$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c71cc8c8-d683-3935-b8f4-cf230a2db0fd.roa File: c71cc8c8-d683-3935-b8f4-cf230a2db0fd.roa (raw, json) Hash identifier: GzDiq26pYL+1iVrcAiC61H6nUm1MnaEiiaX2tvJ1Tcs= Subject key identifier: 8A:83:92:63:8F:17:A1:27:FA:87:67:1F:C6:B8:2D:78:7A:68:9C:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8BAEF3E852727847C380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c71cc8c8-d683-3935-b8f4-cf230a2db0fd.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8b:ae:f3:e8:52:72:78:47:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=bc54a073-60a4-43e5-90a2-7fb08f1ee698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:1e:d4:19:b8:aa:54:14:a6:68:2c:4e:7c: 08:6d:3e:d4:ac:7c:cb:cf:fc:34:00:f1:e8:5e:a2: fa:e6:d9:bd:24:33:42:9c:30:03:d1:b0:05:4c:9e: 2a:b9:a4:21:0d:b7:2c:c7:1d:bf:82:ef:30:d9:12: 49:07:5e:77:e9:c3:f6:9f:cb:86:e3:bd:b3:1f:77: 7e:4d:bc:a6:58:9c:1c:96:ff:86:50:20:b7:e1:fe: 2d:ac:39:d7:51:1f:9f:d0:1c:55:0d:72:c9:da:b3: 06:d4:42:4b:34:43:77:fb:98:f5:ca:96:ef:3e:8a: f6:b4:22:12:99:fa:d9:1f:ea:8b:86:a0:13:31:e0: fb:43:85:19:f0:29:8e:2a:49:c5:96:fa:05:1d:b2: d1:0d:b9:89:b1:a5:49:24:38:5a:6f:9c:6b:df:8f: 73:0d:6a:c2:ec:fb:e0:4a:7f:7d:ee:13:22:83:ed: d4:88:12:d7:85:c8:28:b2:55:b0:6f:b8:12:fd:0a: 1c:d6:1b:c8:44:16:f0:c9:e6:0b:5d:82:e4:f9:f7: 93:0c:a4:f4:7e:50:c3:05:eb:6a:c0:ee:9e:14:e7: 42:e6:5b:07:37:24:e6:4a:a9:38:7c:e0:26:42:27: e0:1a:74:f3:57:68:8e:cc:a4:e9:21:63:d5:9a:ba: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:83:92:63:8F:17:A1:27:FA:87:67:1F:C6:B8:2D:78:7A:68:9C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c71cc8c8-d683-3935-b8f4-cf230a2db0fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b9:7f:35:69:df:3e:cd:71:91:bd:70:5e:bb:34:5f:1d:12: b8:71:21:90:5c:ec:40:e8:d4:53:6d:ea:40:7e:9e:86:5c:80: 00:1e:e8:24:2d:cd:c1:22:8f:da:df:45:31:2a:73:75:e4:31: 31:87:96:83:6c:48:2c:6d:f2:a3:6d:58:b5:74:80:73:70:a3: d0:cc:d0:41:41:86:40:47:70:1d:45:f7:ae:77:44:13:26:8f: 17:49:3a:c4:07:87:58:0f:14:b2:88:8a:c0:ca:8b:6b:98:7a: 1e:8e:28:04:39:76:0a:9c:c0:d9:4e:32:42:dc:25:b0:7e:29: 7d:2f:79:08:a9:79:02:e8:64:d2:cd:01:f3:d9:a7:ad:e6:83: a2:90:48:5a:17:ca:29:13:8f:f3:7e:e2:79:31:65:54:fb:89: 60:e1:dc:0e:f5:e7:fe:b8:19:a8:bb:6b:3c:20:bc:d4:53:50: 4f:72:e4:66:d7:ac:21:c3:91:6a:5c:d4:bf:b5:a6:1d:02:fd: bf:38:f0:14:ec:bd:94:58:08:c5:f7:13:d1:4e:df:18:a3:24: de:68:26:16:79:2b:2b:25:1f:54:6d:31:cd:f7:14:3b:d0:14: 5b:e7:d5:af:a2:9f:a8:81:85:e5:35:bb:d4:cc:65:ab:ad:d4: 1f:80:b6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4uu8+hScnhHw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YmM1NGEwNzMtNjBhNC00M2U1LTkwYTItN2ZiMDhmMWVlNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzooe1Bm4qlQUpmgsTnwIbT7UrHzLz/w0APHo XqL65tm9JDNCnDAD0bAFTJ4quaQhDbcsxx2/gu8w2RJJB1536cP2n8uG472zH3d+ TbymWJwclv+GUCC34f4trDnXUR+f0BxVDXLJ2rMG1EJLNEN3+5j1ypbvPor2tCIS mfrZH+qLhqATMeD7Q4UZ8CmOKknFlvoFHbLRDbmJsaVJJDhab5xr349zDWrC7Pvg Sn997hMig+3UiBLXhcgoslWwb7gS/Qoc1hvIRBbwyeYLXYLk+feTDKT0flDDBetq wO6eFOdC5lsHNyTmSqk4fOAmQifgGnTzV2iOzKTpIWPVmrpnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqDkmOPF6En+odnH8a4LXh6aJwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzcxY2M4YzgtZDY4My0z OTM1LWI4ZjQtY2YyMzBhMmRiMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK5fzVp3z7NcZG9cF67NF8dErhxIZBc7EDo1FNt6kB+noZcgAAe6CQt zcEij9rfRTEqc3XkMTGHloNsSCxt8qNtWLV0gHNwo9DM0EFBhkBHcB1F9653RBMm jxdJOsQHh1gPFLKIisDKi2uYeh6OKAQ5dgqcwNlOMkLcJbB+KX0veQipeQLoZNLN AfPZp63mg6KQSFoXyikTj/N+4nkxZVT7iWDh3A715/64Gai7azwgvNRTUE9y5GbX rCHDkWpc1L+1ph0C/b848BTsvZRYCMX3E9FO3xijJN5oJhZ5KyslH1RtMc33FDvQ FFvn1a+in6iBheU1u9TMZaut1B+AtoI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:24 2025 by rpki-client