$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa File: 5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa (raw, json) Hash identifier: giKKvkUK6Kp3oW+XV+kmQU/VcIqW1qP86DgkMV4dDuA= Subject key identifier: 88:9F:4A:74:54:F2:9E:F1:40:8C:09:DF:2C:A1:E4:DA:5F:A4:ED:3A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B66F3A4761E25B53ED300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.196.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:66:f3:a4:76:1e:25:b5:3e:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=3672d228-6329-4da9-8e37-60f9e59767df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3e:53:a4:90:ab:ed:21:ca:01:85:54:1c:c2: bc:9f:74:5d:6f:65:a1:46:fc:81:5f:e8:4d:a3:46: ef:80:bf:67:28:ca:2e:58:c7:96:f5:24:3d:c7:4a: 36:94:30:d6:ad:6c:1e:7e:37:66:19:69:9e:25:00: d9:49:41:0d:31:5d:ea:c1:1c:28:9c:72:35:b5:d1: 6c:c8:77:86:7e:3f:5a:54:c3:1c:0a:cb:4b:0d:d0: f4:bf:96:34:16:63:03:26:5f:a3:d9:56:af:33:fa: c2:57:91:40:17:84:65:3f:cb:7f:9a:81:ef:6e:3d: 53:bf:d4:52:75:ce:df:67:3b:37:97:02:12:f3:50: b2:fd:b7:f9:90:3f:eb:cd:54:e0:11:c0:90:87:42: bc:fa:5c:29:61:00:b6:a7:63:59:7c:90:89:c1:ca: 8c:10:2c:15:d5:a0:69:07:0b:e5:ad:e0:3a:34:ab: 8b:b7:bd:4a:50:20:4c:4e:b1:2c:df:b5:27:d5:c0: ed:5d:70:c0:3d:0c:75:ef:d4:4d:da:e8:47:8f:19: 07:c2:f5:08:98:65:d7:35:ff:b4:a2:54:84:f8:64: 3e:4a:1e:27:c3:e5:44:da:7a:a5:c5:24:67:9e:8a: 3d:3c:44:a4:e7:79:34:d3:b1:f5:a9:dd:2b:61:8b: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9F:4A:74:54:F2:9E:F1:40:8C:09:DF:2C:A1:E4:DA:5F:A4:ED:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a0:5e:62:f2:c2:ba:b2:a0:28:3f:80:0c:9b:cc:65:b3:9b: 22:dc:58:bd:8f:a3:f4:25:5a:e6:72:82:fd:50:be:b5:ae:53: 0c:65:ca:13:06:87:ec:d9:67:1e:42:47:87:74:9d:68:13:a3: 4c:61:e7:8f:56:25:cc:c9:1d:eb:b7:a2:0b:72:f5:a5:44:3a: 95:b4:04:de:4e:97:f2:d3:a7:76:57:c6:05:d3:61:96:e8:ca: 97:89:31:b5:5a:bc:73:0d:41:cf:7a:4b:79:8e:00:09:6a:01: 68:41:3a:3d:3a:35:10:ea:4f:65:7a:21:44:1f:05:82:0e:cb: 2d:a2:f1:93:e6:9c:b6:b7:4a:ba:be:9d:6b:c6:66:57:7c:a9: 71:23:6d:b5:33:8a:71:2a:23:82:59:82:d6:06:5f:ec:42:c8: f8:75:db:44:bf:ba:81:55:55:85:f2:19:66:d9:06:66:82:50: c2:99:8f:9b:cf:8c:e1:92:97:de:fb:6e:80:60:80:6e:e5:cf: e5:1d:38:f8:ae:cb:5b:2b:cd:45:46:7b:66:e9:f8:38:8f:22: 6e:6c:b5:d2:de:73:18:ea:7b:66:0a:e3:86:69:03:80:d5:6b: d9:a6:04:59:4d:42:ea:d8:97:4d:95:71:0c:44:65:cc:57:9f: 2a:8e:46:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2bzpHYeJbU+0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MzY3MmQyMjgtNjMyOS00ZGE5LThlMzctNjBmOWU1OTc2N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z5TpJCr7SHKAYVUHMK8n3Rdb2WhRvyBX+hN o0bvgL9nKMouWMeW9SQ9x0o2lDDWrWwefjdmGWmeJQDZSUENMV3qwRwonHI1tdFs yHeGfj9aVMMcCstLDdD0v5Y0FmMDJl+j2VavM/rCV5FAF4RlP8t/moHvbj1Tv9RS dc7fZzs3lwIS81Cy/bf5kD/rzVTgEcCQh0K8+lwpYQC2p2NZfJCJwcqMECwV1aBp BwvlreA6NKuLt71KUCBMTrEs37Un1cDtXXDAPQx179RN2uhHjxkHwvUImGXXNf+0 olSE+GQ+Sh4nw+VE2nqlxSRnnoo9PESk53k007H1qd0rYYs99wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIifSnRU8p7xQIwJ3yyh5NpfpO06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFiZDljOWQtMDhlMy0z OWU0LWI4ZDItMzBkYzRkNDE1MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHigXmLywrqyoCg/gAybzGWzmyLcWL2Po/QlWuZygv1QvrWuUwxlyhMG h+zZZx5CR4d0nWgTo0xh549WJczJHeu3ogty9aVEOpW0BN5Ol/LTp3ZXxgXTYZbo ypeJMbVavHMNQc96S3mOAAlqAWhBOj06NRDqT2V6IUQfBYIOyy2i8ZPmnLa3Srq+ nWvGZld8qXEjbbUzinEqI4JZgtYGX+xCyPh120S/uoFVVYXyGWbZBmaCUMKZj5vP jOGSl977boBggG7lz+UdOPiuy1srzUVGe2bp+DiPIm5stdLecxjqe2YK44ZpA4DV a9mmBFlNQurYl02VcQxEZcxXnyqORlI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:41 2025 by rpki-client