$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca0af83-6f8b-3f88-b519-04d35eb5e3dd.roa File: 3ca0af83-6f8b-3f88-b519-04d35eb5e3dd.roa (raw, json) Hash identifier: dqvf+mcuyfQYj+slN1ytRiLXqdtOo2EQgq6BbEaspCU= Subject key identifier: 1C:DD:8C:26:FB:59:B1:46:00:7E:9D:05:12:FF:32:3C:8F:FE:9A:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8A60760A7EB2C8624240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca0af83-6f8b-3f88-b519-04d35eb5e3dd.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.154.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8a:60:76:0a:7e:b2:c8:62:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=87eb8a21-b438-48b4-999b-e919876cd2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:33:c9:d4:53:99:53:3c:25:71:ec:f6:d8: 17:85:6c:f5:b6:85:90:15:55:71:9b:e6:b7:4c:08: 08:24:e1:ae:b8:9a:bd:45:e3:29:a6:3d:37:c2:e1: 86:5b:69:75:3e:ca:f5:b6:c3:3b:94:55:72:86:2d: 18:24:93:3c:5b:eb:b6:19:69:e5:48:72:46:a8:a9: 18:28:d9:69:5d:20:f0:8f:ed:4b:5c:53:4f:0a:e9: bc:46:f0:55:3f:c6:2f:cd:d4:bd:c1:b5:26:d2:b8: 3b:47:66:5b:d3:1a:0b:68:5d:de:11:13:f8:d2:a4: b9:14:6e:f4:20:60:6c:d4:0c:8b:2a:06:d6:57:5c: a3:ba:31:4b:20:38:2d:cb:12:ad:46:37:09:1a:72: 72:98:bf:95:67:a0:fa:a1:ea:56:72:03:74:1c:3c: f2:cb:4f:3c:28:41:9d:3b:05:c9:97:e3:5f:8c:61: 3b:86:62:ce:00:6c:dc:6b:01:62:f2:0a:f6:2b:cc: d3:a4:47:ca:40:39:35:0e:32:4a:10:7d:1e:e0:d8: 31:61:62:18:16:cf:af:10:b1:14:c6:70:e9:18:15: cd:01:c3:86:7d:94:90:92:4f:40:34:e5:c3:88:26: 8a:f3:c9:4e:ca:c3:a7:1c:23:3d:6b:c5:83:02:f1: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DD:8C:26:FB:59:B1:46:00:7E:9D:05:12:FF:32:3C:8F:FE:9A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca0af83-6f8b-3f88-b519-04d35eb5e3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a1:0a:57:64:d3:62:83:1b:c2:75:8f:de:26:68:9c:15:9d: 48:6f:fb:96:a7:b0:bd:e9:68:1b:c4:9a:0a:14:ea:4b:f6:5b: 47:53:5d:d0:4a:77:71:92:c4:c5:ee:04:4b:c0:83:99:0f:78: 65:72:4c:4a:55:74:f8:7a:da:2d:72:b6:8d:fc:5b:8e:a5:15: 0a:5a:9b:2a:57:b1:1f:9c:e4:cb:b3:24:43:aa:8e:6d:14:c1: 24:d3:0e:8a:4b:c4:45:2a:2e:b5:6b:37:b7:69:fb:57:d7:e7: 69:e7:d0:d9:42:2f:64:7d:05:e7:3c:10:b1:22:93:a3:6d:91: 90:6f:3b:ad:3f:a0:54:66:27:6b:8d:5c:45:dd:18:09:c7:5c: 41:c3:71:76:be:cb:ad:34:08:bb:25:b3:94:b5:13:f5:ec:01: 3a:d8:78:c5:bc:28:77:e0:c0:03:06:63:da:46:45:a3:e2:aa: c3:ca:ae:26:fd:63:78:0f:7b:16:95:2e:91:5d:f7:d5:d8:85: 0b:31:00:4e:83:57:d5:71:d9:08:83:4d:38:0b:42:ce:ca:d2: 5b:ec:f1:d1:3b:bb:d7:3a:27:52:90:07:aa:60:73:2e:e7:f4: 63:a5:b9:1f:fd:47:92:9f:b8:32:f6:55:d3:f7:76:91:45:ca: 18:4f:9f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4pgdgp+sshiQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ODdlYjhhMjEtYjQzOC00OGI0LTk5OWItZTkxOTg3NmNkMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmwzydRTmVM8JXHs9tgXhWz1toWQFVVxm+a3 TAgIJOGuuJq9ReMppj03wuGGW2l1Psr1tsM7lFVyhi0YJJM8W+u2GWnlSHJGqKkY KNlpXSDwj+1LXFNPCum8RvBVP8YvzdS9wbUm0rg7R2Zb0xoLaF3eERP40qS5FG70 IGBs1AyLKgbWV1yjujFLIDgtyxKtRjcJGnJymL+VZ6D6oepWcgN0HDzyy088KEGd OwXJl+NfjGE7hmLOAGzcawFi8gr2K8zTpEfKQDk1DjJKEH0e4NgxYWIYFs+vELEU xnDpGBXNAcOGfZSQkk9ANOXDiCaK88lOysOnHCM9a8WDAvFY9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzdjCb7WbFGAH6dBRL/MjyP/pogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NhMGFmODMtNmY4Yi0z Zjg4LWI1MTktMDRkMzVlYjVlM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOhCldk02KDG8J1j94maJwVnUhv+5ansL3paBvEmgoU6kv2W0dTXdBK d3GSxMXuBEvAg5kPeGVyTEpVdPh62i1yto38W46lFQpamypXsR+c5MuzJEOqjm0U wSTTDopLxEUqLrVrN7dp+1fX52nn0NlCL2R9Bec8ELEik6NtkZBvO60/oFRmJ2uN XEXdGAnHXEHDcXa+y600CLsls5S1E/XsATrYeMW8KHfgwAMGY9pGRaPiqsPKrib9 Y3gPexaVLpFd99XYhQsxAE6DV9Vx2QiDTTgLQs7K0lvs8dE7u9c6J1KQB6pgcy7n 9GOluR/9R5KfuDL2VdP3dpFFyhhPn3c= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:49 2025 by rpki-client