$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b10df1ea-383d-3527-9bfb-ad56a6bd3000.roa File: b10df1ea-383d-3527-9bfb-ad56a6bd3000.roa (raw, json) Hash identifier: s2TKG2NhKXWIPCl1OeJ8uC11l/jlywoLtPdgO4xI6FI= Subject key identifier: BB:05:63:DB:72:D6:9B:7F:94:A8:30:9E:77:25:91:08:A4:8F:E0:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B72239AF005C5BA472D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b10df1ea-383d-3527-9bfb-ad56a6bd3000.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.198.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:72:23:9a:f0:05:c5:ba:47:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=01f8f3ca-1f90-41a3-99f6-4e4e1f5e755a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:25:9a:6a:bf:9c:ff:36:cd:bd:77:06:6a:20: 92:fa:42:7c:79:15:a6:b4:25:ff:d9:8c:e7:07:d3: 97:57:2b:34:7e:7f:f6:de:f0:c1:c6:86:86:1c:02: ec:4d:bb:36:84:c9:c8:df:cc:ec:3f:ff:23:d5:11: 69:45:77:f6:8f:cd:21:b4:c1:9c:06:ef:80:73:3a: b4:f6:34:46:b4:96:82:b5:57:ab:bb:84:09:02:81: 6f:45:73:b6:ee:c1:ea:28:06:29:62:43:7b:f6:80: 62:1a:63:53:bc:6b:5e:14:ee:50:a0:78:98:e6:f1: b9:81:a5:cd:62:fc:76:6d:16:70:6a:06:d8:6e:02: fe:e1:d3:8b:b1:3f:2a:7f:4a:49:c0:df:6d:06:aa: d0:07:68:9e:52:f6:b7:52:27:2b:2e:54:a3:b3:72: 5c:28:c0:8a:d4:22:2e:ea:e4:c2:21:7a:17:39:cb: eb:7a:79:1f:ea:02:fc:bc:4a:42:77:a1:3a:47:0f: 73:84:d9:26:7c:b3:f3:22:65:72:5f:95:84:f3:b5: ca:45:20:73:d5:7a:29:9f:a7:ad:a3:9f:20:05:8c: b9:f3:61:cf:80:6f:e3:94:1c:ca:fe:1c:de:c3:b6: f5:e5:ec:f9:6f:b5:a6:f7:50:94:0b:1e:d5:6f:92: 6d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:05:63:DB:72:D6:9B:7F:94:A8:30:9E:77:25:91:08:A4:8F:E0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b10df1ea-383d-3527-9bfb-ad56a6bd3000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2d:6c:4c:b7:74:41:27:f7:05:f3:a8:8c:eb:d6:3a:90:99: 27:71:8d:1a:53:39:04:13:9a:92:16:6f:33:3f:dd:2e:74:5d: cf:fc:89:b3:d2:bd:65:cb:15:65:29:13:c3:78:d7:2d:bf:46: 99:99:c9:90:d1:43:b8:f7:bf:f8:a8:9f:aa:7f:8a:bd:72:2f: 0b:9a:ea:ab:44:23:75:12:29:bd:3f:30:d6:c6:6d:a4:24:76: aa:34:20:8a:e9:39:79:e3:bc:db:f2:87:13:f2:f7:78:41:59: 19:01:ea:18:44:81:cb:d1:b8:ed:bf:f5:de:29:b6:81:9b:e1: af:cd:ca:b9:6d:14:dd:95:a2:d2:39:0b:c5:47:f6:61:bc:03: f5:37:9b:00:3f:1c:4b:72:56:f0:ba:bc:6e:f8:ad:b3:21:27: 29:58:d5:43:03:b0:96:82:8c:6f:6a:a2:c3:77:b2:e5:c7:a2: 97:cf:e8:e1:22:5b:db:c3:2b:fc:f1:44:9c:37:92:5a:00:7a: 34:4c:ed:72:4b:c6:4a:15:e5:60:5c:50:aa:f1:1a:18:f7:49: 41:a5:52:09:de:c0:c6:7e:24:13:fe:e8:92:e6:b1:6d:4e:ab: cb:b9:77:93:61:a6:1b:19:77:f2:42:65:31:e9:a1:00:22:6c: 29:83:a0:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3IjmvAFxbpHLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDFmOGYzY2EtMWY5MC00MWEzLTk5ZjYtNGU0ZTFmNWU3NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCWaar+c/zbNvXcGaiCS+kJ8eRWmtCX/2Yzn B9OXVys0fn/23vDBxoaGHALsTbs2hMnI38zsP/8j1RFpRXf2j80htMGcBu+Aczq0 9jRGtJaCtVeru4QJAoFvRXO27sHqKAYpYkN79oBiGmNTvGteFO5QoHiY5vG5gaXN Yvx2bRZwagbYbgL+4dOLsT8qf0pJwN9tBqrQB2ieUva3UicrLlSjs3JcKMCK1CIu 6uTCIXoXOcvrenkf6gL8vEpCd6E6Rw9zhNkmfLPzImVyX5WE87XKRSBz1Xopn6et o58gBYy582HPgG/jlBzK/hzew7b15ez5b7Wm91CUCx7Vb5JtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsFY9ty1pt/lKgwnnclkQikj+ACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjEwZGYxZWEtMzgzZC0z NTI3LTliZmItYWQ1NmE2YmQzMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYtbEy3dEEn9wXzqIzr1jqQmSdxjRpTOQQTmpIWbzM/3S50Xc/8ibPS vWXLFWUpE8N41y2/RpmZyZDRQ7j3v/ion6p/ir1yLwua6qtEI3USKb0/MNbGbaQk dqo0IIrpOXnjvNvyhxPy93hBWRkB6hhEgcvRuO2/9d4ptoGb4a/NyrltFN2VotI5 C8VH9mG8A/U3mwA/HEtyVvC6vG74rbMhJylY1UMDsJaCjG9qosN3suXHopfP6OEi W9vDK/zxRJw3kloAejRM7XJLxkoV5WBcUKrxGhj3SUGlUgnewMZ+JBP+6JLmsW1O q8u5d5NhphsZd/JCZTHpoQAibCmDoLQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:55 2025 by rpki-client