: dd:be:3b:04:5c:30:d2:56:c0:0f:9c:f3:6a:a0:47:ba:ae:07: 3f:bf:bb:1d:44:6a:af:6f:65:30:c1:f2:0c:3a:c0:87:c9:ba: d8:12:bc:5b:ab:5c:09:c6:d0:05:cd:85:9b:56:35:9e:22:b7: 92:81:7a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26MUPTwQTxQA3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWMxNTkyNzktYWFkOS00ZTU2LTkwNjEtMDI2NzQ2Mjk2YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgctjYakB5hUkyXaCxyxPUsmFvW+mdv+SSQhc oeupKN9joLNeUcUXDpxERiQnfoQpvOE6AWwoTehMNFswM0onJkJ84mgpM3MNbdP0 JKi59KqoxjOtsUlS1po0qm3DSMKFuuiCe1BjwEqT8HFd7ZaJy7IY1eEhotRuXOW6 hICzWY7ifc/8DsKgV9TMxFXroMJLhM5ruKeALd6he6XGm0Uc35WO8HFEBUIAWvbr jLF75T906/ZVxal3wkF470dtFSDIjCG+31XHuRgHtjt2lZtQ2E5/AbVxqUv3C+ub P9gUIsoVxjBVA4WsBkEqv7W3qhjlsCtyBUVPvyADkZ9vVyrtbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlnP3+sPN5WagqxAjZpIoFPwM6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDAzYjM0OTktYWU4OC0z YmRjLWJmNDItZTE5Nzg3MjcwZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI/MIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGXOCJhIZCzJiYpSpVUInFN+ENMwpiST56g7NRU+Z5ekSZ2Mb/QmYUc ZO+/RoznnbKeP71nb1PLZOGNSKfwInsxc81EsiIFCpZFfczWLJAq8pt39u0NqPkY OdQDwTysgY4BZxhjNhAnjdziuhIDkrb9nxIOaQXo0DzANCyf5IESiBbjTUssLnjf aGjtF4Q42zvUX0Mzw6182pVciEGzU2Kd+nzk8uvRoJJmRbkxf5glskreq0bWtMJT B8BUOKZjQfyLeATETt2+OwRcMNJWwA+c82qgR7quBz+/ux1Eaq9vZTDB8gw6wIfJ utgSvFurXAnG0AXNhZtWNZ4it5KBego= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:19 2025 by rpki-client