$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa File: 0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa (raw, json) Hash identifier: NkumFQajLgZdUjanhmJjCqw/8q85t+NsGAa4pBOZZA0= Subject key identifier: A8:B0:2D:3C:13:78:7D:87:DF:D0:23:3B:54:6D:0A:76:24:33:06:79 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B654CD5AFECE33E063680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:65:4c:d5:af:ec:e3:3e:06:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=3e26e493-db9a-47c7-b6d8-72f98f0656e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:dc:6e:32:2b:4c:e6:83:77:72:8d:8c:0b: 37:e4:4c:9d:e5:ee:e0:94:9a:99:26:33:f8:70:6c: 84:2d:e9:1e:63:95:30:eb:01:a4:af:c9:38:ce:b0: ac:c8:43:6b:03:68:6b:96:4d:c6:b1:24:bc:15:db: 7f:db:d2:34:48:2d:ec:88:f6:46:a8:ca:b1:8a:a2: fa:c5:80:82:83:13:7b:5b:37:80:1d:6c:00:d1:f4: 1b:6b:c9:a8:96:f8:ae:10:07:9e:1f:bc:2a:37:fd: 88:fe:92:68:30:c1:16:64:9b:33:3f:54:79:7e:58: 58:dd:9e:5a:f9:e7:10:c4:b2:c1:14:e7:70:95:23: ec:96:b8:d1:0e:da:41:93:8e:85:86:fa:05:10:46: 2b:69:0e:76:37:8a:7a:39:17:56:7b:f3:d2:a8:cd: 3c:da:af:9b:1b:63:6e:0f:8e:fc:e9:a1:d8:1e:d0: f5:d9:a0:2c:7c:21:9f:59:84:17:f1:de:d4:97:29: 88:1c:48:32:99:a0:fe:d5:9f:1d:ac:7b:04:c7:87: 25:ee:62:6f:87:90:20:41:0c:8c:41:32:8c:3f:79: 14:e2:12:49:4f:12:4b:6e:b6:14:09:77:9b:a9:08: 38:3c:db:cf:60:63:de:14:68:97:fc:6d:99:b5:de: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B0:2D:3C:13:78:7D:87:DF:D0:23:3B:54:6D:0A:76:24:33:06:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:cf:d0:6c:76:a2:6e:08:71:f6:27:96:99:32:e7:63:1b:34: a5:da:04:2c:51:fc:4c:14:62:96:8e:b3:da:e8:f2:34:fb:6e: 05:c9:4e:7e:0c:44:8b:09:2f:4a:bc:54:c9:49:15:fd:2e:1b: 6e:9c:76:ab:f0:d6:f3:c1:f8:33:54:a9:84:2b:3e:31:a4:5f: e5:a0:3a:29:e4:55:83:09:34:6c:05:56:82:8d:35:41:61:f3: 61:36:a7:7d:92:77:af:9a:49:32:d8:dd:60:e6:07:cc:97:7b: 4c:de:15:61:41:d8:68:b0:57:9e:68:71:57:1c:b9:13:34:79: 94:97:74:ee:a3:61:a7:bb:2e:87:71:d8:04:b9:0a:d4:a2:17: d3:e6:fb:6b:fc:8e:e6:af:0d:f4:e5:18:84:50:0d:9b:df:f0: ae:53:31:8c:74:98:45:a6:ca:6e:58:7e:62:ed:f8:16:c9:7a: a9:9c:e1:d4:7e:ab:72:8e:44:7c:9a:a2:e3:51:b3:8d:c9:9d: 72:03:ff:30:6f:c7:83:07:c7:89:7e:5a:44:b1:e9:1d:a6:be: ab:ff:30:3a:9c:ba:32:2c:9f:4f:30:d4:1c:6d:4d:e6:26:ac: 99:f2:ea:0c:72:b9:99:e1:49:29:4d:3d:4e:7e:df:89:9f:b4: d6:95:30:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2VM1a/s4z4GNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk M2UyNmU0OTMtZGI5YS00N2M3LWI2ZDgtNzJmOThmMDY1NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iPcbjIrTOaDd3KNjAs35Eyd5e7glJqZJjP4 cGyELekeY5Uw6wGkr8k4zrCsyENrA2hrlk3GsSS8Fdt/29I0SC3siPZGqMqxiqL6 xYCCgxN7WzeAHWwA0fQba8molviuEAeeH7wqN/2I/pJoMMEWZJszP1R5flhY3Z5a +ecQxLLBFOdwlSPslrjRDtpBk46FhvoFEEYraQ52N4p6ORdWe/PSqM082q+bG2Nu D4786aHYHtD12aAsfCGfWYQX8d7UlymIHEgymaD+1Z8drHsEx4cl7mJvh5AgQQyM QTKMP3kU4hJJTxJLbrYUCXebqQg4PNvPYGPeFGiX/G2Ztd78NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiwLTwTeH2H39AjO1RtCnYkMwZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQzZDYzY2EtNmE3YS0z ZWFjLWI4ZmMtN2QzNjI4NTE0NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjP0Gx2om4IcfYnlpky52MbNKXaBCxR/EwUYpaOs9ro8jT7bgXJTn4M RIsJL0q8VMlJFf0uG26cdqvw1vPB+DNUqYQrPjGkX+WgOinkVYMJNGwFVoKNNUFh 82E2p32Sd6+aSTLY3WDmB8yXe0zeFWFB2GiwV55ocVccuRM0eZSXdO6jYae7Lodx 2AS5CtSiF9Pm+2v8juavDfTlGIRQDZvf8K5TMYx0mEWmym5YfmLt+BbJeqmc4dR+ q3KORHyaouNRs43JnXID/zBvx4MHx4l+WkSx6R2mvqv/MDqcujIsn08w1BxtTeYm rJny6gxyuZnhSSlNPU5+34mftNaVMLE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:01 2025 by rpki-client