$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a633a52b-4722-3a17-b72e-53642c0cf1dd.roa File: a633a52b-4722-3a17-b72e-53642c0cf1dd.roa (raw, json) Hash identifier: yTpTO9nN4DlJtcL+9rgHTgbK7b4AZfF49mG71jhw6n8= Subject key identifier: 93:FF:BA:C5:4A:C8:B5:95:A9:93:F2:97:9F:93:FD:98:96:E3:92:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B64EB3B0A9918704EA8C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a633a52b-4722-3a17-b72e-53642c0cf1dd.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.196.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:64:eb:3b:0a:99:18:70:4e:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=7176fd3c-9272-48fb-81ce-4e4c045a928c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:4a:b8:26:90:0d:9d:6e:38:be:0f:5d:26: 04:42:04:26:64:ee:43:ca:2f:45:43:03:81:eb:86: 6c:d8:14:0b:85:b9:46:61:e1:61:ab:64:15:a2:1d: 7f:2e:ed:9d:88:e5:e2:39:62:6d:27:ea:30:ab:5b: 42:6d:4f:d2:03:13:4b:74:e9:f5:51:05:29:04:97: c8:aa:10:f0:68:ad:d3:66:d1:40:6e:7c:b5:c5:05: bc:7a:de:69:87:ad:68:1c:4f:c9:41:ab:3e:e0:eb: 30:19:7c:71:df:be:3d:a1:e4:44:24:ab:95:98:d5: af:84:e1:96:be:7a:18:7a:94:51:19:fb:0b:df:5c: 63:3b:c7:a3:e8:b6:62:5a:69:17:8e:7f:bc:fc:1a: 48:a6:4b:eb:3a:98:47:26:10:d6:f1:0a:c6:5e:d9: 09:8a:fc:65:91:6b:d4:c4:00:7a:c8:4d:0e:07:88: d2:3b:71:98:26:db:b0:1a:61:ff:b4:01:81:b2:98: 31:3a:7b:6c:d8:8b:bf:1a:a0:90:70:22:b9:d9:a8: 33:53:b3:08:46:3e:8d:26:61:f1:a7:63:2b:78:d8: aa:9b:28:88:e5:bb:0e:1b:86:7e:8e:83:98:2a:92: 7b:36:0a:1f:0d:09:a3:70:aa:81:98:b7:bd:26:56: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FF:BA:C5:4A:C8:B5:95:A9:93:F2:97:9F:93:FD:98:96:E3:92:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a633a52b-4722-3a17-b72e-53642c0cf1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c0:b6:fe:3b:1a:77:bf:60:29:9e:52:a8:1f:b2:47:c3:54: 95:13:70:11:78:74:cd:13:f2:4a:ce:9b:7b:ed:1e:20:ff:4e: 05:d8:a7:bb:b4:e8:1b:1b:dd:b2:9a:c1:f5:65:f1:51:d5:51: 38:c4:18:57:31:36:a7:da:64:73:f7:1c:30:a2:64:06:f4:65: 24:fc:a6:26:63:21:9c:8a:e0:02:f2:52:5c:92:e8:a7:2a:aa: 0f:8d:22:33:6c:2d:3e:e3:74:86:c9:15:cc:b4:93:97:9b:9d: 72:ef:f0:96:75:91:d0:5e:6c:3f:a6:69:a7:e6:18:c1:93:0d: b9:e5:ef:da:92:0f:2b:7b:da:d2:63:cd:cc:bc:d0:61:c9:c3: 06:07:da:a8:e0:39:b0:5b:99:37:3f:4a:5f:12:fd:3c:5b:2b: c4:ea:3d:49:a6:b2:97:52:05:98:a3:ef:ef:52:34:af:79:fc: 92:59:09:df:f0:aa:4b:9a:c1:8d:1e:0c:30:c7:ad:b7:91:7b: a3:25:d1:35:46:b3:35:f1:9e:ab:47:4f:f4:dd:db:a8:5f:87: 32:d0:6f:c2:3e:16:5f:b0:30:fe:1a:30:49:9c:12:38:a8:4f: 5d:d5:bf:a9:ac:c3:0b:e2:0c:01:f2:6a:1c:4d:8f:c6:d7:2c: b8:6c:24:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2TrOwqZGHBOqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NzE3NmZkM2MtOTI3Mi00OGZiLTgxY2UtNGU0YzA0NWE5MjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom9KuCaQDZ1uOL4PXSYEQgQmZO5Dyi9FQwOB 64Zs2BQLhblGYeFhq2QVoh1/Lu2diOXiOWJtJ+owq1tCbU/SAxNLdOn1UQUpBJfI qhDwaK3TZtFAbny1xQW8et5ph61oHE/JQas+4OswGXxx3749oeREJKuVmNWvhOGW vnoYepRRGfsL31xjO8ej6LZiWmkXjn+8/BpIpkvrOphHJhDW8QrGXtkJivxlkWvU xAB6yE0OB4jSO3GYJtuwGmH/tAGBspgxOnts2Iu/GqCQcCK52agzU7MIRj6NJmHx p2MreNiqmyiI5bsOG4Z+joOYKpJ7NgofDQmjcKqBmLe9JlaGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP/usVKyLWVqZPyl5+T/ZiW45KeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTYzM2E1MmItNDcyMi0z YTE3LWI3MmUtNTM2NDJjMGNmMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/Atv47Gne/YCmeUqgfskfDVJUTcBF4dM0T8krOm3vtHiD/TgXYp7u0 6Bsb3bKawfVl8VHVUTjEGFcxNqfaZHP3HDCiZAb0ZST8piZjIZyK4ALyUlyS6Kcq qg+NIjNsLT7jdIbJFcy0k5ebnXLv8JZ1kdBebD+maafmGMGTDbnl79qSDyt72tJj zcy80GHJwwYH2qjgObBbmTc/Sl8S/TxbK8TqPUmmspdSBZij7+9SNK95/JJZCd/w qkuawY0eDDDHrbeRe6Ml0TVGszXxnqtHT/Td26hfhzLQb8I+Fl+wMP4aMEmcEjio T13Vv6mswwviDAHyahxNj8bXLLhsJDM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:15 2025 by rpki-client