$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa File: d40d9eae-327f-3a10-8667-6fef8f5952bf.roa (raw, json) Hash identifier: c9xE5Y9SuCD3tDJsEJOxLgVsC4kEa76013rTPcj+XNk= Subject key identifier: 6E:6F:5C:5E:59:2B:93:33:FC:AC:E8:D0:66:44:1E:D1:3B:06:CE:6B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB60C63B6EFABB3E39380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b6:0c:63:b6:ef:ab:b3:e3:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3334658e-4c01-4046-857d-03249b60ef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:2b:33:11:79:fb:65:e4:5f:c5:11:ac:05: 24:74:5a:b5:78:5f:cb:65:b5:cd:f6:4a:a9:6a:b8: 65:f0:38:2a:3e:40:35:3c:7b:b3:46:9c:f1:6e:5e: ef:e9:53:ca:0b:f4:c1:0c:31:f5:90:27:f2:70:fd: cd:3a:a4:d7:3f:2b:cd:3c:d8:0c:a2:97:37:d8:8d: 9e:2e:cc:b6:83:44:7f:f7:23:f7:d3:50:85:f6:f2: 2c:2a:fd:ec:6f:5f:64:bd:58:77:b4:9a:6f:9b:04: 5a:bd:25:ab:01:a9:28:52:bc:92:53:84:db:c5:65: 0f:eb:d3:d9:42:a8:35:1e:26:d1:f0:84:74:ee:5d: a8:1c:01:4c:1e:02:7e:f1:e1:4e:27:0c:a1:d5:79: 08:9f:15:ae:4f:94:5c:48:bf:f1:72:8d:ae:cc:a5: 42:38:60:e8:83:8c:eb:3d:06:97:b5:3f:12:be:52: 80:c9:ae:ab:8c:e3:2e:48:ae:5f:e2:83:d5:01:20: 24:0a:99:2c:ed:68:14:01:3c:0f:0d:57:aa:2c:97: 43:45:26:f8:d9:6f:48:0a:2b:c9:11:78:33:70:4d: 97:d8:47:22:56:21:a6:db:98:de:c9:59:95:e3:69: bd:fc:8a:29:a1:0d:e2:95:37:11:9f:ed:78:e6:32: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6F:5C:5E:59:2B:93:33:FC:AC:E8:D0:66:44:1E:D1:3B:06:CE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:74:43:c8:ab:b7:de:54:d2:68:31:08:75:6a:22:ea:4c:01: 5a:d2:e3:91:fb:82:17:29:7c:44:3d:39:96:63:c5:27:c2:d5: 36:c3:e0:ad:f7:8f:6a:f8:49:21:51:b5:7a:a2:44:77:3e:02: fd:5c:7d:b7:bf:bb:21:7a:38:51:cc:ab:9e:db:29:3b:e0:ee: 53:a4:ad:36:ba:41:36:ff:31:ac:3f:aa:08:d5:8d:da:03:07: d6:4f:ff:e5:dd:fe:de:c1:43:c9:c9:de:55:c6:a2:4f:e5:38: fe:80:25:97:54:ba:11:ba:7f:bf:21:b9:56:af:ef:9f:7c:ed: b1:ec:44:2f:01:51:58:63:2a:ed:89:38:8b:e2:70:9e:df:d4: 3e:0b:c6:6a:de:36:2e:ed:5d:cb:20:cf:aa:7e:62:e0:34:ae: a0:b1:0e:20:54:1c:56:13:b5:c2:e7:63:be:f8:3f:ff:13:81: 14:38:bd:35:9a:20:aa:c2:a0:4e:bf:8d:f7:52:55:b8:db:eb: 36:6e:9c:92:ff:e2:9f:c4:d2:60:ce:d5:d0:ce:bf:02:c4:b0: 23:56:2a:b8:b4:95:87:65:9e:4a:5d:10:29:ce:95:1c:6d:72: e1:66:e0:53:62:46:e6:9f:c3:18:18:60:4c:98:16:ea:03:92: 66:5d:b9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27YMY7bvq7Pjk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzMzNDY1OGUtNGMwMS00MDQ2LTg1N2QtMDMyNDliNjBlZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvagrMxF5+2XkX8URrAUkdFq1eF/LZbXN9kqp arhl8DgqPkA1PHuzRpzxbl7v6VPKC/TBDDH1kCfycP3NOqTXPyvNPNgMopc32I2e Lsy2g0R/9yP301CF9vIsKv3sb19kvVh3tJpvmwRavSWrAakoUrySU4TbxWUP69PZ Qqg1HibR8IR07l2oHAFMHgJ+8eFOJwyh1XkInxWuT5RcSL/xco2uzKVCOGDog4zr PQaXtT8SvlKAya6rjOMuSK5f4oPVASAkCpks7WgUATwPDVeqLJdDRSb42W9ICivJ EXgzcE2X2EciViGm25jeyVmV42m9/IopoQ3ilTcRn+145jJM0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5vXF5ZK5Mz/Kzo0GZEHtE7Bs5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQwZDllYWUtMzI3Zi0z YTEwLTg2NjctNmZlZjhmNTk1MmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ0Q8irt95U0mgxCHVqIupMAVrS45H7ghcpfEQ9OZZjxSfC1TbD4K33 j2r4SSFRtXqiRHc+Av1cfbe/uyF6OFHMq57bKTvg7lOkrTa6QTb/Maw/qgjVjdoD B9ZP/+Xd/t7BQ8nJ3lXGok/lOP6AJZdUuhG6f78huVav75987bHsRC8BUVhjKu2J OIvicJ7f1D4LxmreNi7tXcsgz6p+YuA0rqCxDiBUHFYTtcLnY774P/8TgRQ4vTWa IKrCoE6/jfdSVbjb6zZunJL/4p/E0mDO1dDOvwLEsCNWKri0lYdlnkpdECnOlRxt cuFm4FNiRuafwxgYYEyYFuoDkmZduf8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:16 2025 by rpki-client