$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432a618a-b8cb-3d36-8340-a7429115b0d8.roa File: 432a618a-b8cb-3d36-8340-a7429115b0d8.roa (raw, json) Hash identifier: ZTy40amMILZO6Tc9vHxznT6tsnJG+9O0maDBkDsr1fY= Subject key identifier: F3:C4:48:F0:74:58:0E:9C:66:14:68:D7:70:E0:7F:3F:C2:7D:78:7E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B72FA4498FB9E16F36900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432a618a-b8cb-3d36-8340-a7429115b0d8.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.199.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:72:fa:44:98:fb:9e:16:f3:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=1e32b871-0245-4bd3-a2ec-968452b08e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b7:e5:54:c3:a5:f7:ad:4c:f7:54:f0:9c:58: 52:17:26:9b:07:43:07:ad:30:7a:c1:00:b7:f3:ef: 2c:d3:b8:91:d2:c4:3c:ae:d1:d1:c7:96:32:2d:c6: 7c:89:ba:ff:57:a6:3d:f7:ca:19:68:2d:79:39:a4: 51:77:6f:5b:bd:40:4f:68:48:c8:8d:30:91:25:f5: 03:13:76:1d:99:f9:42:4d:31:a2:0f:0d:29:7b:4d: 3d:93:0d:31:da:12:79:73:be:bb:da:01:bc:a2:ea: a8:49:ac:c9:67:05:56:d2:7d:e7:94:e5:c1:9b:95: 24:e3:e0:e4:6a:04:0d:e2:e9:45:0b:66:6c:8e:0a: 27:3d:09:ff:1f:87:53:9a:43:93:95:12:79:66:1e: 83:1d:86:48:cf:68:4f:92:d6:68:ab:d7:6d:56:9a: bb:18:23:54:48:b7:e2:a8:7d:64:cb:a5:5d:21:f2: b7:25:0d:8a:18:ce:cc:c0:c6:5e:20:c0:3f:11:e2: 79:23:76:c0:de:43:97:29:f1:83:c9:95:48:4d:c8: bf:77:10:1e:b8:66:b4:a8:00:e0:f1:38:70:c9:34: 4d:36:e1:41:65:37:ce:68:a5:1a:14:57:76:10:72: 6a:e2:ee:8f:16:ca:39:c1:a8:6c:c2:bd:77:dc:6b: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C4:48:F0:74:58:0E:9C:66:14:68:D7:70:E0:7F:3F:C2:7D:78:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432a618a-b8cb-3d36-8340-a7429115b0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:67:eb:73:77:41:d3:5f:32:91:7f:5c:1c:3e:58:e0:55:5a: 82:55:e3:b8:19:d2:56:55:2b:b1:1a:bb:a3:13:a9:c7:6b:52: ca:71:1f:00:92:b4:f0:35:d3:a5:e8:b7:77:de:e9:38:5b:8e: 40:d8:af:b6:76:3a:24:a3:89:ae:39:05:88:83:30:4e:e5:e3: 76:9e:a4:64:d1:02:af:34:c1:be:ba:26:90:94:20:94:cf:e1: fe:b2:11:9c:cd:5a:8c:72:d1:24:36:fb:c2:58:9b:c1:14:65: c6:d4:6d:a1:a3:9a:7b:b6:6b:d7:f1:2a:2f:8e:9e:7c:d9:60: 13:b9:49:d4:d2:e0:73:d1:b7:34:d9:6a:b5:07:db:1a:ec:ab: 33:37:06:21:2b:38:e8:6b:6b:23:11:f1:91:99:10:4d:a1:70: a5:54:b1:98:aa:b4:1f:13:d2:c2:7f:f7:91:3b:e1:50:50:dd: 8e:47:2c:55:90:22:c9:df:84:12:52:25:ea:45:4a:8e:22:0e: 55:72:f7:51:a9:b5:86:28:59:8b:94:ad:05:a5:0d:a0:3c:80: 4e:30:80:54:4b:20:65:fe:ce:04:46:7a:f2:b5:88:ed:83:f5: 68:96:71:45:04:4b:72:a0:32:65:34:e9:cd:f6:e3:b3:dd:29: 3b:2d:10:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3L6RJj7nhbzaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MWUzMmI4NzEtMDI0NS00YmQzLWEyZWMtOTY4NDUyYjA4ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87flVMOl961M91TwnFhSFyabB0MHrTB6wQC3 8+8s07iR0sQ8rtHRx5YyLcZ8ibr/V6Y998oZaC15OaRRd29bvUBPaEjIjTCRJfUD E3YdmflCTTGiDw0pe009kw0x2hJ5c7672gG8ouqoSazJZwVW0n3nlOXBm5Uk4+Dk agQN4ulFC2ZsjgonPQn/H4dTmkOTlRJ5Zh6DHYZIz2hPktZoq9dtVpq7GCNUSLfi qH1ky6VdIfK3JQ2KGM7MwMZeIMA/EeJ5I3bA3kOXKfGDyZVITci/dxAeuGa0qADg 8ThwyTRNNuFBZTfOaKUaFFd2EHJq4u6PFso5wahswr133GuyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPESPB0WA6cZhRo13Dgfz/CfXh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDMyYTYxOGEtYjhjYi0z ZDM2LTgzNDAtYTc0MjkxMTViMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1n63N3QdNfMpF/XBw+WOBVWoJV47gZ0lZVK7Eau6MTqcdrUspxHwCS tPA106Xot3fe6ThbjkDYr7Z2OiSjia45BYiDME7l43aepGTRAq80wb66JpCUIJTP 4f6yEZzNWoxy0SQ2+8JYm8EUZcbUbaGjmnu2a9fxKi+OnnzZYBO5SdTS4HPRtzTZ arUH2xrsqzM3BiErOOhrayMR8ZGZEE2hcKVUsZiqtB8T0sJ/95E74VBQ3Y5HLFWQ IsnfhBJSJepFSo4iDlVy91GptYYoWYuUrQWlDaA8gE4wgFRLIGX+zgRGevK1iO2D 9WiWcUUES3KgMmU06c3247PdKTstEKY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:08 2025 by rpki-client