$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa File: dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa (raw, json) Hash identifier: B1G5pvf6vSK498UKJyp80KhEK4VN6I5ixsgFP77pMTU= Subject key identifier: 57:71:6E:A9:CC:C0:4D:3E:8F:52:3E:43:C8:B3:15:33:16:22:59:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF1C316956465618F99C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.202.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f1:c3:16:95:64:65:61:8f:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=78fcf4f3-ff34-4936-a4f1-3332dcbca03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:9b:e3:ca:9d:89:e4:f1:3b:53:c7:1e:b5: f5:93:15:6c:d5:61:1c:e6:c3:cc:b9:97:cb:24:65: dc:66:94:ca:c7:ab:4f:dc:ac:22:53:eb:18:4c:c1: c2:c7:07:f8:86:a4:14:08:b6:c9:75:1f:8c:e3:ea: 32:5e:0c:a8:b9:0c:91:20:15:e7:e0:1e:96:c0:25: 02:33:46:42:f9:97:45:49:a9:7d:fc:e9:c3:b6:43: b6:0b:d0:13:2d:d4:57:a5:75:d7:6f:1b:f7:0f:9e: 38:7c:63:c7:79:75:3b:43:26:57:89:39:d1:92:d9: 3c:f2:4a:ad:2d:cf:e4:5e:09:a2:8b:96:b9:41:0f: eb:55:77:8e:c2:5a:d5:36:54:79:ce:65:5b:42:4f: ac:3c:e0:c9:1c:c4:60:3f:1e:13:08:eb:8b:a2:4e: f6:8f:da:e0:2c:67:aa:34:da:a5:7e:58:b7:98:ca: b5:2e:2e:87:18:f9:02:c1:97:57:5d:ba:02:78:f9: e4:fd:5e:06:33:fb:2f:06:fc:4e:c9:55:b9:d5:07: 19:47:0e:b1:22:46:bd:11:20:cc:5d:6c:36:bb:6d: a1:74:ee:fc:e8:91:d1:7c:bd:69:50:41:03:81:70: 9a:f1:e8:5a:91:64:42:a0:5a:c6:e0:5c:4d:02:b5: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:71:6E:A9:CC:C0:4D:3E:8F:52:3E:43:C8:B3:15:33:16:22:59:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:dd:c0:b5:80:4e:18:17:99:05:03:b0:18:02:7e:78:97:5c: 12:46:a8:c4:34:67:82:94:e9:1a:23:47:ed:59:32:23:ac:7b: 9f:c1:a8:7f:40:db:a1:6f:4a:b1:80:a1:8b:aa:46:4b:1e:e2: d9:d3:39:42:1d:84:4a:cf:40:fa:de:dd:6d:7c:ea:86:13:58: 8e:9e:d8:11:b5:d4:d7:20:3b:b5:9c:13:ae:1f:db:06:f1:ce: ee:4c:10:34:4f:67:22:76:bb:72:1c:66:8f:ed:b2:7e:ed:a2: 00:0e:91:32:a9:96:5e:2f:91:d1:dc:28:18:cc:06:27:c0:93: 52:be:bf:9d:3c:70:2d:43:89:6c:71:eb:14:f3:17:b3:b8:a1: c2:e5:88:58:60:87:57:77:a7:13:a2:11:da:e1:ab:a6:f3:61: 9e:fb:95:e9:17:1c:fa:9c:44:9b:20:29:ca:7f:dc:15:36:9c: 58:62:f4:b6:65:f3:f9:04:f9:d8:2c:e3:dd:ee:f7:af:44:43: de:93:a3:5b:c4:66:c2:ee:a9:92:19:c1:25:4e:20:d5:0b:d9: cc:a3:71:71:73:e4:bb:0e:d6:d1:98:13:8c:11:4a:e7:71:a5: f8:a0:cb:e7:d2:3d:ac:c1:0e:82:55:ce:6c:9e:eb:41:5a:fa: 0f:17:97:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/HDFpVkZWGPmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzhmY2Y0ZjMtZmYzNC00OTM2LWE0ZjEtMzMzMmRjYmNhMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWCb48qdieTxO1PHHrX1kxVs1WEc5sPMuZfL JGXcZpTKx6tP3KwiU+sYTMHCxwf4hqQUCLbJdR+M4+oyXgyouQyRIBXn4B6WwCUC M0ZC+ZdFSal9/OnDtkO2C9ATLdRXpXXXbxv3D544fGPHeXU7QyZXiTnRktk88kqt Lc/kXgmii5a5QQ/rVXeOwlrVNlR5zmVbQk+sPODJHMRgPx4TCOuLok72j9rgLGeq NNqlfli3mMq1Li6HGPkCwZdXXboCePnk/V4GM/svBvxOyVW51QcZRw6xIka9ESDM XWw2u22hdO786JHRfL1pUEEDgXCa8ehakWRCoFrG4FxNArWg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdxbqnMwE0+j1I+Q8izFTMWIlm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ2ZjFkYjItODc4ZC0z MDQ1LWFhOWUtMTFmMmQ0NmVmN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjdwLWAThgXmQUDsBgCfniXXBJGqMQ0Z4KU6RojR+1ZMiOse5/BqH9A 26FvSrGAoYuqRkse4tnTOUIdhErPQPre3W186oYTWI6e2BG11NcgO7WcE64f2wbx zu5MEDRPZyJ2u3IcZo/tsn7togAOkTKpll4vkdHcKBjMBifAk1K+v508cC1DiWxx 6xTzF7O4ocLliFhgh1d3pxOiEdrhq6bzYZ77lekXHPqcRJsgKcp/3BU2nFhi9LZl 8/kE+dgs493u969EQ96To1vEZsLuqZIZwSVOINUL2cyjcXFz5LsO1tGYE4wRSudx pfigy+fSPazBDoJVzmye60Fa+g8XlzM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:58 2025 by rpki-client