$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bf6a035-bc2d-392b-b04d-a20657c99944.roa File: 2bf6a035-bc2d-392b-b04d-a20657c99944.roa (raw, json) Hash identifier: sHgUvU+lnNyFVdd8LsrLAWLrt6YxZuMoTxsZvd99mP4= Subject key identifier: 28:1F:51:FE:C4:EC:1F:AE:FB:A9:0D:70:46:60:3E:93:ED:E1:40:76 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B9526B049AC87353F1240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bf6a035-bc2d-392b-b04d-a20657c99944.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:95:26:b0:49:ac:87:35:3f:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=d4fc605c-0ac8-4c8c-88f7-7d38df121718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:cd:a1:9e:d9:bb:f8:0e:38:8b:33:76:e4: a3:3e:92:b7:6d:5a:a4:da:6e:6a:9a:3c:a8:ba:da: b1:2f:de:b3:c2:e5:b6:10:e7:c9:dd:9c:52:27:81: 56:2c:8b:a6:4e:b9:0e:00:09:89:30:1d:8f:62:0f: 31:87:26:4f:32:4d:ca:f9:94:2f:90:2b:08:76:e2: f0:69:12:fd:7b:01:ff:e5:e0:11:6b:6b:e7:7f:5b: c9:60:a9:80:e2:36:50:a6:25:07:1c:37:86:65:9a: 23:24:5e:45:b0:99:20:e4:3e:99:5e:ba:54:d2:f1: a6:22:63:65:66:0b:d4:16:27:66:69:da:57:39:c6: 33:1a:10:69:c5:f7:49:89:83:a2:f6:08:4c:ae:91: c7:ba:60:2e:49:79:df:e4:70:17:29:b8:31:90:9b: 65:09:9d:0f:ce:3f:03:30:1c:52:50:4d:1c:c4:b1: 44:62:90:52:de:e9:88:d4:90:d9:de:98:e2:97:8c: 99:c5:b3:d9:00:ca:65:d0:52:da:9b:df:4a:c6:ef: 93:e9:f6:0e:56:9b:49:14:d9:12:08:ae:d9:a0:30: a4:57:50:eb:e3:35:3b:1b:ed:db:38:12:fd:f9:d7: e5:14:0c:06:15:97:cb:56:9e:f7:b3:2a:bc:66:f8: 71:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1F:51:FE:C4:EC:1F:AE:FB:A9:0D:70:46:60:3E:93:ED:E1:40:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bf6a035-bc2d-392b-b04d-a20657c99944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:12:ce:f5:04:07:a0:74:40:47:66:15:06:05:cc:6e:26:a9: 71:2a:17:11:e3:30:d2:92:07:53:c9:45:ca:db:ac:a7:e1:53: 9b:b4:9e:b9:71:4b:8f:4c:d2:e8:95:dd:93:26:8a:0c:64:ff: 41:c7:47:1b:03:e9:93:86:69:44:26:92:fa:07:37:8a:8e:3c: 94:f0:65:c2:fe:29:80:c6:d1:b9:fc:33:13:70:01:00:51:7c: 88:ba:fa:0f:6e:f5:29:84:b5:8b:cc:9a:a0:99:c1:40:61:e3: d4:f9:bc:53:3c:ff:e9:f0:5f:96:c1:cc:0f:2d:43:7b:ef:a4: 27:c4:46:ac:ca:40:0c:fe:5b:4a:e4:8e:bf:10:6a:4d:7a:1d: 9e:f6:14:9b:a6:63:54:52:34:50:12:96:ba:19:75:3f:05:47: ed:5b:73:ae:55:02:4b:ea:95:a1:84:ee:a9:4f:ed:3e:ad:d0: b0:61:ee:c1:e3:17:2c:fd:93:c6:14:81:2b:b1:53:a1:2d:13: fc:ec:6e:63:86:1b:a1:87:56:f6:be:20:99:b0:70:65:4e:f2: 2f:67:3c:21:6b:0a:c4:81:0c:6d:40:22:1e:5d:97:a0:69:c3: d4:21:50:6a:37:f0:24:ef:e1:b1:8b:c9:2c:78:74:83:8d:59: ef:80:e6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5UmsEmshzU/EkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDRmYzYwNWMtMGFjOC00YzhjLTg4ZjctN2QzOGRmMTIxNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcTNoZ7Zu/gOOIszduSjPpK3bVqk2m5qmjyo utqxL96zwuW2EOfJ3ZxSJ4FWLIumTrkOAAmJMB2PYg8xhyZPMk3K+ZQvkCsIduLw aRL9ewH/5eARa2vnf1vJYKmA4jZQpiUHHDeGZZojJF5FsJkg5D6ZXrpU0vGmImNl ZgvUFidmadpXOcYzGhBpxfdJiYOi9ghMrpHHumAuSXnf5HAXKbgxkJtlCZ0Pzj8D MBxSUE0cxLFEYpBS3umI1JDZ3pjil4yZxbPZAMpl0FLam99Kxu+T6fYOVptJFNkS CK7ZoDCkV1Dr4zU7G+3bOBL9+dflFAwGFZfLVp73syq8ZvhxzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgfUf7E7B+u+6kNcEZgPpPt4UB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJmNmEwMzUtYmMyZC0z OTJiLWIwNGQtYTIwNjU3Yzk5OTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJp1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKASzvUEB6B0QEdmFQYFzG4mqXEqFxHjMNKSB1PJRcrbrKfhU5u0nrlx S49M0uiV3ZMmigxk/0HHRxsD6ZOGaUQmkvoHN4qOPJTwZcL+KYDG0bn8MxNwAQBR fIi6+g9u9SmEtYvMmqCZwUBh49T5vFM8/+nwX5bBzA8tQ3vvpCfERqzKQAz+W0rk jr8Qak16HZ72FJumY1RSNFASlroZdT8FR+1bc65VAkvqlaGE7qlP7T6t0LBh7sHj Fyz9k8YUgSuxU6EtE/zsbmOGG6GHVva+IJmwcGVO8i9nPCFrCsSBDG1AIh5dl6Bp w9QhUGo38CTv4bGLySx4dIONWe+A5gk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:59 2025 by rpki-client