$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91eeeaea-e86b-3929-8076-ad42a7787a7c.roa File: 91eeeaea-e86b-3929-8076-ad42a7787a7c.roa (raw, json) Hash identifier: 0UVedN0Yi4ZOFqU/xG9HOPzLuTI8tKeLnMVhq/ayCiA= Subject key identifier: 6B:26:87:7B:21:14:00:74:18:81:C5:DA:B5:22:39:1C:17:90:E9:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B94BE12D93906A792A800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91eeeaea-e86b-3929-8076-ad42a7787a7c.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.196.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:94:be:12:d9:39:06:a7:92:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=4b48fcdf-789c-4fa1-a923-58290e04957f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:f5:09:ec:3b:d4:48:8b:b2:9a:6f:d4:04: 58:29:ce:9d:ee:50:33:09:86:ef:0d:33:3e:4d:38: 65:7b:cc:29:60:89:66:68:06:b4:15:5c:dd:6d:03: 4d:f5:41:88:bb:2c:0f:85:d8:f7:1d:9b:11:7e:1e: 5a:ee:6c:aa:1a:09:38:2d:ce:c8:9f:e6:f6:af:cb: ed:d5:5e:cc:21:ff:08:05:c1:76:d6:36:e2:1c:39: 6f:de:53:b0:9c:9b:bf:d7:17:60:32:03:c6:d8:56: 20:62:98:0f:2b:6a:6b:1e:df:9c:b4:29:d5:f2:e1: 3b:01:2a:2d:d0:ba:39:d0:dd:12:d0:77:6a:ab:0a: c3:96:84:22:99:4a:ea:d5:66:9e:7f:27:0a:41:e7: ee:44:72:6f:4b:20:ef:5e:e7:7f:0c:5b:02:c3:cf: 72:d0:f8:18:fe:88:a2:2e:7f:3d:1d:54:cd:53:ac: fd:f3:5f:7c:cc:0b:9e:2d:97:fe:8f:43:1b:0c:52: 25:7d:68:37:66:ea:14:ea:ce:84:1e:bd:95:59:f7: 2d:a6:39:1d:6a:ad:ed:02:74:c1:23:ed:d0:78:29: 8e:cc:7b:55:fb:1a:f1:91:f7:1f:4d:bc:71:92:f5: e4:68:36:1a:76:69:09:1f:ee:62:5e:7d:f1:02:da: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:26:87:7B:21:14:00:74:18:81:C5:DA:B5:22:39:1C:17:90:E9:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91eeeaea-e86b-3929-8076-ad42a7787a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6d:1b:b4:8e:3a:ff:8c:ef:44:df:00:1f:03:ba:80:bb:64: 6e:44:49:ec:29:5d:75:af:e7:eb:4b:59:94:cd:7b:bc:a4:8e: 34:1a:ee:f2:e0:07:d7:75:ea:c5:d6:9f:86:87:79:73:e8:8b: 04:66:5a:e5:fb:da:6b:cf:ca:d7:da:a5:78:f1:f6:68:f5:18: 5c:39:56:11:49:6a:c8:ed:c0:09:dd:66:66:65:59:01:41:ef: 6d:01:2c:e9:4e:47:40:bd:63:73:7f:4c:4d:0c:c7:9b:68:34: 97:6b:93:1b:af:eb:5c:95:da:51:bc:1c:1c:eb:22:d9:2b:db: 5f:cf:3c:b6:4b:dc:15:1d:e5:21:11:3d:dd:00:07:42:52:63: 92:64:3d:92:9c:b8:09:13:93:5c:de:54:a1:24:fa:37:d6:3f: 85:0f:4f:89:9d:71:88:61:60:22:28:43:84:07:2e:48:8b:70: 63:54:7b:fc:77:8e:92:bf:54:8a:29:f3:d7:75:e7:87:66:58: 99:26:54:66:af:4a:aa:d1:cb:fb:39:20:15:1a:1a:b1:fe:a6: 94:6f:dc:e1:14:d7:34:3c:74:86:4e:67:d6:40:28:79:80:25: be:36:e9:e3:b6:a3:cd:4e:29:c2:3d:91:62:ad:ba:c3:59:9a: d2:b2:9f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5S+Etk5BqeSqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NGI0OGZjZGYtNzg5Yy00ZmExLWE5MjMtNTgyOTBlMDQ5NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOr1Cew71EiLsppv1ARYKc6d7lAzCYbvDTM+ TThle8wpYIlmaAa0FVzdbQNN9UGIuywPhdj3HZsRfh5a7myqGgk4Lc7In+b2r8vt 1V7MIf8IBcF21jbiHDlv3lOwnJu/1xdgMgPG2FYgYpgPK2prHt+ctCnV8uE7ASot 0Lo50N0S0HdqqwrDloQimUrq1WaefycKQefuRHJvSyDvXud/DFsCw89y0PgY/oii Ln89HVTNU6z98198zAueLZf+j0MbDFIlfWg3ZuoU6s6EHr2VWfctpjkdaq3tAnTB I+3QeCmOzHtV+xrxkfcfTbxxkvXkaDYadmkJH+5iXn3xAtrMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsmh3shFAB0GIHF2rUiORwXkOnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFlZWVhZWEtZTg2Yi0z OTI5LTgwNzYtYWQ0MmE3Nzg3YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdtG7SOOv+M70TfAB8DuoC7ZG5ESewpXXWv5+tLWZTNe7ykjjQa7vLg B9d16sXWn4aHeXPoiwRmWuX72mvPytfapXjx9mj1GFw5VhFJasjtwAndZmZlWQFB 720BLOlOR0C9Y3N/TE0Mx5toNJdrkxuv61yV2lG8HBzrItkr21/PPLZL3BUd5SER Pd0AB0JSY5JkPZKcuAkTk1zeVKEk+jfWP4UPT4mdcYhhYCIoQ4QHLkiLcGNUe/x3 jpK/VIop89d154dmWJkmVGavSqrRy/s5IBUaGrH+ppRv3OEU1zQ8dIZOZ9ZAKHmA Jb426eO2o81OKcI9kWKtusNZmtKyn5I= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:59 2025 by rpki-client