$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/80857a9a-5062-355b-abd4-2e588a7bd2be.roa File: 80857a9a-5062-355b-abd4-2e588a7bd2be.roa (raw, json) Hash identifier: cSSmrgx5KYCi2v4yevbnxcXaBbXNqMrJ441bg4eVfJo= Subject key identifier: E6:67:A2:8F:F3:AC:CC:F5:40:84:2A:7C:D9:5F:7B:AD:17:4F:86:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8DF87263D8E4E083CE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/80857a9a-5062-355b-abd4-2e588a7bd2be.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.197.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8d:f8:72:63:d8:e4:e0:83:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=0d7c4706-df82-4c32-8d01-5672bce34105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:37:27:f9:3b:f2:2c:96:0d:0f:d2:c2:17: 3d:fa:45:af:15:03:e2:39:56:7b:eb:f5:88:1b:38: 2e:d0:6d:d4:0c:73:b7:9c:94:ef:27:71:73:f9:4b: a6:f5:b0:ac:73:6c:06:00:2b:6d:f3:59:87:c6:fb: 4c:8d:aa:5f:97:c9:25:8d:2d:c9:32:3a:6f:a0:0f: 5f:7a:8b:f9:85:1a:35:cf:25:c5:ca:09:44:71:34: 88:54:bf:e7:9e:a9:a7:c4:92:bd:d7:03:46:00:27: 6c:ff:b1:56:a3:af:78:6a:8f:db:31:2e:9a:ae:e1: a2:fe:92:cf:fa:95:5e:2d:03:b7:47:80:9f:e1:57: e2:78:cf:a3:21:ab:18:0a:30:c9:0e:25:22:8a:d9: 88:8c:ee:04:8d:dc:2a:27:bb:67:25:6d:3b:84:b1: c9:2e:4a:37:f1:f3:cd:41:4c:95:cb:05:8a:34:74: 4d:e9:45:e6:91:dd:a2:87:a7:34:4f:25:25:e4:f4: 89:69:63:d0:d3:30:1f:9d:6c:d5:02:0e:8b:6b:00: f2:f8:a9:d5:56:db:fc:40:2b:75:90:f2:e0:7d:73: 9f:ad:69:84:eb:47:94:f5:59:ff:f8:64:21:cc:50: 33:76:f0:8b:0b:1f:ae:e9:73:11:00:d7:36:c3:f0: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:67:A2:8F:F3:AC:CC:F5:40:84:2A:7C:D9:5F:7B:AD:17:4F:86:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/80857a9a-5062-355b-abd4-2e588a7bd2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9b:47:63:e8:dd:bb:bb:88:3d:cc:dd:c1:e8:f8:fb:95:11: 48:22:c9:8e:db:b9:5e:b3:0f:89:7b:51:17:6b:90:2a:34:36: 6b:82:47:bb:6f:27:0b:b3:de:51:0d:0a:de:db:1a:4d:b9:1f: d9:eb:60:57:11:12:75:f0:92:ef:bb:1b:ea:c6:ed:b7:c3:34: e2:b0:ac:c6:b6:a2:3f:61:d3:e1:5e:fe:c3:02:90:34:97:77: 17:80:7e:ba:e3:dd:13:ea:a9:a4:18:b3:20:1c:0a:02:c0:b1: d2:b6:dc:2c:8c:2e:07:ae:f5:68:d3:e4:dc:50:59:8d:39:81: 7c:c1:b2:6a:71:e6:4d:69:03:e7:07:17:b3:8b:4e:e8:79:70: 32:b7:0a:50:dd:42:bf:ec:61:ee:05:35:f9:77:da:c0:a1:87: 81:a7:50:f7:8b:41:c3:ef:05:76:3e:e3:77:b3:64:88:a6:8c: 1f:4f:d3:66:42:12:ab:10:78:95:81:d2:19:44:80:fc:8a:d7: 38:61:37:fc:8d:21:d1:4b:57:8f:1a:56:6e:23:a4:06:54:22: 98:07:ec:ec:65:19:3e:80:45:53:aa:c8:ec:27:d4:fe:ed:b3: 4e:63:13:92:45:7b:f6:b5:aa:27:05:5e:00:ce:6c:51:6f:bb: e2:5f:d7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e434cmPY5OCDzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MGQ3YzQ3MDYtZGY4Mi00YzMyLThkMDEtNTY3MmJjZTM0MTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/A3J/k78iyWDQ/Swhc9+kWvFQPiOVZ76/WI Gzgu0G3UDHO3nJTvJ3Fz+Uum9bCsc2wGACtt81mHxvtMjapfl8kljS3JMjpvoA9f eov5hRo1zyXFyglEcTSIVL/nnqmnxJK91wNGACds/7FWo694ao/bMS6aruGi/pLP +pVeLQO3R4Cf4VfieM+jIasYCjDJDiUiitmIjO4EjdwqJ7tnJW07hLHJLko38fPN QUyVywWKNHRN6UXmkd2ih6c0TyUl5PSJaWPQ0zAfnWzVAg6LawDy+KnVVtv8QCt1 kPLgfXOfrWmE60eU9Vn/+GQhzFAzdvCLCx+u6XMRANc2w/DNowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZnoo/zrMz1QIQqfNlfe60XT4YwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODA4NTdhOWEtNTA2Mi0z NTViLWFiZDQtMmU1ODhhN2JkMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEubR2Po3bu7iD3M3cHo+PuVEUgiyY7buV6zD4l7URdrkCo0NmuCR7tv Jwuz3lENCt7bGk25H9nrYFcREnXwku+7G+rG7bfDNOKwrMa2oj9h0+Fe/sMCkDSX dxeAfrrj3RPqqaQYsyAcCgLAsdK23CyMLgeu9WjT5NxQWY05gXzBsmpx5k1pA+cH F7OLTuh5cDK3ClDdQr/sYe4FNfl32sChh4GnUPeLQcPvBXY+43ezZIimjB9P02ZC EqsQeJWB0hlEgPyK1zhhN/yNIdFLV48aVm4jpAZUIpgH7OxlGT6ARVOqyOwn1P7t s05jE5JFe/a1qicFXgDObFFvu+Jf19c= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:17 2025 by rpki-client