$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02ca45b8-df41-315e-b96c-f47c63c6f255.roa File: 02ca45b8-df41-315e-b96c-f47c63c6f255.roa (raw, json) Hash identifier: nEW5PAtl//L8DoEivQp7+v/0f/FrZMbiHYU6zBPRyNA= Subject key identifier: 10:38:74:C5:B8:2B:F0:D0:7A:B9:95:58:C5:B8:17:D5:21:92:82:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8A2A49975BD34F3E0E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02ca45b8-df41-315e-b96c-f47c63c6f255.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8a:2a:49:97:5b:d3:4f:3e:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=f60a42b4-5330-48ed-972d-1ae1c56f9bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:08:e1:7d:a9:96:30:73:40:d7:7d:42:01: 8f:b0:4e:77:ff:8b:30:70:d6:a1:eb:e9:e7:2f:80: 20:89:af:11:69:6b:74:cf:ec:9f:ea:41:0b:31:35: bf:13:39:a9:09:5d:f9:d6:63:64:0f:78:72:b3:36: c8:b3:cd:c9:55:83:ea:57:9d:8a:d9:f6:c2:b5:91: fe:d7:67:c1:55:e3:3e:64:76:6d:06:80:15:7d:cf: 4e:1d:4b:9c:89:23:fd:11:de:c1:e4:25:b3:e9:53: ef:63:af:ae:c3:45:d2:b9:73:fe:9b:53:f7:1e:45: b4:6e:c6:d1:53:b2:79:fc:ec:5e:ed:84:88:79:41: 32:6e:aa:56:2b:c1:40:be:e1:5b:b3:d1:c7:8a:bf: 8f:41:53:dd:e4:aa:39:b7:af:64:55:13:43:9a:0b: 74:b8:47:fe:22:08:6b:38:2b:35:43:f3:3d:6d:d2: 81:9a:f6:86:ac:1d:ed:ba:5a:32:71:f7:61:93:d7: 5d:55:76:54:94:d5:b8:46:b3:a1:8c:84:7e:74:30: fa:2d:3f:3c:71:36:8b:0f:05:6f:65:4c:fd:22:63: 68:3a:b9:f3:f1:84:3c:ca:11:b2:f9:90:f0:7c:8e: aa:60:c9:05:21:e6:76:d7:09:36:7f:ac:4a:92:2b: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:38:74:C5:B8:2B:F0:D0:7A:B9:95:58:C5:B8:17:D5:21:92:82:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02ca45b8-df41-315e-b96c-f47c63c6f255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:28:d4:89:6e:b1:f1:42:00:8a:50:d4:57:2b:67:81:0b:c2: e6:e8:73:b7:50:d3:dd:28:96:76:ea:a2:73:1b:0b:23:d7:19: 45:d8:54:ea:d2:89:59:52:6c:fe:12:26:54:99:3e:64:ad:c6: fc:2e:19:d8:5b:a5:22:ce:97:64:ae:62:61:35:14:47:22:33: 63:f0:e3:aa:95:5a:18:d2:55:5c:39:40:3d:d7:9f:d7:df:45: f6:4d:59:36:e3:a8:36:b4:07:81:a9:73:c8:79:1f:a5:c0:6e: e4:a7:0c:f4:fb:1a:10:d4:41:fe:6e:33:a6:c1:79:df:ee:c5: a0:16:8a:a6:b9:5c:e0:95:1f:c0:cd:86:7c:d6:31:91:62:bc: 05:46:af:ad:7b:b9:96:05:5f:a2:a9:6c:84:0d:7e:fd:11:2f: e9:3f:b0:1a:35:a4:42:74:0e:83:1a:72:22:5b:51:c3:c7:0a: 22:ac:2d:38:10:a2:0c:7c:5f:52:94:ea:14:af:e0:00:ae:9f: 69:19:01:0e:63:cf:4f:e8:19:2e:d8:5c:c3:c3:c4:88:81:a8: f0:07:df:ee:53:8a:d1:35:a7:84:68:64:72:fb:f7:ff:2a:ec: b0:68:fb:bc:b5:5a:8f:ec:79:fd:f8:3c:1a:3e:e6:a2:8a:ad: cb:89:b8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4oqSZdb008+DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZjYwYTQyYjQtNTMzMC00OGVkLTk3MmQtMWFlMWM1NmY5YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMgI4X2pljBzQNd9QgGPsE53/4swcNah6+nn L4Agia8RaWt0z+yf6kELMTW/EzmpCV351mNkD3hyszbIs83JVYPqV52K2fbCtZH+ 12fBVeM+ZHZtBoAVfc9OHUuciSP9Ed7B5CWz6VPvY6+uw0XSuXP+m1P3HkW0bsbR U7J5/Oxe7YSIeUEybqpWK8FAvuFbs9HHir+PQVPd5Ko5t69kVRNDmgt0uEf+Ighr OCs1Q/M9bdKBmvaGrB3tuloycfdhk9ddVXZUlNW4RrOhjIR+dDD6LT88cTaLDwVv ZUz9ImNoOrnz8YQ8yhGy+ZDwfI6qYMkFIeZ21wk2f6xKkisN0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA4dMW4K/DQermVWMW4F9UhkoLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDJjYTQ1YjgtZGY0MS0z MTVlLWI5NmMtZjQ3YzYzYzZmMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4o1IlusfFCAIpQ1FcrZ4ELwuboc7dQ090olnbqonMbCyPXGUXYVOrS iVlSbP4SJlSZPmStxvwuGdhbpSLOl2SuYmE1FEciM2Pw46qVWhjSVVw5QD3Xn9ff RfZNWTbjqDa0B4Gpc8h5H6XAbuSnDPT7GhDUQf5uM6bBed/uxaAWiqa5XOCVH8DN hnzWMZFivAVGr617uZYFX6KpbIQNfv0RL+k/sBo1pEJ0DoMaciJbUcPHCiKsLTgQ ogx8X1KU6hSv4ACun2kZAQ5jz0/oGS7YXMPDxIiBqPAH3+5TitE1p4RoZHL79/8q 7LBo+7y1Wo/sef34PBo+5qKKrcuJuNE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:10 2025 by rpki-client