$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bbff625-59bd-3fdc-93e9-962695133b5b.roa File: 7bbff625-59bd-3fdc-93e9-962695133b5b.roa (raw, json) Hash identifier: 3W5hP4qIUnguxUPqWKvc/kxNbsvRClAgWgknhXDOYyg= Subject key identifier: 89:98:45:F5:4D:FE:80:B4:F7:E2:E6:EB:11:DC:AF:1F:B0:02:39:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8C6B9FEE099830E42180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bbff625-59bd-3fdc-93e9-962695133b5b.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.196.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8c:6b:9f:ee:09:98:30:e4:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=4f5d9dc2-8aeb-4946-b049-3011987ef0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8e:93:e0:c9:7d:00:7b:b8:51:62:bd:0e:a2: f0:10:ae:36:ee:02:e8:39:df:26:75:de:9c:dc:d8: f7:d5:be:3e:fa:67:e3:96:31:b1:fa:b0:55:3e:7a: a3:62:9b:96:99:09:9c:09:fc:11:31:f5:ec:6c:44: b3:13:2d:68:31:e3:e5:82:60:5e:04:09:e5:38:8b: 3b:e7:62:fc:8f:94:b7:ae:76:0c:6e:c7:3c:4f:0a: 87:15:c1:ee:21:ff:0a:7e:5a:21:62:7d:0d:57:87: 01:bc:56:97:b0:7a:63:52:77:02:9e:50:09:8a:28: 26:b8:43:c1:de:44:3b:e3:d0:a2:36:33:8d:69:8e: 9c:7b:2b:fe:93:95:6e:75:21:e9:c9:16:df:91:12: 47:2b:cb:0b:c9:e6:66:d5:fa:ad:2a:00:ab:37:cc: 8c:95:c0:1e:29:4e:b0:b8:7f:17:fb:07:6b:11:76: c3:4d:0f:90:42:68:14:13:42:2e:0a:39:b6:68:44: 8e:53:5e:88:a5:27:db:51:b8:1d:b8:eb:57:75:3e: 09:ab:cb:ff:13:24:fd:09:bc:5b:d5:65:e7:a7:55: ef:72:cd:ff:06:e8:e0:42:1f:6b:4d:16:27:ba:2d: 89:cf:18:05:c6:13:ab:40:6c:2f:dc:a4:80:71:8c: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:98:45:F5:4D:FE:80:B4:F7:E2:E6:EB:11:DC:AF:1F:B0:02:39:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7bbff625-59bd-3fdc-93e9-962695133b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d1:81:89:1f:82:7f:a4:ea:e9:da:63:01:46:f6:9e:8a:2e: 6a:71:19:96:15:f5:ce:92:ea:89:8c:51:dc:3a:b5:8c:32:d1: 1f:22:26:a3:67:b9:f0:14:c0:f4:d5:42:4f:18:62:f2:bf:d2: 8b:9b:c9:e2:63:95:ef:b4:9a:b1:1d:25:59:b6:70:29:03:98: 4d:9c:50:14:82:00:cd:fa:df:41:61:cd:51:ef:0f:bb:ab:d7: 4a:91:49:18:1e:63:0a:61:56:c7:e1:de:06:17:c8:3d:3e:08: 2e:cf:68:1f:5d:98:36:66:03:3c:a7:23:c0:31:f5:71:01:53: 8a:45:59:4f:75:ef:b1:fd:e9:ed:7f:40:e9:1a:de:65:db:26: 79:d2:b0:f9:29:2f:9a:d5:80:56:f8:8f:91:2e:e7:4f:34:f5: 17:bf:65:fd:46:37:d9:7b:ca:f8:07:68:af:9d:79:e8:f5:f8: 2b:73:ba:24:ab:db:15:69:4e:4b:80:c5:99:51:2b:56:a6:8f: a1:69:d4:2b:49:2c:94:b0:48:9b:2e:97:14:ba:97:eb:aa:d6: d4:9b:30:07:c3:9a:7c:bc:22:f7:7c:58:cb:ce:1e:e8:ba:2d: e7:f8:03:d8:68:9a:af:71:37:27:24:1e:a6:d2:2c:97:eb:b1: 40:cb:b8:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4xrn+4JmDDkIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NGY1ZDlkYzItOGFlYi00OTQ2LWIwNDktMzAxMTk4N2VmMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY6T4Ml9AHu4UWK9DqLwEK427gLoOd8mdd6c 3Nj31b4++mfjljGx+rBVPnqjYpuWmQmcCfwRMfXsbESzEy1oMePlgmBeBAnlOIs7 52L8j5S3rnYMbsc8TwqHFcHuIf8KflohYn0NV4cBvFaXsHpjUncCnlAJiigmuEPB 3kQ749CiNjONaY6ceyv+k5VudSHpyRbfkRJHK8sLyeZm1fqtKgCrN8yMlcAeKU6w uH8X+wdrEXbDTQ+QQmgUE0IuCjm2aESOU16IpSfbUbgduOtXdT4Jq8v/EyT9Cbxb 1WXnp1Xvcs3/BujgQh9rTRYnui2JzxgFxhOrQGwv3KSAcYxAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImYRfVN/oC09+Lm6xHcrx+wAjnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2JiZmY2MjUtNTliZC0z ZmRjLTkzZTktOTYyNjk1MTMzYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjRgYkfgn+k6unaYwFG9p6KLmpxGZYV9c6S6omMUdw6tYwy0R8iJqNn ufAUwPTVQk8YYvK/0oubyeJjle+0mrEdJVm2cCkDmE2cUBSCAM3630FhzVHvD7ur 10qRSRgeYwphVsfh3gYXyD0+CC7PaB9dmDZmAzynI8Ax9XEBU4pFWU9177H96e1/ QOka3mXbJnnSsPkpL5rVgFb4j5Eu50809Re/Zf1GN9l7yvgHaK+deej1+CtzuiSr 2xVpTkuAxZlRK1amj6Fp1CtJLJSwSJsulxS6l+uq1tSbMAfDmny8Ivd8WMvOHui6 Lef4A9homq9xNyckHqbSLJfrsUDLuOM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:29:05 2025 by rpki-client