$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa File: fd3c689e-2c7d-3a88-b382-65c29503a941.roa (raw, json) Hash identifier: CUd44nPqZbOWg1sJHLrRZwawC9qncebF06MryGNrk10= Subject key identifier: 5A:B9:FC:F6:F3:3A:83:C3:56:C9:C0:F0:42:C6:CF:B0:3D:11:D3:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBDE10FCDB51884E2DF300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.238.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:de:10:fc:db:51:88:4e:2d:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=61530468-f29e-42f0-a37d-0069a3d005ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:a3:8f:5c:cc:78:f4:c9:4e:3e:99:51:b0: 3c:78:b7:c1:c6:01:ab:05:fe:d0:9e:d9:2b:11:02: d0:14:74:2a:91:88:d8:72:77:ba:ee:cb:38:c7:c6: 4b:15:a8:49:95:a1:4d:fc:e7:24:35:49:e6:93:ce: 92:e2:49:29:79:ae:aa:d7:6c:1b:52:4c:08:7c:60: 6f:10:41:23:73:6a:36:be:94:c5:62:da:e2:cb:bd: 14:ec:e7:60:8f:19:8e:e3:dd:d9:a7:4d:3c:a7:d9: ba:9b:28:31:7c:50:20:bb:c0:0a:7b:cc:c4:7b:54: 33:11:08:fe:43:e3:70:c3:f2:d8:da:58:ea:58:a4: 5b:00:28:8a:a7:52:c6:6f:8c:13:e1:f2:c7:da:0f: 6a:72:bd:8e:d5:27:be:aa:6f:c6:f1:7c:4d:9c:b0: 0e:af:02:e3:74:a9:81:1a:a8:e4:5b:d0:02:21:8f: 56:57:3a:76:29:ef:03:40:f8:62:ee:ad:d5:5c:74: ad:a9:4f:b6:8f:2f:f1:b7:bb:50:e8:46:fd:94:10: 6b:11:c5:c8:d0:f6:a4:9d:39:54:2a:9d:58:f5:25: 7f:b3:da:d6:23:0a:99:51:89:c9:36:7a:fc:b7:97: 25:ab:81:ea:a9:4e:f6:6e:7b:4e:ad:b9:2a:79:a4: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B9:FC:F6:F3:3A:83:C3:56:C9:C0:F0:42:C6:CF:B0:3D:11:D3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:64:aa:14:e7:6e:21:70:f6:b9:aa:0b:11:9b:8b:b5:bc:8d: 91:28:c0:69:9c:c6:68:d9:35:8a:b1:61:73:fc:b0:93:7d:96: fb:93:d0:90:31:83:c3:18:1a:0e:e0:b8:f9:9d:e6:2b:4b:17: 4b:5e:80:0d:2f:73:1b:ec:fd:1a:ea:4c:f9:f5:f5:85:67:cd: c3:75:ac:ce:09:26:ab:eb:73:6b:12:a1:32:09:ba:b9:f1:0a: dd:fb:ce:25:4a:bb:47:78:e9:44:12:61:84:07:59:d8:aa:c7: 74:c7:be:54:07:d4:23:3d:fa:6e:0a:52:1f:d1:29:aa:67:67: ba:48:e2:aa:e0:2f:98:54:36:e5:87:50:dc:94:de:a4:12:29: 0a:ae:f5:c4:f8:c1:8c:69:0b:c0:bb:be:f5:87:99:98:1c:07: 8d:fa:82:bb:d9:53:9e:4a:c3:7c:51:5e:e5:b6:3c:f1:57:8d: 8f:a4:63:ad:29:8f:7b:9e:83:18:7e:49:a4:e6:7c:84:0a:59: 9e:73:a7:ff:06:67:4c:ad:04:b9:19:f6:56:3e:9c:ba:22:29: fe:57:b1:5e:7d:82:c6:eb:80:1b:76:79:8e:84:da:06:54:68: 16:e2:71:a2:f6:96:78:1f:ce:a9:9e:e7:7c:24:8b:76:3b:b6: 77:eb:22:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG294Q/NtRiE4t8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjE1MzA0NjgtZjI5ZS00MmYwLWEzN2QtMDA2OWEzZDAwNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Cjj1zMePTJTj6ZUbA8eLfBxgGrBf7Qntkr EQLQFHQqkYjYcne67ss4x8ZLFahJlaFN/OckNUnmk86S4kkpea6q12wbUkwIfGBv EEEjc2o2vpTFYtriy70U7OdgjxmO493Zp008p9m6mygxfFAgu8AKe8zEe1QzEQj+ Q+Nww/LY2ljqWKRbACiKp1LGb4wT4fLH2g9qcr2O1Se+qm/G8XxNnLAOrwLjdKmB GqjkW9ACIY9WVzp2Ke8DQPhi7q3VXHStqU+2jy/xt7tQ6Eb9lBBrEcXI0PaknTlU Kp1Y9SV/s9rWIwqZUYnJNnr8t5clq4HqqU72bntOrbkqeaRCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq5/PbzOoPDVsnA8ELGz7A9EdNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQzYzY4OWUtMmM3ZC0z YTg4LWIzODItNjVjMjk1MDNhOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9kqhTnbiFw9rmqCxGbi7W8jZEowGmcxmjZNYqxYXP8sJN9lvuT0JAx g8MYGg7guPmd5itLF0tegA0vcxvs/RrqTPn19YVnzcN1rM4JJqvrc2sSoTIJurnx Ct37ziVKu0d46UQSYYQHWdiqx3THvlQH1CM9+m4KUh/RKapnZ7pI4qrgL5hUNuWH UNyU3qQSKQqu9cT4wYxpC8C7vvWHmZgcB436grvZU55Kw3xRXuW2PPFXjY+kY60p j3uegxh+SaTmfIQKWZ5zp/8GZ0ytBLkZ9lY+nLoiKf5XsV59gsbrgBt2eY6E2gZU aBbicaL2lngfzqme53wki3Y7tnfrIio= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:19 2025 by rpki-client