$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa File: dd35f63d-34eb-34a9-9b70-5091213e41cf.roa (raw, json) Hash identifier: EGcWYMTFZUIN/zZlzGoeAXwnDPwFmBwFDCsb+jMoiME= Subject key identifier: A8:74:50:CE:A2:7F:C5:0A:E1:67:F5:B8:A6:5E:CF:B7:F7:F0:15:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBC55E7AAFBA0B6B3624C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.239.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c5:5e:7a:af:ba:0b:6b:36:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=af24103c-a9e6-47bb-96fe-c7fafc20255b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4b:01:86:17:74:78:a7:3e:55:f7:74:69:c8: f4:ef:fe:7a:8e:8e:90:45:61:cb:8d:12:73:4e:e2: 22:95:90:11:18:03:81:10:a2:20:3b:87:b6:ef:7c: f6:9f:b9:50:98:1d:b9:d0:68:2b:aa:66:fd:16:e0: 5b:8e:d9:2a:27:45:ec:f9:b8:7b:4b:8c:cd:1c:89: 0b:74:b1:dd:e1:27:b2:ab:83:4d:30:e1:8d:76:06: 47:b4:05:bc:a3:ce:ef:c7:cc:db:4f:81:a1:80:ef: b9:47:ba:0e:26:25:07:3a:51:7c:17:f9:16:a7:a7: 17:e2:52:65:ac:ce:5e:03:ba:14:f8:6f:79:38:5e: 50:46:58:73:2e:87:c0:c6:c0:d9:33:ae:27:d5:1f: df:4c:81:eb:11:d5:6d:74:42:49:41:a1:1a:12:9a: 55:0e:8a:54:6e:70:13:c8:35:a5:a1:c1:b3:ae:45: 90:76:b7:8e:50:d9:06:7b:ab:cc:d5:80:56:2b:37: 78:e5:44:19:c6:c2:80:f2:bc:e1:97:fa:ab:a9:c0: b4:40:d1:c6:4f:30:1e:80:52:5d:74:cf:0b:01:09: 64:3a:ee:52:d8:4f:99:4e:56:c4:56:41:b3:ff:05: ed:fe:f8:33:5b:79:1f:57:5a:d5:7a:7d:e8:b3:c2: c7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:74:50:CE:A2:7F:C5:0A:E1:67:F5:B8:A6:5E:CF:B7:F7:F0:15:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d0:ae:14:e7:22:cd:96:de:5d:1b:6d:7c:45:fc:58:6c:ef: 38:79:c2:7f:ca:36:c6:f9:5a:52:88:a9:c1:15:32:15:b2:83: d1:31:97:40:32:ac:aa:d5:04:96:e7:e2:9f:c0:04:c0:68:8b: 26:c3:26:78:a8:39:00:c0:5d:13:e1:bb:6f:e3:0e:c6:12:a1: 48:10:2d:27:4e:25:79:79:d3:24:4a:90:4e:58:62:c9:47:e5: 60:8d:5a:5d:f1:0c:c9:d7:0d:ad:22:6f:de:c8:98:f6:a4:91: 69:f2:ee:16:46:ca:3c:ae:26:fd:ce:fb:80:e7:ff:19:07:d9: 21:66:d6:45:e5:da:66:98:5a:63:2a:6d:e5:ff:df:3c:33:c5: f8:1b:2a:1a:e7:a3:f8:fa:29:91:a9:45:08:e4:e3:cc:82:ad: 43:e1:04:fd:98:f0:a5:9c:a8:ab:f4:83:98:c4:b0:ba:bc:fa: f7:0b:f7:f0:bb:e1:b4:34:34:2e:12:f3:d4:9b:8a:63:96:fd: f6:0a:39:96:68:24:60:a3:09:2a:f6:62:44:6f:1d:27:78:13: b9:eb:eb:1f:0c:a7:5e:cd:3d:00:a2:87:5a:a3:16:84:f7:f7: 5e:c9:ea:85:94:8e:db:f1:5b:90:e3:da:cf:fb:92:a9:2f:39: 63:13:b7:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28Veeq+6C2s2JMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWYyNDEwM2MtYTllNi00N2JiLTk2ZmUtYzdmYWZjMjAyNTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ksBhhd0eKc+Vfd0acj07/56jo6QRWHLjRJz TuIilZARGAOBEKIgO4e273z2n7lQmB250Ggrqmb9FuBbjtkqJ0Xs+bh7S4zNHIkL dLHd4Seyq4NNMOGNdgZHtAW8o87vx8zbT4GhgO+5R7oOJiUHOlF8F/kWp6cX4lJl rM5eA7oU+G95OF5QRlhzLofAxsDZM64n1R/fTIHrEdVtdEJJQaEaEppVDopUbnAT yDWlocGzrkWQdreOUNkGe6vM1YBWKzd45UQZxsKA8rzhl/qrqcC0QNHGTzAegFJd dM8LAQlkOu5S2E+ZTlbEVkGz/wXt/vgzW3kfV1rVen3os8LHiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh0UM6if8UK4Wf1uKZez7f38BXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQzNWY2M2QtMzRlYi0z NGE5LTliNzAtNTA5MTIxM2U0MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI++AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnQrhTnIs2W3l0bbXxF/Fhs7zh5wn/KNsb5WlKIqcEVMhWyg9Exl0Ay rKrVBJbn4p/ABMBoiybDJnioOQDAXRPhu2/jDsYSoUgQLSdOJXl50yRKkE5YYslH 5WCNWl3xDMnXDa0ib97ImPakkWny7hZGyjyuJv3O+4Dn/xkH2SFm1kXl2maYWmMq beX/3zwzxfgbKhrno/j6KZGpRQjk48yCrUPhBP2Y8KWcqKv0g5jEsLq8+vcL9/C7 4bQ0NC4S89SbimOW/fYKOZZoJGCjCSr2YkRvHSd4E7nr6x8Mp17NPQCih1qjFoT3 917J6oWUjtvxW5Dj2s/7kqkvOWMTtxc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:10 2025 by rpki-client