$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0c65800-11ad-31cf-a1be-b090a327bc11.roa File: d0c65800-11ad-31cf-a1be-b090a327bc11.roa (raw, json) Hash identifier: eO+NAISbh3sw5MlP1vjIwYhM0j1OVshO4u6pffbqtj0= Subject key identifier: 3D:DA:E3:21:41:58:AE:06:D2:6D:51:76:EA:42:07:BB:58:FC:48:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBAF448B6B5A87C2E90C28 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0c65800-11ad-31cf-a1be-b090a327bc11.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.243.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:af:44:8b:6b:5a:87:c2:e9:0c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c8a2d2cd-6459-4440-857f-05fb5c9cc846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:a3:00:b1:b3:cf:23:b3:2f:9a:e1:55:ec: da:cc:21:59:70:f2:11:e3:03:01:78:0b:69:47:d7: 87:66:f8:01:ec:db:8f:c7:5e:d5:15:e1:f0:88:ba: f3:58:74:ed:20:79:1d:38:e6:25:23:0d:1c:c6:27: 62:27:0d:4b:1b:fb:88:3a:23:47:72:df:cf:b6:9f: 5e:47:b4:91:64:d8:c5:ec:7b:a6:30:8f:1b:00:af: a9:f0:80:14:27:b1:78:e6:9b:52:4f:aa:d0:be:5f: 31:27:c3:0a:6f:f6:03:e8:d4:d2:4e:56:5d:a0:d1: aa:0d:54:9e:ee:8a:5f:ff:27:39:22:62:73:8a:df: 5b:b4:d2:8c:21:a7:d5:85:f5:b4:fd:57:a4:d5:cd: 0c:4a:b6:90:a0:77:1a:36:db:86:ff:74:0d:4b:0f: db:ae:bc:a3:8e:06:78:1f:f3:38:8d:69:4c:5c:94: 3f:63:b9:3c:68:c5:0d:56:22:cf:0b:22:cd:52:99: ab:4f:2c:10:e4:94:4e:94:70:a3:79:7f:bf:1a:fc: 31:4a:7f:31:a6:86:84:0e:ef:c0:27:93:95:65:65: c7:67:ac:64:51:9c:a9:57:2c:67:11:42:f0:4b:71: 91:3c:1d:0d:e7:99:dc:d8:90:b0:f0:8d:bf:7c:23: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DA:E3:21:41:58:AE:06:D2:6D:51:76:EA:42:07:BB:58:FC:48:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0c65800-11ad-31cf-a1be-b090a327bc11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6b:65:6e:2d:26:f4:5a:3a:59:a9:70:cc:e0:b8:02:2c:77: 45:11:7d:74:1e:b7:da:59:c1:90:2b:67:5f:b5:ca:89:8d:e5: 1b:88:69:cc:9f:ac:56:a9:3b:e9:3c:c9:4a:c8:05:e6:6a:57: f1:62:f5:71:d8:3c:60:69:b2:01:96:4c:66:62:d9:5b:7b:df: bd:ca:0e:4e:aa:9b:dd:4b:02:3f:cc:63:d6:0e:d6:b0:f6:d3: 5e:bd:af:92:b0:d1:00:16:7a:f8:02:d9:39:36:ed:0b:a4:20: 26:44:97:c1:99:b4:a0:2f:f6:e7:18:9a:bd:bc:e1:64:a7:8a: 8b:2d:81:14:34:79:a9:fe:2a:dc:90:13:5b:55:76:9e:11:de: 73:ca:a5:2c:39:65:70:59:1f:18:7d:cd:66:0d:26:64:9b:c4: d4:67:d0:c7:b9:bf:f4:c6:e0:cd:16:1e:76:b4:6a:38:a1:5d: cd:02:77:92:72:6f:63:97:a4:ee:43:5e:36:f6:ba:ea:86:33: 55:c1:93:d5:11:55:8f:f2:3c:d6:0d:8f:d1:2e:ef:09:da:e9: f3:0d:f9:2a:73:cf:ff:8a:20:a2:87:6e:77:ad:e5:b1:80:c3: 25:ac:ca:84:b4:ce:c8:fb:1f:d6:9a:6f:94:8d:1e:8e:72:2b: ce:89:b7:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG269Ei2tah8LpDCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzhhMmQyY2QtNjQ1OS00NDQwLTg1N2YtMDVmYjVjOWNjODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzSjALGzzyOzL5rhVezazCFZcPIR4wMBeAtp R9eHZvgB7NuPx17VFeHwiLrzWHTtIHkdOOYlIw0cxidiJw1LG/uIOiNHct/Ptp9e R7SRZNjF7HumMI8bAK+p8IAUJ7F45ptST6rQvl8xJ8MKb/YD6NTSTlZdoNGqDVSe 7opf/yc5ImJzit9btNKMIafVhfW0/Vek1c0MSraQoHcaNtuG/3QNSw/brryjjgZ4 H/M4jWlMXJQ/Y7k8aMUNViLPCyLNUpmrTywQ5JROlHCjeX+/GvwxSn8xpoaEDu/A J5OVZWXHZ6xkUZypVyxnEULwS3GRPB0N55nc2JCw8I2/fCPeuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3a4yFBWK4G0m1RdupCB7tY/EjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDBjNjU4MDAtMTFhZC0z MWNmLWExYmUtYjA5MGEzMjdiYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI/MAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBrZW4tJvRaOlmpcMzguAIsd0URfXQet9pZwZArZ1+1yomN5RuIacyf rFapO+k8yUrIBeZqV/Fi9XHYPGBpsgGWTGZi2Vt7373KDk6qm91LAj/MY9YO1rD2 0169r5Kw0QAWevgC2Tk27QukICZEl8GZtKAv9ucYmr284WSniostgRQ0ean+KtyQ E1tVdp4R3nPKpSw5ZXBZHxh9zWYNJmSbxNRn0Me5v/TG4M0WHna0ajihXc0Cd5Jy b2OXpO5DXjb2uuqGM1XBk9URVY/yPNYNj9Eu7wna6fMN+Spzz/+KIKKHbnet5bGA wyWsyoS0zsj7H9aab5SNHo5yK86Jt1g= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:28 2025 by rpki-client