$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa File: d4a5e9c1-d838-365f-9553-97009a7b5512.roa (raw, json) Hash identifier: hnezIJm/9l2ZvqYpKUPnjhW0eXT9YOUMFPCAf43x1Ug= Subject key identifier: 01:2E:74:50:B7:3A:39:F0:6B:25:05:BB:3A:F5:22:E8:83:95:D1:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B9F04538CE832374AAF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.59.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9f:04:53:8c:e8:32:37:4a:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=e71a53fd-4f08-48e5-93b1-48fc2f49595a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:d7:59:9e:89:ab:60:17:8f:25:ad:ce:9d: 5c:20:f4:4c:00:a3:ea:8d:cf:ed:65:3d:b7:6d:be: 25:cb:d1:f1:e4:29:cb:64:8a:a5:0e:1e:79:78:9f: aa:c0:e7:b6:b4:d5:d4:71:72:6e:5d:92:f5:a3:81: 74:f3:1b:79:80:00:2c:f0:7e:36:53:d6:b8:21:33: 41:85:9a:6c:15:4c:42:a2:3b:08:1e:a0:9c:82:d1: 28:d6:c2:5a:5b:b5:69:64:1b:ae:21:67:9d:9c:10: 10:f1:f4:c4:f4:9b:cf:fa:ee:be:78:d2:fc:c6:e6: 69:3f:4e:ee:82:b9:9e:b5:3c:58:08:ca:37:9d:f5: da:0b:82:0d:fd:cb:78:08:e1:00:4c:8f:e2:33:e7: 00:33:32:89:b8:be:a8:12:69:f0:6a:b0:84:aa:20: be:0f:bc:cd:cc:f0:e8:64:48:a7:8a:37:6e:05:fc: aa:66:e7:db:26:4b:24:b9:69:99:e6:f5:1f:67:f1: 97:d0:9a:ba:6f:6f:95:9c:73:15:4b:9b:88:2c:22: 2f:f5:b9:e5:e1:e8:57:4c:f1:db:be:8a:dd:9e:06: fa:1f:cb:aa:34:e6:cb:82:f4:fe:58:09:7e:32:7f: e6:45:bb:ff:b0:c7:2f:01:80:5b:4f:fd:4b:2d:8b: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2E:74:50:B7:3A:39:F0:6B:25:05:BB:3A:F5:22:E8:83:95:D1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6f:c9:1f:c7:f8:04:e3:1f:04:cd:d8:b8:ff:db:8c:b7:1a: ef:71:4b:0a:31:62:bc:bb:19:df:22:c3:b1:97:a6:06:fa:59: fd:a5:9b:fa:d8:3c:0e:91:9c:77:f5:4b:2c:b9:49:98:31:e4: 19:3e:5d:fd:f9:43:c6:73:2d:ba:8d:35:77:70:92:6d:37:3f: 42:f7:fe:97:e2:8c:d3:79:af:0b:bb:0a:5a:ed:5f:67:31:9e: f7:d6:f8:27:5f:94:10:10:bc:c2:86:99:a6:ef:4f:46:23:7a: f6:da:0f:b5:35:d0:04:cf:e3:ee:24:e8:58:ac:0c:d1:bf:4c: e8:87:bb:f0:c6:1d:62:ac:41:f9:b2:d9:7c:3f:ab:77:a3:92: 27:4a:68:20:c1:ea:06:4b:b2:5b:f6:2f:9e:a3:62:78:e7:3d: 6c:88:61:7e:37:99:2c:02:0a:49:f5:4a:d4:86:66:20:5d:5e: 22:d5:d1:17:c4:e9:90:d4:b2:4e:99:f4:6b:d3:5d:46:e8:76: 3d:1c:e3:21:d3:ad:0a:4a:f2:05:41:b1:2c:4d:23:e1:0f:c7: 16:37:05:12:2b:48:1a:8d:5b:4c:02:89:26:b9:3e:d8:cd:b4: a6:fc:21:1e:5b:c3:d4:7e:9f:31:88:19:05:cb:aa:1f:ee:a5: 60:dd:fc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e58EU4zoMjdKr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTcxYTUzZmQtNGYwOC00OGU1LTkzYjEtNDhmYzJmNDk1OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomnXWZ6Jq2AXjyWtzp1cIPRMAKPqjc/tZT23 bb4ly9Hx5CnLZIqlDh55eJ+qwOe2tNXUcXJuXZL1o4F08xt5gAAs8H42U9a4ITNB hZpsFUxCojsIHqCcgtEo1sJaW7VpZBuuIWednBAQ8fTE9JvP+u6+eNL8xuZpP07u grmetTxYCMo3nfXaC4IN/ct4COEATI/iM+cAMzKJuL6oEmnwarCEqiC+D7zNzPDo ZEinijduBfyqZufbJkskuWmZ5vUfZ/GX0Jq6b2+VnHMVS5uILCIv9bnl4ehXTPHb vordngb6H8uqNObLgvT+WAl+Mn/mRbv/sMcvAYBbT/1LLYuShQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEudFC3OjnwayUFuzr1IuiDldHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRhNWU5YzEtZDgzOC0z NjVmLTk1NTMtOTcwMDlhN2I1NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxvyR/H+ATjHwTN2Lj/24y3Gu9xSwoxYry7Gd8iw7GXpgb6Wf2lm/rY PA6RnHf1Syy5SZgx5Bk+Xf35Q8ZzLbqNNXdwkm03P0L3/pfijNN5rwu7ClrtX2cx nvfW+CdflBAQvMKGmabvT0YjevbaD7U10ATP4+4k6FisDNG/TOiHu/DGHWKsQfmy 2Xw/q3ejkidKaCDB6gZLslv2L56jYnjnPWyIYX43mSwCCkn1StSGZiBdXiLV0RfE 6ZDUsk6Z9GvTXUbodj0c4yHTrQpK8gVBsSxNI+EPxxY3BRIrSBqNW0wCiSa5PtjN tKb8IR5bw9R+nzGIGQXLqh/upWDd/DA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:33 2025 by rpki-client