$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa File: fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa (raw, json) Hash identifier: j+pbEifi6OWzA6KE6F/QpmfW3vs2+lxJy3lRHcmZR2Y= Subject key identifier: AE:BC:64:64:64:70:AA:9B:03:FD:BC:68:FC:BA:F7:7F:EB:9B:02:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBA916B451D93B6A7F93C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.228.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a9:16:b4:51:d9:3b:6a:7f:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=8261c4db-8642-4735-9fd8-d40132331163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:3d:ab:04:8a:96:ac:70:24:b9:e6:90:05: 35:60:5d:ea:8d:0f:18:77:fa:70:c1:9a:38:73:17: 94:d3:74:21:a8:30:78:40:3d:08:3d:9e:3c:fb:2e: 11:65:06:78:29:13:b0:fc:1a:94:9b:e7:ee:28:38: 97:f1:87:9d:26:8d:12:0c:51:de:2c:df:16:8b:ca: 22:cf:33:ec:c0:9b:03:03:b9:ef:32:d5:5d:32:0d: 13:d0:1a:d7:a6:ff:ed:b6:98:27:1e:19:a5:06:d2: c1:ed:26:3a:dd:13:e1:9c:da:e0:bc:36:0c:20:fa: d4:85:7d:c5:bc:ae:19:5b:0f:df:2f:c9:63:49:be: 08:59:5b:1e:b6:56:22:9f:46:44:99:7f:7d:e4:62: 22:42:32:07:27:15:2b:be:b6:b2:cb:a4:be:18:4f: a8:48:12:9e:0a:5f:29:9f:3a:95:95:af:4e:c0:8f: de:ee:1e:7d:51:5e:6a:2c:16:9c:c6:e9:90:ec:22: 4f:86:a5:8b:c7:94:dd:ce:a2:c5:eb:7c:6e:48:25: 1d:8c:5d:dc:8e:de:d5:56:b3:48:c5:da:21:19:da: 4c:e6:91:4a:37:f6:9d:f1:52:8c:82:07:a7:b8:02: fd:05:38:72:41:38:56:09:98:ae:78:a4:76:bc:43: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:64:64:64:70:AA:9B:03:FD:BC:68:FC:BA:F7:7F:EB:9B:02:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f4:50:81:95:76:64:e2:c6:15:a8:02:14:aa:c6:40:7b:29: 7e:25:c5:61:ea:d2:a7:4d:39:0c:16:2b:3c:34:6d:83:0e:a1: 29:a2:85:a8:0f:f0:54:77:a0:52:f4:b9:9a:9f:c9:dd:52:ea: 81:3e:1f:26:38:c8:80:e6:11:60:25:a8:e9:40:79:fd:32:91: b5:c6:10:13:3e:cf:d8:a9:ce:5c:5f:fb:1b:67:54:e7:aa:10: b2:5f:e5:4f:5f:7b:bc:cb:8b:51:97:e7:e2:78:6e:8f:73:b9: 40:01:ad:05:35:f3:6b:33:6d:d5:d6:2e:3e:35:fd:6d:b9:de: 5f:3c:b2:5c:a4:93:dc:c6:d4:63:ee:d3:c9:ea:8c:e5:9f:f0: 29:2a:3d:19:22:d6:d0:90:de:f9:f7:0c:fa:9d:33:5c:d1:c7: 15:ca:99:d1:05:26:22:70:c2:30:91:74:29:19:e3:63:9f:16: 49:d4:0f:9c:fa:1d:b7:42:6e:33:57:09:27:e7:72:06:99:09: ac:4c:d1:53:52:06:00:00:7a:65:b5:0f:f8:4e:24:2d:60:2b: 18:8b:2f:51:72:11:db:6f:0b:4d:b4:24:b1:b5:17:48:c0:92: 38:92:ed:1d:aa:4e:b5:6d:5b:c9:06:96:aa:39:a8:a0:da:ad: e1:19:3d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26kWtFHZO2p/k8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODI2MWM0ZGItODY0Mi00NzM1LTlmZDgtZDQwMTMyMzMxMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoew9qwSKlqxwJLnmkAU1YF3qjQ8Yd/pwwZo4 cxeU03QhqDB4QD0IPZ48+y4RZQZ4KROw/BqUm+fuKDiX8YedJo0SDFHeLN8Wi8oi zzPswJsDA7nvMtVdMg0T0BrXpv/ttpgnHhmlBtLB7SY63RPhnNrgvDYMIPrUhX3F vK4ZWw/fL8ljSb4IWVsetlYin0ZEmX995GIiQjIHJxUrvrayy6S+GE+oSBKeCl8p nzqVla9OwI/e7h59UV5qLBacxumQ7CJPhqWLx5TdzqLF63xuSCUdjF3cjt7VVrNI xdohGdpM5pFKN/ad8VKMggenuAL9BThyQThWCZiueKR2vEOUUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK68ZGRkcKqbA/28aPy693/rmwJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmEyNzFhMDUtM2U2OS0z MGNlLTgzZTEtYjNiM2FiMjkzZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL0UIGVdmTixhWoAhSqxkB7KX4lxWHq0qdNOQwWKzw0bYMOoSmihagP 8FR3oFL0uZqfyd1S6oE+HyY4yIDmEWAlqOlAef0ykbXGEBM+z9ipzlxf+xtnVOeq ELJf5U9fe7zLi1GX5+J4bo9zuUABrQU182szbdXWLj41/W253l88slykk9zG1GPu 08nqjOWf8CkqPRki1tCQ3vn3DPqdM1zRxxXKmdEFJiJwwjCRdCkZ42OfFknUD5z6 HbdCbjNXCSfncgaZCaxM0VNSBgAAemW1D/hOJC1gKxiLL1FyEdtvC020JLG1F0jA kjiS7R2qTrVtW8kGlqo5qKDareEZPfE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:20 2025 by rpki-client