$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa File: 0facca71-107b-3125-9ee8-6fef371f0b10.roa (raw, json) Hash identifier: Ho1bn23iC926LiD8cPPF7abnM6/D69Hh1GkziIVJcbU= Subject key identifier: 89:95:CA:FB:26:5B:DD:60:E3:A6:8E:6A:51:A6:8D:5B:CF:ED:D8:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B645855F2619037C3A700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:64:58:55:f2:61:90:37:c3:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=05135365-218c-4100-a2de-719dbf7d4407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:c3:54:d4:c4:58:d0:b8:88:6e:cf:ca:2e: 78:b5:11:d3:17:b9:01:f2:57:6a:e5:4a:91:51:9e: 63:d7:aa:27:7d:92:07:1f:07:14:95:b4:9e:86:92: d2:c7:44:d5:2d:e2:2a:e8:58:3e:78:39:e9:d3:c7: 9b:fb:80:12:9c:25:48:85:44:bd:56:fa:da:3d:b7: 3c:0e:c6:e9:ae:c7:40:a3:cb:03:f2:34:0a:e9:f8: 63:87:15:c3:04:62:cb:2a:30:62:4d:11:8a:f0:8b: ac:9d:ac:d4:90:01:50:e5:09:84:41:63:35:ea:8e: ea:bf:b8:a6:bf:6c:30:e9:01:00:1a:b0:ef:70:1f: 42:8e:2f:30:c4:fa:28:d3:1a:6f:69:cc:08:fa:9d: 22:a3:6c:d6:37:6d:b7:92:b6:ff:bb:2f:06:a3:89: 6e:07:4f:96:58:4f:e6:f5:63:b5:6f:8f:36:36:c1: cd:47:45:0c:42:84:17:05:53:8c:a7:12:1e:65:d3: 86:33:75:a2:5b:8e:59:db:8d:45:37:5a:95:87:c4: f6:08:20:60:12:d5:d8:dd:e7:72:00:80:e7:bd:83: 40:4f:09:0a:82:bd:3a:75:30:da:06:c3:fd:7b:e9: ff:fb:ca:8f:87:0d:92:f1:01:eb:41:97:5f:37:17: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:95:CA:FB:26:5B:DD:60:E3:A6:8E:6A:51:A6:8D:5B:CF:ED:D8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:37:88:df:f6:7a:bb:1b:e4:4d:de:ea:1a:ff:62:7a:82:bf: 9a:82:b4:a5:89:85:aa:75:05:72:89:a5:02:dc:33:0a:2d:88: 94:5b:f3:aa:92:86:26:8a:a0:ec:54:7a:83:c8:1f:81:32:59: 32:c7:a4:77:92:3a:70:fd:a4:f9:9e:9d:4f:6c:93:b1:f4:e3: 29:56:43:f4:6a:db:7c:da:05:c8:31:5c:4a:f1:76:a6:a6:83: e8:fc:da:42:d3:60:2b:95:5d:62:e4:a8:40:52:1f:38:c0:7c: f0:19:83:e5:7e:1f:c7:5f:e1:89:32:64:1d:14:ce:d9:41:93: e8:62:5f:af:8f:f6:c0:53:2d:23:85:a8:53:72:14:7b:43:d7: bc:07:8c:64:eb:9f:58:73:8c:03:ae:e9:a7:70:5e:c3:d3:a1: 4f:fa:ef:32:09:d4:a3:db:d2:95:5c:a0:b9:e0:ea:a0:e0:d4: 4c:98:00:9e:41:f0:75:a5:cd:8b:b3:28:2c:b8:80:5b:50:f1: 60:21:65:20:41:1a:b7:28:93:7a:6d:f7:45:5d:5e:49:46:58: a2:60:43:4a:a5:db:1e:42:c6:2e:5e:35:51:e3:d9:b9:59:c6: fb:5a:a1:85:cb:2d:84:ef:b5:6f:84:86:91:20:a5:69:da:da: 60:97:fe:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2RYVfJhkDfDpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDUxMzUzNjUtMjE4Yy00MTAwLWEyZGUtNzE5ZGJmN2Q0NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWLDVNTEWNC4iG7Pyi54tRHTF7kB8ldq5UqR UZ5j16onfZIHHwcUlbSehpLSx0TVLeIq6Fg+eDnp08eb+4ASnCVIhUS9VvraPbc8 DsbprsdAo8sD8jQK6fhjhxXDBGLLKjBiTRGK8IusnazUkAFQ5QmEQWM16o7qv7im v2ww6QEAGrDvcB9Cji8wxPoo0xpvacwI+p0io2zWN223krb/uy8Go4luB0+WWE/m 9WO1b482NsHNR0UMQoQXBVOMpxIeZdOGM3WiW45Z241FN1qVh8T2CCBgEtXY3edy AIDnvYNATwkKgr06dTDaBsP9e+n/+8qPhw2S8QHrQZdfNxdLWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImVyvsmW91g46aOalGmjVvP7dg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZhY2NhNzEtMTA3Yi0z MTI1LTllZTgtNmZlZjM3MWYwYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE03iN/2ersb5E3e6hr/YnqCv5qCtKWJhap1BXKJpQLcMwotiJRb86qS hiaKoOxUeoPIH4EyWTLHpHeSOnD9pPmenU9sk7H04ylWQ/Rq23zaBcgxXErxdqam g+j82kLTYCuVXWLkqEBSHzjAfPAZg+V+H8df4YkyZB0UztlBk+hiX6+P9sBTLSOF qFNyFHtD17wHjGTrn1hzjAOu6adwXsPToU/67zIJ1KPb0pVcoLng6qDg1EyYAJ5B 8HWlzYuzKCy4gFtQ8WAhZSBBGrcok3pt90VdXklGWKJgQ0ql2x5Cxi5eNVHj2blZ xvtaoYXLLYTvtW+EhpEgpWna2mCX/ms= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:08 2025 by rpki-client