$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925e21c5-22e7-3114-9a25-9e0507c8972f.roa File: 925e21c5-22e7-3114-9a25-9e0507c8972f.roa (raw, json) Hash identifier: 15S1HB8k8QtSm08LkldgYkj5ErBThThhxKJaTkSbSQk= Subject key identifier: 8E:A3:08:75:DE:75:91:2B:41:5B:70:C2:BD:99:E5:1B:FF:65:97:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8A1A0292257DA1633000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925e21c5-22e7-3114-9a25-9e0507c8972f.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.154.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8a:1a:02:92:25:7d:a1:63:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=e9b3fe8e-9d95-4b1a-9b7d-6e1d13db649b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:43:c2:16:33:96:99:5c:b2:13:ef:7e:3a: c5:57:24:08:27:fb:70:9b:e1:df:86:0b:43:80:b5: 56:ef:64:c4:8d:5d:ab:41:58:1e:13:76:f4:c6:80: ce:6d:71:44:0a:f9:87:74:6e:33:21:7c:d5:d0:c1: bb:f9:15:02:ee:99:df:34:8f:20:3a:a9:69:68:1a: 3b:eb:3f:d9:58:ae:e1:9a:9c:f9:c1:0e:17:cb:18: 6d:3e:c1:e8:03:a3:ce:6e:34:e5:6e:6f:66:58:0b: c6:63:f3:8f:5d:f9:c5:b0:5a:c8:32:b9:4d:ad:91: 79:e9:48:8f:f9:36:77:e7:39:ee:ca:4c:41:70:18: 53:41:9e:4e:2e:ba:41:f4:a7:db:ff:67:6a:df:58: f9:91:ea:6e:34:a5:7f:84:8d:aa:ef:7f:ab:55:18: a4:eb:c2:53:84:d4:f5:88:ad:26:f8:41:51:9a:ca: 89:fb:19:28:b6:5e:bd:b4:f0:4c:be:fd:16:4a:de: 24:c0:6a:17:48:bd:df:87:f2:37:9a:7c:d3:1e:07: 5b:a6:fc:53:9b:7f:40:0c:20:08:b8:38:d7:8f:06: 54:4c:1f:cf:06:1b:83:a1:b2:0f:56:4e:35:2a:bb: dd:06:a7:d9:01:34:7e:2b:bd:88:3e:91:9f:63:59: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A3:08:75:DE:75:91:2B:41:5B:70:C2:BD:99:E5:1B:FF:65:97:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925e21c5-22e7-3114-9a25-9e0507c8972f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:50:1b:70:7c:43:87:a6:96:75:6e:6e:c6:76:2a:04:60:eb: e9:b0:6a:cc:5f:d7:eb:13:37:1a:6c:7f:4a:d8:3e:e6:f6:48: 55:0e:f1:09:92:d8:91:f1:43:5c:39:06:b5:1a:89:3b:7b:9c: 87:3c:7f:b9:18:6f:2f:af:8d:a0:89:71:30:4a:7f:97:a1:0e: e0:4d:a6:5d:c4:99:d7:37:b4:58:f3:a4:1e:7a:a7:a4:56:37: bc:ed:24:85:a3:27:ee:ff:9b:c6:e7:d5:51:5b:ed:d0:78:87: 8c:b7:d1:ee:5f:06:74:19:4a:70:65:fb:81:cb:e5:76:1d:ad: e5:a9:90:01:5c:c5:c7:2d:ae:cb:c3:c6:6a:f9:89:57:34:57: 86:e4:a8:d2:a5:a4:3c:86:8b:0f:07:bd:db:5b:04:a4:fe:c6: 30:f5:fb:a7:79:b5:3c:12:fe:38:f4:e3:0c:8f:df:2b:cd:96: ab:78:41:66:a0:7f:79:9b:08:08:e4:7a:5f:eb:1f:ae:c6:80: f0:77:47:78:45:91:a5:0a:b9:6c:3a:55:00:ae:11:50:fa:c4: 24:a5:02:58:11:47:cc:88:3d:f4:fd:6c:0a:36:7e:cc:8c:a2: 50:c6:13:47:d1:a9:32:5e:ea:ac:a3:25:02:de:45:09:dc:78: c7:49:08:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4oaApIlfaFjMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTliM2ZlOGUtOWQ5NS00YjFhLTliN2QtNmUxZDEzZGI2NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHlDwhYzlplcshPvfjrFVyQIJ/twm+HfhgtD gLVW72TEjV2rQVgeE3b0xoDObXFECvmHdG4zIXzV0MG7+RUC7pnfNI8gOqlpaBo7 6z/ZWK7hmpz5wQ4XyxhtPsHoA6PObjTlbm9mWAvGY/OPXfnFsFrIMrlNrZF56UiP +TZ35znuykxBcBhTQZ5OLrpB9Kfb/2dq31j5kepuNKV/hI2q73+rVRik68JThNT1 iK0m+EFRmsqJ+xkotl69tPBMvv0WSt4kwGoXSL3fh/I3mnzTHgdbpvxTm39ADCAI uDjXjwZUTB/PBhuDobIPVk41KrvdBqfZATR+K72IPpGfY1lpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6jCHXedZErQVtwwr2Z5Rv/ZZdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTI1ZTIxYzUtMjJlNy0z MTE0LTlhMjUtOWUwNTA3Yzg5NzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARQG3B8Q4emlnVubsZ2KgRg6+mwasxf1+sTNxpsf0rYPub2SFUO8QmS 2JHxQ1w5BrUaiTt7nIc8f7kYby+vjaCJcTBKf5ehDuBNpl3Emdc3tFjzpB56p6RW N7ztJIWjJ+7/m8bn1VFb7dB4h4y30e5fBnQZSnBl+4HL5XYdreWpkAFcxcctrsvD xmr5iVc0V4bkqNKlpDyGiw8HvdtbBKT+xjD1+6d5tTwS/jj04wyP3yvNlqt4QWag f3mbCAjkel/rH67GgPB3R3hFkaUKuWw6VQCuEVD6xCSlAlgRR8yIPfT9bAo2fsyM olDGE0fRqTJe6qyjJQLeRQnceMdJCGU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:02 2025 by rpki-client