$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa File: dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa (raw, json) Hash identifier: wOybTUCsI7sIirZlSh6fpO3UHi8fw6qbyPi4x+zA2XE= Subject key identifier: 9E:D4:00:15:DE:02:9C:C0:5F:BB:33:13:D4:0C:BD:A3:79:51:3A:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF4F51F0B1F8EF83BCA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.246.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f4:f5:1f:0b:1f:8e:f8:3b:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3707f8ac-b17f-4725-9dc2-d4bb455e5da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f5:3b:17:ff:02:52:da:0b:2c:10:ec:eb:d4: 9e:a1:7a:b0:ea:1e:43:f6:a9:a2:d2:23:10:64:c7: 5b:1c:1e:3d:30:47:28:fe:a7:a9:7e:bb:00:4d:30: 5d:12:c6:97:be:ed:0d:c0:28:64:c0:cc:f2:68:a9: 38:35:a5:19:7b:4c:3c:09:28:48:9d:b3:9d:04:23: c4:7c:54:a2:45:4c:7c:52:6c:5f:51:c7:fd:5b:01: 44:67:79:11:91:e7:f6:37:ef:ab:a5:e0:f3:f9:27: 2c:dc:fe:f3:04:69:78:94:0c:b5:08:52:a8:19:5a: 59:12:f6:51:24:15:3f:5d:cb:2e:95:23:96:f5:dd: 57:fb:ce:8c:5b:cf:2c:bf:67:24:36:50:96:e4:6b: 49:3e:d6:fd:3c:f6:1a:4c:2e:c8:7f:ae:ab:25:9a: 1a:5d:a9:33:d9:76:50:37:c6:0e:35:1a:a1:35:f6: 54:a0:dc:22:61:df:18:d0:35:1a:03:30:4c:2a:63: 50:34:e1:f4:09:e4:ed:8e:f1:7f:0e:7a:54:6a:bb: 1b:44:69:e9:2e:7e:bf:96:fd:1f:81:eb:a6:8c:28: 24:8b:8f:35:c5:bb:64:ab:b9:ad:3b:24:dc:6c:cf: f4:ee:f6:09:1d:11:75:27:21:f0:a8:5a:8f:be:24: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D4:00:15:DE:02:9C:C0:5F:BB:33:13:D4:0C:BD:A3:79:51:3A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8a:36:5c:5f:fc:58:a5:68:b8:8e:46:d5:32:cd:30:a9:59: 4b:b1:69:b3:fe:20:37:ab:f3:ca:53:95:5d:fc:7e:3e:d2:c9: 96:6e:42:85:cb:30:b1:2f:da:fc:21:62:8d:a3:b1:17:e5:15: a4:4f:d0:9f:a3:14:9d:67:f3:9d:a4:b8:27:fa:d1:92:e2:9c: f3:f9:37:b9:46:85:6d:9e:aa:ef:79:0c:1e:c5:f2:35:92:66: 76:0a:1d:b8:4e:ff:de:2e:9f:bb:50:8a:92:8a:7f:54:1c:c0: b9:e2:f0:89:22:f3:5f:6d:56:87:c1:8f:d5:73:59:79:df:28: d6:15:3f:77:c2:55:0f:f3:c8:c0:73:41:7e:a9:0e:6d:7d:93: 2f:46:1f:d5:5d:a3:16:06:e3:63:07:96:d8:ca:d0:f1:60:99: e4:da:10:ea:1c:c1:0d:2b:24:01:df:6f:81:af:6f:52:3d:63: 7d:38:c7:6d:60:94:59:d1:f5:b7:37:4c:04:79:5d:e1:cd:ec: d8:c9:29:10:15:ad:29:70:47:2d:9b:a3:a5:8a:a5:87:bf:84: 96:b9:e6:23:ab:9c:15:89:4d:d0:f6:d4:36:fc:cd:83:8f:40: 93:53:af:8d:08:36:73:9e:4d:9f:ef:e6:4b:96:cd:c6:0b:b3: 0b:08:e8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/T1Hwsfjvg7yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MzcwN2Y4YWMtYjE3Zi00NzI1LTlkYzItZDRiYjQ1NWU1ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/U7F/8CUtoLLBDs69SeoXqw6h5D9qmi0iMQ ZMdbHB49MEco/qepfrsATTBdEsaXvu0NwChkwMzyaKk4NaUZe0w8CShInbOdBCPE fFSiRUx8UmxfUcf9WwFEZ3kRkef2N++rpeDz+Scs3P7zBGl4lAy1CFKoGVpZEvZR JBU/XcsulSOW9d1X+86MW88sv2ckNlCW5GtJPtb9PPYaTC7If66rJZoaXakz2XZQ N8YONRqhNfZUoNwiYd8Y0DUaAzBMKmNQNOH0CeTtjvF/DnpUarsbRGnpLn6/lv0f geumjCgki481xbtkq7mtOyTcbM/07vYJHRF1JyHwqFqPviSCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7UABXeApzAX7szE9QMvaN5UTrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGM3MDdiNTMtZmNlOS0z ZDgyLWEyYmEtNTA4YjE2NGE1YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiKNlxf/FilaLiORtUyzTCpWUuxabP+IDer88pTlV38fj7SyZZuQoXL MLEv2vwhYo2jsRflFaRP0J+jFJ1n852kuCf60ZLinPP5N7lGhW2equ95DB7F8jWS ZnYKHbhO/94un7tQipKKf1QcwLni8Iki819tVofBj9VzWXnfKNYVP3fCVQ/zyMBz QX6pDm19ky9GH9VdoxYG42MHltjK0PFgmeTaEOocwQ0rJAHfb4Gvb1I9Y304x21g lFnR9bc3TAR5XeHN7NjJKRAVrSlwRy2bo6WKpYe/hJa55iOrnBWJTdD21Db8zYOP QJNTr40INnOeTZ/v5kuWzcYLswsI6N0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:15 2025 by rpki-client