$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa File: 1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa (raw, json) Hash identifier: LRsKc4+5Ori9k03er+PgEdlWUs9sEBLxrmaxM/QQXOg= Subject key identifier: 1B:6E:34:A0:E9:23:F3:03:50:F4:E2:57:2A:66:A3:CC:9B:9E:E5:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B6A69FE999D1DBA3BFCC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 107.167.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6a:69:fe:99:9d:1d:ba:3b:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ecb0af65-c750-41e4-aa3c-ffa6d84df981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:1a:be:e4:5a:b3:52:5d:c3:71:ed:06:f9:b0: 21:3c:be:6d:69:03:45:99:e9:d7:a0:da:d5:0f:35: a0:e4:b9:bc:fb:47:82:c8:7c:09:87:a0:af:d6:2d: 91:72:cc:f3:67:00:15:97:d5:0d:f4:59:1e:46:dc: 82:87:ee:db:96:d0:d2:d5:0a:bb:dc:87:d7:1b:91: 74:f6:38:8f:cf:35:ad:49:e9:72:92:7c:02:64:f8: 7c:c0:9e:cd:ff:48:91:af:90:b4:e3:89:8c:2e:97: 7b:f0:e1:3e:07:6b:bc:f1:e7:e7:71:5b:e3:39:5a: 88:0a:fa:8a:b8:69:a0:81:15:e1:b5:f8:24:c1:73: e3:b1:b8:69:57:24:fc:b0:f6:56:13:7e:1c:e0:52: b2:2e:1c:8b:e0:4e:6d:5f:b5:60:e2:26:24:e1:4c: d0:89:a9:bc:d4:eb:e6:28:4b:fc:6d:9c:48:e2:62: ed:28:99:b7:b8:aa:26:c1:e5:d0:33:03:53:ea:a4: 86:52:e1:ce:aa:f9:65:4b:35:7f:ef:de:dc:c4:61: 55:4a:3b:6b:9e:0b:a1:ba:c1:0f:e2:73:1f:b2:0f: 94:01:a8:f8:10:6b:0b:38:39:79:40:d5:71:d8:04: ed:fb:f2:dc:e9:c0:87:fe:4e:f2:1e:5f:b7:97:47: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:34:A0:E9:23:F3:03:50:F4:E2:57:2A:66:A3:CC:9B:9E:E5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a5:b3:e0:16:71:fb:de:43:35:2c:0c:ac:5b:a0:26:40:f4: 9d:54:8a:6b:93:d4:05:cd:ef:75:88:a3:f4:82:45:f7:6f:e7: af:27:75:68:bd:c7:b3:26:76:6e:9b:18:b0:fd:44:f8:4f:d7: 2c:06:cf:a6:31:6d:2e:2e:bb:3a:48:86:8d:1b:4f:63:41:4a: f9:08:ea:25:6b:72:0c:ef:90:ae:30:48:ca:29:ba:e7:5b:d6: f9:ab:46:66:22:b1:76:e0:27:4a:b2:90:f8:a4:a1:6e:6c:05: 8d:db:2c:7b:d0:f6:76:d1:bb:59:2d:8b:04:49:84:c9:70:d8: a5:46:ff:31:bf:37:f4:03:58:eb:b6:a2:83:66:59:6d:fb:a5: 13:77:fd:98:43:88:1d:18:be:b8:f8:cb:b0:61:62:05:22:10: fd:73:bf:58:13:86:1c:d8:c9:a9:8d:07:67:18:f8:bb:b4:3f: ae:f7:01:e8:8b:22:fc:15:e8:81:63:c4:5f:a8:a3:67:5a:d8: 27:d5:50:93:08:f7:54:10:23:38:17:4b:d0:60:7c:7e:6a:f5: 98:c6:70:41:0c:f1:3c:9a:30:a8:e9:32:a3:e6:48:46:20:6f: 25:47:d0:5f:46:91:6a:31:5b:d9:80:88:27:89:f3:c4:81:17: 9a:e4:89:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2pp/pmdHbo7/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZWNiMGFmNjUtYzc1MC00MWU0LWFhM2MtZmZhNmQ4NGRmOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Bq+5FqzUl3Dce0G+bAhPL5taQNFmenXoNrV DzWg5Lm8+0eCyHwJh6Cv1i2RcszzZwAVl9UN9FkeRtyCh+7bltDS1Qq73IfXG5F0 9jiPzzWtSelyknwCZPh8wJ7N/0iRr5C044mMLpd78OE+B2u88efncVvjOVqICvqK uGmggRXhtfgkwXPjsbhpVyT8sPZWE34c4FKyLhyL4E5tX7Vg4iYk4UzQiam81Ovm KEv8bZxI4mLtKJm3uKomweXQMwNT6qSGUuHOqvllSzV/797cxGFVSjtrnguhusEP 4nMfsg+UAaj4EGsLODl5QNVx2ATt+/Lc6cCH/k7yHl+3l0eprQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtuNKDpI/MDUPTiVypmo8ybnuUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ4N2FjMDItYzNjYy0z ZmQwLWE1ZGQtN2VhNGJlMjBmNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6e/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACals+AWcfveQzUsDKxboCZA9J1UimuT1AXN73WIo/SCRfdv568ndWi9 x7Mmdm6bGLD9RPhP1ywGz6YxbS4uuzpIho0bT2NBSvkI6iVrcgzvkK4wSMopuudb 1vmrRmYisXbgJ0qykPikoW5sBY3bLHvQ9nbRu1ktiwRJhMlw2KVG/zG/N/QDWOu2 ooNmWW37pRN3/ZhDiB0Yvrj4y7BhYgUiEP1zv1gThhzYyamNB2cY+Lu0P673AeiL IvwV6IFjxF+oo2da2CfVUJMI91QQIzgXS9BgfH5q9ZjGcEEM8TyaMKjpMqPmSEYg byVH0F9GkWoxW9mAiCeJ88SBF5rkiT4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:15 2025 by rpki-client