$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa File: 1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa (raw, json) Hash identifier: hubTJZumEJTW62B4DQ61B+kl4N296d0uKTyb/o75LJs= Subject key identifier: 5B:28:42:F8:07:32:AD:C8:47:FE:47:40:49:69:3B:80:BC:C4:D9:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B73CEC157EA166DB94F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.198.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:73:ce:c1:57:ea:16:6d:b9:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=15f2d121-add1-45c9-b037-e1dc558188f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:40:4e:d6:5f:37:b3:44:a1:97:21:b6:05: 4d:dc:f3:b5:91:c5:3f:84:8e:0f:26:65:84:c1:0d: 43:1d:cf:1f:db:e7:ec:42:d2:3a:76:ce:fe:1f:2d: d0:59:6e:ce:5c:9a:b0:f8:60:29:5f:07:9e:6f:48: aa:86:97:88:60:30:55:d5:a8:1a:1c:90:5b:9d:14: 40:24:e6:07:33:0d:83:c8:0a:0c:ab:f9:0e:7e:c7: 6f:48:ed:0d:37:c8:f7:64:dd:9e:65:76:1c:3f:f8: 31:65:c5:85:47:cb:58:19:74:1e:1d:bc:ff:12:20: 1a:8b:ec:5a:82:76:e6:cc:a0:8e:69:b1:29:5c:42: 5a:c2:2c:4e:f8:05:e8:3d:6a:95:c9:3e:28:fc:8e: 05:5d:90:1f:5d:97:3e:ee:ee:b9:d6:37:47:5e:58: 52:00:a8:df:6e:5f:bd:0e:2b:d3:9b:3e:da:8c:2a: 3d:f8:e2:45:89:0c:ca:7e:ee:77:ac:8d:6a:48:a9: e9:31:86:bb:35:53:05:71:0f:11:fe:03:7a:bc:ad: 5c:ae:5f:e8:a0:49:f2:df:8d:31:3b:36:b2:39:be: 42:9b:cf:de:d4:b7:6b:e9:40:26:dc:ba:42:83:23: 1d:7d:83:6f:c8:f8:e9:51:60:03:2c:99:6c:8e:e4: ec:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:42:F8:07:32:AD:C8:47:FE:47:40:49:69:3B:80:BC:C4:D9:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:81:36:14:01:60:45:73:43:5e:48:27:22:36:3f:7a:6e:c3: 56:f7:a8:8b:20:ba:4d:88:2e:92:67:fe:78:62:9b:e6:07:97: 9e:d9:0b:4e:ec:65:a9:4c:3b:53:f1:d4:b1:44:be:56:74:55: 48:35:2c:9e:87:64:c3:5e:8d:7f:65:d1:44:49:36:f3:71:49: 92:a1:7c:cc:72:16:a1:a9:da:1f:fc:e7:3c:fd:92:01:9e:cc: 02:8d:59:af:ff:bf:94:69:4c:c7:e4:3b:57:ca:55:e4:8e:19: 29:2f:58:91:c7:1f:1a:7b:36:37:de:02:c1:04:c7:f3:05:b0: 70:89:c5:eb:44:2c:18:e7:90:be:19:c2:f5:6f:9c:22:91:c7: cd:e2:4f:9d:fe:f2:e8:d0:3b:11:15:43:05:f9:a1:1a:d4:19: 3c:c6:7d:54:d7:da:16:ea:e3:cf:b8:88:9b:5f:1d:d9:58:c9: 38:6d:95:8b:e4:d5:63:bd:30:5b:10:39:8f:f2:d8:e1:db:9d: 55:5b:6e:9c:0b:31:0b:2f:d8:a3:6b:2a:57:b6:1e:c1:03:c5: 40:62:da:7e:57:a1:9f:1a:74:07:d7:9f:fe:c8:e2:f1:3f:6e: 83:f9:b4:e3:96:59:d2:96:95:19:dc:56:80:c0:9a:d8:fd:2d: fa:cb:cb:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3POwVfqFm25T0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTVmMmQxMjEtYWRkMS00NWM5LWIwMzctZTFkYzU1ODE4OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzhATtZfN7NEoZchtgVN3PO1kcU/hI4PJmWE wQ1DHc8f2+fsQtI6ds7+Hy3QWW7OXJqw+GApXweeb0iqhpeIYDBV1agaHJBbnRRA JOYHMw2DyAoMq/kOfsdvSO0NN8j3ZN2eZXYcP/gxZcWFR8tYGXQeHbz/EiAai+xa gnbmzKCOabEpXEJawixO+AXoPWqVyT4o/I4FXZAfXZc+7u651jdHXlhSAKjfbl+9 DivTmz7ajCo9+OJFiQzKfu53rI1qSKnpMYa7NVMFcQ8R/gN6vK1crl/ooEny340x OzayOb5Cm8/e1Ldr6UAm3LpCgyMdfYNvyPjpUWADLJlsjuTsCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsoQvgHMq3IR/5HQElpO4C8xNlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIyMWE2YmQtMzkzYS0z NzU4LWI2ZjgtOGJmMDBjYzk2NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+BNhQBYEVzQ15IJyI2P3puw1b3qIsguk2ILpJn/nhim+YHl57ZC07s ZalMO1Px1LFEvlZ0VUg1LJ6HZMNejX9l0URJNvNxSZKhfMxyFqGp2h/85zz9kgGe zAKNWa//v5RpTMfkO1fKVeSOGSkvWJHHHxp7NjfeAsEEx/MFsHCJxetELBjnkL4Z wvVvnCKRx83iT53+8ujQOxEVQwX5oRrUGTzGfVTX2hbq48+4iJtfHdlYyThtlYvk 1WO9MFsQOY/y2OHbnVVbbpwLMQsv2KNrKle2HsEDxUBi2n5XoZ8adAfXn/7I4vE/ boP5tOOWWdKWlRncVoDAmtj9LfrLyzU= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:18 2025 by rpki-client