$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa File: 4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa (raw, json) Hash identifier: Rz9hFvsx+V8JH8fYvhMRcT/dgj9tQtBQuPtYyMIk7yM= Subject key identifier: 05:67:21:19:84:D1:82:95:EE:EC:23:81:9C:C2:9D:D4:F8:05:5E:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B71A911A00979CFBF0680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.199.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:71:a9:11:a0:09:79:cf:bf:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=2b97ef0a-bec1-4d3f-817e-8bb205c3c9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:4b:6a:c3:47:54:9c:92:7b:17:55:8c:33: c0:76:9a:c5:07:7f:15:53:ae:e3:fa:2b:07:63:9e: 1d:8a:49:b3:24:cc:08:62:95:d4:fa:5e:68:f8:f5: 99:03:53:2c:ba:d9:18:23:4f:7e:16:a4:6b:49:fa: 88:11:43:f0:55:d2:36:77:21:1a:a9:20:56:bb:6c: cb:b1:d6:e3:a0:11:59:aa:42:a8:9b:cf:04:0e:08: 63:72:60:50:79:99:b9:ac:f9:a6:91:8a:b1:86:71: e3:d8:a8:16:dd:8d:4f:f1:b7:29:b8:3f:ee:12:53: c2:58:41:93:c3:79:94:cd:8c:4f:96:91:aa:63:d0: c1:bf:ba:d2:7b:ad:5d:95:05:41:5e:9a:02:e3:78: b3:d5:d5:15:25:62:ba:93:49:a3:08:fc:a2:87:1f: ef:67:b8:21:0f:87:1a:bf:10:10:67:7f:59:1d:ac: 0f:3f:be:15:fa:5f:49:dc:a9:1b:7a:7c:40:ed:fe: 3d:d5:91:d7:e3:e6:68:84:5b:7d:e7:59:20:27:db: 13:16:20:6a:6f:5a:9b:4d:a6:ed:5c:ec:df:04:f5: b5:12:07:24:70:58:60:1e:a7:98:80:0e:34:a3:a2: 48:62:85:e9:b9:36:e3:6f:b9:7e:f2:36:05:d3:be: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:67:21:19:84:D1:82:95:EE:EC:23:81:9C:C2:9D:D4:F8:05:5E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8c:8f:f2:8a:4b:8d:26:14:b9:3b:18:48:de:ba:ab:5a:e7: d0:3b:a9:26:08:0c:82:6f:27:39:ae:8c:96:a3:11:9a:31:e9: 02:9b:ef:b1:89:e4:69:ae:9a:e5:fd:13:64:72:a1:79:8a:5f: ea:38:2c:4e:86:ef:d1:22:66:cb:c3:c0:90:9d:12:0b:4a:4c: b9:cb:43:ce:7d:32:d5:0b:ef:ab:57:cb:ff:01:b9:a4:60:3b: 43:10:5d:d1:a3:b8:2b:a1:89:8f:d0:86:90:bd:b5:0c:50:b5: be:75:08:04:34:b0:7a:50:3e:aa:5b:ab:1b:fe:8d:de:84:9f: 50:c2:90:16:42:77:9d:80:f7:4b:9a:c3:20:f5:37:82:a4:0a: 42:3a:42:39:1d:7f:b4:77:e8:2b:8d:27:05:85:28:51:fc:f0: b2:90:3a:42:77:d2:b7:2c:7c:67:bd:1b:77:d1:08:94:fd:15: 73:b1:9d:a9:c3:90:d4:dd:52:bb:83:f3:96:ca:c3:19:54:9d: ef:f6:aa:bc:d4:d2:2f:0c:91:a0:7a:a9:7c:35:9a:74:63:be: ff:ee:b2:ac:19:bb:c9:a8:1c:5e:0f:b3:59:76:b1:0f:af:c7: dd:bc:bf:07:24:80:f7:ec:16:fe:64:6c:32:4e:24:f1:05:8b: 8a:6e:c0:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3GpEaAJec+/BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MmI5N2VmMGEtYmVjMS00ZDNmLTgxN2UtOGJiMjA1YzNjOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4lLasNHVJySexdVjDPAdprFB38VU67j+isH Y54dikmzJMwIYpXU+l5o+PWZA1MsutkYI09+FqRrSfqIEUPwVdI2dyEaqSBWu2zL sdbjoBFZqkKom88EDghjcmBQeZm5rPmmkYqxhnHj2KgW3Y1P8bcpuD/uElPCWEGT w3mUzYxPlpGqY9DBv7rSe61dlQVBXpoC43iz1dUVJWK6k0mjCPyihx/vZ7ghD4ca vxAQZ39ZHawPP74V+l9J3KkbenxA7f491ZHX4+ZohFt951kgJ9sTFiBqb1qbTabt XOzfBPW1EgckcFhgHqeYgA40o6JIYoXpuTbjb7l+8jYF075NYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVnIRmE0YKV7uwjgZzCndT4BV6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGMwOWJhNGEtNDE0MS0z ZGRmLTkxZmQtY2Y0MzhjMjk3MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaMj/KKS40mFLk7GEjeuqta59A7qSYIDIJvJzmujJajEZox6QKb77GJ 5GmumuX9E2RyoXmKX+o4LE6G79EiZsvDwJCdEgtKTLnLQ859MtUL76tXy/8BuaRg O0MQXdGjuCuhiY/QhpC9tQxQtb51CAQ0sHpQPqpbqxv+jd6En1DCkBZCd52A90ua wyD1N4KkCkI6Qjkdf7R36CuNJwWFKFH88LKQOkJ30rcsfGe9G3fRCJT9FXOxnanD kNTdUruD85bKwxlUne/2qrzU0i8MkaB6qXw1mnRjvv/usqwZu8moHF4Ps1l2sQ+v x928vwckgPfsFv5kbDJOJPEFi4puwL4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:03 2025 by rpki-client