$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c04534a2-76e7-3813-89d1-0f0e1922fb25.roa File: c04534a2-76e7-3813-89d1-0f0e1922fb25.roa (raw, json) Hash identifier: ipK4pYoA4Vlg+JyqU20RrhgPCgA5Rls6FgfIx+up3kM= Subject key identifier: 18:D1:0B:20:8E:5F:38:35:6C:04:FB:E7:D2:EA:8D:2F:EC:BD:40:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B916B870106E0FD262880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c04534a2-76e7-3813-89d1-0f0e1922fb25.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.196.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:91:6b:87:01:06:e0:fd:26:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=1296e423-2e48-4d28-bf23-92a1a6cd88ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:fa:9d:c2:82:47:54:4d:82:f1:47:c3:cd: be:1a:d3:f2:a6:e5:27:ea:ae:fc:8c:b7:bd:b1:3b: 6a:98:fe:7d:58:1b:76:b5:8d:ef:a6:e5:d4:67:df: b8:1d:f8:ef:f9:56:55:2d:92:1c:e6:56:4f:b0:e5: 0c:23:eb:8d:40:58:ae:00:90:85:cd:13:ba:2c:28: fc:b6:ca:dc:85:ca:57:ae:43:0d:f8:b0:4e:1f:6c: c2:3a:d2:79:20:8a:69:ee:18:e1:1a:ec:5d:ef:42: 6c:3e:71:d6:ec:a1:2f:0e:ec:60:aa:41:7e:0f:98: 96:3a:b2:be:d4:ca:f3:14:3f:2e:1a:2f:3b:a8:22: 7d:b1:5d:7a:b7:ef:2f:b5:86:51:51:cd:60:f6:52: e7:3a:2a:2b:22:57:7c:34:71:11:13:5e:a1:2c:2e: 96:d4:21:ff:30:71:c9:bb:87:2f:1b:d0:07:72:5f: ef:5f:32:7e:25:2d:04:84:5b:9a:fb:de:ed:ec:df: 56:bc:34:e4:e4:13:f7:4e:00:79:8c:52:d0:98:2a: b9:fc:5a:cf:a4:11:bf:c1:9a:b1:e2:07:60:57:56: 84:94:77:03:cf:96:4b:0e:09:57:8e:c7:2f:43:c7: 9a:8e:5e:94:1e:93:5a:32:af:a8:a7:81:d1:f0:1a: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D1:0B:20:8E:5F:38:35:6C:04:FB:E7:D2:EA:8D:2F:EC:BD:40:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c04534a2-76e7-3813-89d1-0f0e1922fb25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:4b:94:89:aa:b7:b5:16:90:73:ed:66:92:67:54:2d:1d: 8c:d1:ac:c7:07:2e:58:5a:20:dc:b4:09:63:4b:b5:ea:84:12: 54:30:ac:d1:79:ed:23:34:7e:14:ac:94:06:23:41:b9:bc:0c: bb:a9:62:43:88:3b:6e:19:77:2a:a7:73:0b:01:07:e0:4a:0c: f2:88:b4:96:a2:d2:67:76:95:2c:9f:6e:6f:37:f0:8c:93:b2: 8d:b0:40:30:8f:9c:e1:32:9d:68:c2:fd:d4:02:f7:a1:80:f7: 4f:1a:4d:c0:7d:0d:ed:80:25:d3:24:d3:e7:f8:01:b6:6d:c7: 2e:b0:2e:41:f0:d0:9a:07:50:89:e9:59:fb:40:e5:72:0b:15: 97:e0:20:81:6f:f9:32:a3:fa:d4:b1:97:ad:fb:59:9c:a5:a5: 4e:31:bd:d5:87:cf:aa:85:90:f5:49:c9:e2:14:b0:91:68:8e: 5f:43:22:d1:62:d1:d7:a8:7e:88:0a:b4:1e:25:a0:69:d2:c9: e9:02:54:39:82:e5:bd:38:68:7f:3f:bf:82:e1:51:34:86:69: f6:e1:82:f8:10:3f:82:c3:a8:b8:2e:53:e9:ab:30:eb:fc:3d: d5:47:62:c3:17:31:d9:d4:b1:6d:af:de:ea:5c:19:e3:b1:eb: 29:b4:fd:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5FrhwEG4P0mKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTI5NmU0MjMtMmU0OC00ZDI4LWJmMjMtOTJhMWE2Y2Q4OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg636ncKCR1RNgvFHw82+GtPypuUn6q78jLe9 sTtqmP59WBt2tY3vpuXUZ9+4Hfjv+VZVLZIc5lZPsOUMI+uNQFiuAJCFzRO6LCj8 tsrchcpXrkMN+LBOH2zCOtJ5IIpp7hjhGuxd70JsPnHW7KEvDuxgqkF+D5iWOrK+ 1MrzFD8uGi87qCJ9sV16t+8vtYZRUc1g9lLnOiorIld8NHERE16hLC6W1CH/MHHJ u4cvG9AHcl/vXzJ+JS0EhFua+97t7N9WvDTk5BP3TgB5jFLQmCq5/FrPpBG/wZqx 4gdgV1aElHcDz5ZLDglXjscvQ8eajl6UHpNaMq+op4HR8BrFwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjRCyCOXzg1bAT759LqjS/svUCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA0NTM0YTItNzZlNy0z ODEzLTg5ZDEtMGYwZTE5MjJmYjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOPS5SJqre1FpBz7WaSZ1QtHYzRrMcHLlhaINy0CWNLteqEElQwrNF5 7SM0fhSslAYjQbm8DLupYkOIO24ZdyqncwsBB+BKDPKItJai0md2lSyfbm838IyT so2wQDCPnOEynWjC/dQC96GA908aTcB9De2AJdMk0+f4AbZtxy6wLkHw0JoHUInp WftA5XILFZfgIIFv+TKj+tSxl637WZylpU4xvdWHz6qFkPVJyeIUsJFojl9DItFi 0deofogKtB4loGnSyekCVDmC5b04aH8/v4LhUTSGafbhgvgQP4LDqLguU+mrMOv8 PdVHYsMXMdnUsW2v3upcGeOx6ym0/YU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:12 2025 by rpki-client