$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa File: ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa (raw, json) Hash identifier: mxjmUMMiTuC7Mlk+LoJQlJav/3KbAS+RdHnxubEhS34= Subject key identifier: 35:EA:49:35:FC:C8:6B:B3:3C:80:E5:8E:25:61:FF:F4:39:68:E1:40 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBB9F15341D9A70B2F2900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.243.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b9:f1:53:41:d9:a7:0b:2f:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f1b0a8c5-719c-4f74-bd76-8f102149e516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:29:d7:62:e8:87:bf:11:f8:0b:df:20:e5: 3d:82:32:69:20:5d:e2:14:96:e0:d5:cb:8a:5d:84: 9e:ed:ab:bc:e6:01:b6:3a:63:22:6f:b9:d2:00:3a: 56:e8:95:8d:73:ed:cc:b3:1e:dc:5e:12:31:20:e4: a0:38:77:52:7b:a9:37:66:82:50:3c:04:64:31:90: d1:da:0e:99:d8:8e:51:16:89:c3:57:5c:25:80:6e: c4:f7:cb:ba:64:80:be:13:72:a3:c0:01:3c:3e:ba: 8a:1f:ff:33:5e:6e:cc:43:42:b1:c7:49:98:e0:ae: 63:f1:e1:bc:81:60:15:59:c7:14:47:b8:32:4b:8f: 0f:8b:e7:48:8c:72:80:a3:4a:de:c4:f0:6e:ab:74: e4:75:47:98:5c:07:6f:54:b0:9b:a3:3a:50:02:cd: 57:45:d3:b4:7b:16:c9:22:da:63:f0:96:1b:2b:15: 61:75:ab:15:e1:76:bb:56:e4:0c:83:a9:2f:7d:90: 84:dc:a5:45:76:e7:61:e4:11:9f:ff:09:4a:be:11: b6:e6:a8:1f:95:96:68:c4:0e:28:95:6e:01:40:d1: 69:f8:f2:e4:76:e2:64:f1:2e:a1:f9:20:11:24:63: 71:3d:df:60:18:4a:1b:99:33:83:ae:71:d5:dc:c5: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EA:49:35:FC:C8:6B:B3:3C:80:E5:8E:25:61:FF:F4:39:68:E1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3d935d-6ae5-33f8-b6cf-0f63006437f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f6:de:47:1e:23:b4:7a:26:93:67:36:27:ed:3c:10:bf:26: 00:d0:1b:d4:ca:5d:02:da:24:f3:95:69:4d:63:44:ac:b0:86: f3:aa:77:a9:6f:0e:d5:28:18:d9:24:f5:fa:82:6a:36:f7:b4: b2:ce:77:f8:d2:49:32:7e:c3:cf:a0:71:c3:6d:f0:72:0d:8a: f2:d7:c2:4e:2b:fa:19:58:01:23:c7:f8:f4:fa:38:05:5a:be: ee:a6:b9:2f:7d:ae:79:f1:44:1d:19:cb:b2:87:a7:98:88:cb: de:d2:69:69:9e:90:74:eb:37:da:f8:c0:02:58:d7:77:7f:d9: 9c:cd:96:be:77:79:26:97:5a:dc:d0:77:f3:17:ec:09:dc:a1: c5:61:3b:3c:4d:30:9f:d4:88:64:cb:4c:59:db:3c:83:c3:3f: bc:ec:42:97:2c:d0:05:92:81:d2:06:7d:b3:59:14:e3:fd:50: 77:c0:0c:ae:1a:b0:28:c5:fa:58:83:06:f9:66:18:02:7c:77: f3:86:b9:ea:cd:bb:fd:99:7b:54:cb:8c:00:0e:d7:d8:fa:ae: 1b:b9:ff:c3:7e:73:2b:80:70:c7:89:d7:c5:0b:00:f4:f0:42: bb:14:a8:78:14:57:7b:dd:18:b7:51:70:c9:38:6e:3d:c2:4e: 31:f3:27:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27nxU0HZpwsvKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjFiMGE4YzUtNzE5Yy00Zjc0LWJkNzYtOGYxMDIxNDllNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAMp12Loh78R+AvfIOU9gjJpIF3iFJbg1cuK XYSe7au85gG2OmMib7nSADpW6JWNc+3Msx7cXhIxIOSgOHdSe6k3ZoJQPARkMZDR 2g6Z2I5RFonDV1wlgG7E98u6ZIC+E3KjwAE8PrqKH/8zXm7MQ0Kxx0mY4K5j8eG8 gWAVWccUR7gyS48Pi+dIjHKAo0rexPBuq3TkdUeYXAdvVLCbozpQAs1XRdO0exbJ Itpj8JYbKxVhdasV4Xa7VuQMg6kvfZCE3KVFdudh5BGf/wlKvhG25qgflZZoxA4o lW4BQNFp+PLkduJk8S6h+SARJGNxPd9gGEobmTODrnHV3MWRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXqSTX8yGuzPIDljiVh//Q5aOFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmYzZDkzNWQtNmFlNS0z M2Y4LWI2Y2YtMGY2MzAwNjQzN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn23kceI7R6JpNnNiftPBC/JgDQG9TKXQLaJPOVaU1jRKywhvOqd6lv DtUoGNkk9fqCajb3tLLOd/jSSTJ+w8+gccNt8HINivLXwk4r+hlYASPH+PT6OAVa vu6muS99rnnxRB0Zy7KHp5iIy97SaWmekHTrN9r4wAJY13d/2ZzNlr53eSaXWtzQ d/MX7AncocVhOzxNMJ/UiGTLTFnbPIPDP7zsQpcs0AWSgdIGfbNZFOP9UHfADK4a sCjF+liDBvlmGAJ8d/OGuerNu/2Ze1TLjAAO19j6rhu5/8N+cyuAcMeJ18ULAPTw QrsUqHgUV3vdGLdRcMk4bj3CTjHzJ5s= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:23 2025 by rpki-client