$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86f2ecd8-57a6-3c18-bc13-77125411e74a.roa File: 86f2ecd8-57a6-3c18-bc13-77125411e74a.roa (raw, json) Hash identifier: v5Ghk/Of37zd1kNZz3Q4SKWDc0NzAyl6L6WXi1LUmCs= Subject key identifier: DA:1A:A2:E0:88:06:C4:F0:5C:DE:79:35:28:27:71:D7:B6:F7:A8:CB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B6A592CEA422FBACB0DC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86f2ecd8-57a6-3c18-bc13-77125411e74a.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6a:59:2c:ea:42:2f:ba:cb:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=e488c003-996d-4ee3-8475-a68ce6a15b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:05:57:11:ff:b6:14:de:a8:ab:2b:86:f2: 89:8e:a2:1d:93:40:e4:6c:d7:16:df:ad:5d:cb:8f: 13:00:f3:fe:ee:f7:c0:77:4e:ff:22:a6:63:2c:b5: d7:87:f9:d3:24:25:62:59:f8:a4:e0:e2:fd:7b:62: a0:6d:02:0c:34:af:57:49:5e:93:74:3e:9d:70:14: 19:94:66:3d:88:fa:67:24:e4:97:6d:ac:72:1e:d9: 86:b6:6e:4d:21:f4:ed:49:5b:37:91:fe:66:02:4d: 78:2f:02:f8:d9:2d:a7:51:b2:68:0a:c6:96:a0:5c: 63:5d:cf:bb:ad:76:55:3a:db:e3:c9:83:46:21:69: 32:a4:ae:2c:3a:d8:d6:a3:93:55:da:fe:ae:20:1b: 71:5b:b1:81:61:d9:28:f0:93:d3:4f:ab:ee:56:6f: 0d:39:34:06:dd:44:7f:e1:3c:0a:cf:6b:e5:fd:a4: d6:a9:54:cc:91:58:11:12:51:25:0a:3f:66:8f:a6: 59:72:2a:d1:e1:31:ad:65:7b:6e:18:b5:aa:d1:75: 9e:5a:1b:a2:3e:b4:b7:93:e7:de:87:67:64:96:a9: 25:ea:5c:30:8a:43:d5:d6:ae:f9:e4:57:87:2d:9d: 1f:c1:a4:ca:fd:ee:4a:e6:d1:8d:1e:a2:b7:0a:c9: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1A:A2:E0:88:06:C4:F0:5C:DE:79:35:28:27:71:D7:B6:F7:A8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86f2ecd8-57a6-3c18-bc13-77125411e74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e7:69:34:16:9e:d8:ed:36:c1:e3:da:ab:21:88:a1:78:dc: a4:fb:a7:a7:b0:ce:41:33:8e:2f:41:f1:3c:41:db:4f:0d:3e: f7:80:80:2d:f9:17:49:44:20:03:0a:c5:45:bd:16:4e:e9:48: 67:93:4f:42:51:01:d2:83:41:ca:0a:1e:e9:2e:b4:82:d3:47: 4a:b5:99:09:05:b5:73:c3:ac:92:2d:6f:55:f2:e9:df:e3:81: f6:bf:d8:46:64:fc:60:3c:52:39:36:c8:a1:8b:11:85:c6:98: 49:36:fc:69:12:74:ea:11:f2:cb:2c:bd:8b:ee:fc:81:75:8d: 0b:5a:ea:00:79:06:41:03:5e:96:71:d9:17:53:7c:c0:1c:2e: e3:0a:e4:04:9c:80:b6:c3:8d:69:c5:15:dc:cd:ef:73:b4:a6: 0b:17:e5:b1:15:86:3c:8b:1a:d7:0e:a3:99:c2:bc:62:a8:43: 2e:fa:c4:99:c3:7b:7f:3b:bc:eb:dd:26:54:5f:d8:12:e7:47: 42:d4:d7:65:fe:9f:38:c7:1a:08:fd:a3:6b:61:35:89:e6:16: 2c:ef:64:d5:f4:b7:6d:5e:0e:d5:67:16:f7:33:8a:c9:7a:05: 00:2b:f4:4d:f0:b9:d7:8f:b0:ed:7d:5b:73:85:a3:b5:1b:51: 83:a1:89:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2pZLOpCL7rLDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTQ4OGMwMDMtOTk2ZC00ZWUzLTg0NzUtYTY4Y2U2YTE1YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvkFVxH/thTeqKsrhvKJjqIdk0DkbNcW361d y48TAPP+7vfAd07/IqZjLLXXh/nTJCViWfik4OL9e2KgbQIMNK9XSV6TdD6dcBQZ lGY9iPpnJOSXbaxyHtmGtm5NIfTtSVs3kf5mAk14LwL42S2nUbJoCsaWoFxjXc+7 rXZVOtvjyYNGIWkypK4sOtjWo5NV2v6uIBtxW7GBYdko8JPTT6vuVm8NOTQG3UR/ 4TwKz2vl/aTWqVTMkVgRElElCj9mj6ZZcirR4TGtZXtuGLWq0XWeWhuiPrS3k+fe h2dklqkl6lwwikPV1q755FeHLZ0fwaTK/e5K5tGNHqK3Csm+kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoaouCIBsTwXN55NSgncde296jLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZmMmVjZDgtNTdhNi0z YzE4LWJjMTMtNzcxMjU0MTFlNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXnaTQWntjtNsHj2qshiKF43KT7p6ewzkEzji9B8TxB208NPveAgC35 F0lEIAMKxUW9Fk7pSGeTT0JRAdKDQcoKHukutILTR0q1mQkFtXPDrJItb1Xy6d/j gfa/2EZk/GA8Ujk2yKGLEYXGmEk2/GkSdOoR8sssvYvu/IF1jQta6gB5BkEDXpZx 2RdTfMAcLuMK5AScgLbDjWnFFdzN73O0pgsX5bEVhjyLGtcOo5nCvGKoQy76xJnD e387vOvdJlRf2BLnR0LU12X+nzjHGgj9o2thNYnmFizvZNX0t21eDtVnFvczisl6 BQAr9E3wudePsO19W3OFo7UbUYOhiRE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:27 2025 by rpki-client