$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3a3e339-18fe-35eb-becd-0bb4af59c732.roa File: c3a3e339-18fe-35eb-becd-0bb4af59c732.roa (raw, json) Hash identifier: /iY/kCt4kz94zIaaEkemrXinhUDaVV0kUSKxjZ4sgp0= Subject key identifier: 9E:B3:7D:FF:53:95:D2:6D:06:CA:3D:E0:8A:CF:48:29:7F:FB:A1:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A9206238EFDE31F8CF5253A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3a3e339-18fe-35eb-becd-0bb4af59c732.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.196.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:23:8e:fd:e3:1f:8c:f5:25:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=83cb2b21-808b-49f4-983e-348f8c38b677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:9c:4a:d0:07:7c:83:53:47:5a:9b:cc:44: ad:3f:40:23:18:45:81:3f:9e:e9:07:0d:a2:b6:9b: 4c:23:88:41:de:4e:79:f6:26:2b:a6:54:8e:d0:c3: 7b:06:0c:63:c1:b0:fa:e9:b9:60:94:38:f8:72:48: 91:ee:6f:70:16:b0:81:8f:29:e9:e2:bd:b0:82:e2: 1b:5a:85:d7:4e:0e:06:af:2a:4a:06:68:84:c2:d6: be:84:24:5b:6f:da:c5:07:26:b3:06:ef:b4:85:fb: 42:2d:fb:aa:42:d8:65:af:bc:94:f1:26:1c:f0:68: a2:51:cd:67:9b:da:89:7e:51:51:a2:a7:6c:ba:aa: 5c:6c:a4:28:df:89:77:b2:17:27:c2:01:f0:78:ab: 79:11:f4:e5:47:50:1f:1b:fb:9a:93:23:c7:52:41: c4:18:66:0a:45:9a:c4:67:d9:28:ca:5d:b3:43:80: 80:d9:f5:09:3d:54:20:3f:76:0d:4b:7a:b1:14:0d: 29:fd:1e:48:a7:07:5d:f0:1e:2e:99:15:b2:fa:6b: 76:e1:d3:74:19:4e:e0:ce:1b:0e:74:57:5a:bb:79: ba:39:b6:ad:72:96:47:0e:e5:f6:63:31:78:38:cb: 5a:53:6d:f7:60:fd:7c:fb:f1:7e:61:f0:dd:16:78: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B3:7D:FF:53:95:D2:6D:06:CA:3D:E0:8A:CF:48:29:7F:FB:A1:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3a3e339-18fe-35eb-becd-0bb4af59c732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:43:ac:0c:d2:30:0c:f9:96:8e:5d:08:11:b4:48:48:d0:8f: fd:8c:7d:a5:2e:9a:6f:2d:44:f2:73:c3:d5:ad:20:5c:f1:dc: 16:00:b0:71:dc:25:99:22:b2:78:fc:fe:05:1c:0a:77:0c:cc: 9a:94:06:28:c9:46:3d:16:7e:0d:0b:ce:79:11:0f:c4:12:19: 49:95:7d:9b:72:e6:2a:f8:1e:aa:08:16:b0:f8:a2:5a:63:1c: 94:ea:70:21:81:95:ce:5e:65:56:8e:d2:80:6f:cc:67:cd:d3: f7:a9:05:20:72:a8:07:f3:a9:83:e6:41:c5:0f:2f:a6:03:a9: a9:28:90:8e:7c:7a:51:de:32:63:86:c4:d1:dd:08:91:db:4b: 8f:01:e7:3d:5e:07:b2:ca:b8:d6:d7:43:8d:27:dd:5f:d4:b9: 6d:9c:6a:b3:24:ba:38:4c:24:8b:f0:ff:83:62:3c:4f:ad:7b: 0d:53:2c:d4:b8:95:16:cc:c2:c6:a8:36:66:5b:a6:df:d2:56: 76:66:e0:99:93:44:f9:4f:cf:3e:24:4a:77:1d:e7:08:f3:3d: 0f:18:10:8e:ce:48:4a:c6:2a:1a:9f:e2:04:19:59:9c:47:0e: 05:c7:34:f9:34:ca:90:0c:dd:d4:9d:91:9a:96:98:56:f8:40: 3c:46:a8:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqSBiOO/eMfjPUlOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk ODNjYjJiMjEtODA4Yi00OWY0LTk4M2UtMzQ4ZjhjMzhiNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhWcStAHfINTR1qbzEStP0AjGEWBP57pBw2i tptMI4hB3k559iYrplSO0MN7BgxjwbD66blglDj4ckiR7m9wFrCBjynp4r2wguIb WoXXTg4GrypKBmiEwta+hCRbb9rFByazBu+0hftCLfuqQthlr7yU8SYc8GiiUc1n m9qJflFRoqdsuqpcbKQo34l3shcnwgHweKt5EfTlR1AfG/uakyPHUkHEGGYKRZrE Z9koyl2zQ4CA2fUJPVQgP3YNS3qxFA0p/R5Ipwdd8B4umRWy+mt24dN0GU7gzhsO dFdau3m6ObatcpZHDuX2YzF4OMtaU233YP18+/F+YfDdFniwewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ6zff9TldJtBso94IrPSCl/+6E/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzNhM2UzMzktMThmZS0z NWViLWJlY2QtMGJiNGFmNTljNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCaMQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfUOsDNIwDPmWjl0IEbRISNCP/Yx9pS6aby1E8nPD1a0gXPHcFgCwcdwl mSKyePz+BRwKdwzMmpQGKMlGPRZ+DQvOeREPxBIZSZV9m3LmKvgeqggWsPiiWmMc lOpwIYGVzl5lVo7SgG/MZ83T96kFIHKoB/Opg+ZBxQ8vpgOpqSiQjnx6Ud4yY4bE 0d0IkdtLjwHnPV4Hssq41tdDjSfdX9S5bZxqsyS6OEwki/D/g2I8T617DVMs1LiV FszCxqg2Zlum39JWdmbgmZNE+U/PPiRKdx3nCPM9DxgQjs5ISsYqGp/iBBlZnEcO Bcc0+TTKkAzd1J2RmpaYVvhAPEaoBQ== -----END CERTIFICATE-----Generated at Tue Jul 22 04:20:38 2025 by rpki-client