$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa File: d88b5200-310f-3d92-806a-4a865f0bb691.roa (raw, json) Hash identifier: uitI6ljlBo30peEMZYlctkCgUlagx1Rw4m/XYizg8fQ= Subject key identifier: CA:F8:0B:CE:92:E1:38:13:10:B0:0B:95:70:3C:83:84:01:EF:F0:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8D15D11BDB3C295D7A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.199.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8d:15:d1:1b:db:3c:29:5d:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ace6fddb-1143-4fb9-bb47-9af5d0f6370d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:0a:13:65:7e:65:3c:90:ec:1b:cc:a4:a6: 7d:92:78:92:38:ce:dc:69:7f:1f:bb:db:d9:21:07: 92:cb:3e:f7:0d:08:db:72:18:cf:8f:7d:7c:c8:30: a6:66:3c:4c:39:75:d9:53:f7:af:f1:87:d5:eb:00: e8:b8:58:9e:3d:27:c9:b2:14:8f:49:36:5a:4a:8c: 5e:cb:9d:9e:86:d6:1d:6e:30:c7:34:6b:31:4d:37: c5:0f:4b:2f:34:cc:79:05:87:ee:3b:94:c9:a0:0a: a8:b9:56:8d:10:a1:d6:fd:23:cf:75:ae:71:ec:52: 15:5e:dc:13:29:d0:55:b0:46:81:14:87:fe:da:ae: 3a:7e:44:ea:54:73:0e:db:f9:7c:6e:85:f6:a3:36: 7e:a6:2b:00:fb:f7:eb:c8:f5:c9:1a:10:89:01:ae: 03:ae:79:79:2d:c8:9c:6c:fd:b0:03:0f:01:ee:2b: c0:b4:70:81:8e:f2:3b:9c:f7:25:17:d6:a6:18:35: c5:d2:bd:d3:9b:f2:cb:7f:94:ac:ca:4c:37:31:d0: ce:e5:75:c1:e0:2e:5c:1d:e2:1a:80:6f:a5:0f:b7: 19:38:c5:8d:1d:e9:6b:91:4e:65:1f:78:80:50:93: ba:eb:ab:f2:21:61:16:96:a7:d5:a4:ea:e6:03:d7: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F8:0B:CE:92:E1:38:13:10:B0:0B:95:70:3C:83:84:01:EF:F0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5c:0c:73:af:0c:38:58:34:12:a3:32:36:14:ed:9b:e9:ae: fe:0f:a8:12:18:67:e7:85:2e:48:d4:d9:04:54:3c:19:6d:1e: 1a:89:da:ec:b9:19:89:84:dc:19:10:e5:83:b0:8f:e4:a2:f2: 15:f7:63:15:9c:ad:92:c5:77:b4:0a:56:47:0d:6a:4a:c1:59: f0:6a:18:43:89:27:02:e7:a8:40:10:c3:dc:88:e8:f8:41:bb: fd:c8:09:7b:de:b2:37:9d:16:86:28:74:64:fc:65:c0:c2:c2: 87:7e:ab:39:c3:de:d0:0d:41:a8:1d:07:0e:fe:66:81:69:6b: a7:50:d2:63:90:16:ad:e4:82:d8:13:57:75:da:df:be:14:21: 82:06:83:dd:ca:25:71:41:58:49:52:80:f4:f2:13:dc:9d:f4: 54:77:38:b0:b8:b5:97:11:63:10:e3:8b:3a:3e:ad:4f:3f:03: 42:73:78:a3:e0:09:82:23:19:b0:74:25:c1:4f:74:92:14:c5: 1d:7d:2c:4f:2d:58:1d:6a:ce:b8:4c:20:e8:d1:a3:21:1a:33: 7f:60:a7:e4:ea:5e:9b:af:e6:93:e2:01:bf:d7:f9:9a:3d:8e: 0b:b1:58:6b:54:73:66:74:a6:18:84:15:89:78:a9:cf:b4:ab: 89:bc:7e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e40V0RvbPCldekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YWNlNmZkZGItMTE0My00ZmI5LWJiNDctOWFmNWQwZjYzNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT0KE2V+ZTyQ7BvMpKZ9kniSOM7caX8fu9vZ IQeSyz73DQjbchjPj318yDCmZjxMOXXZU/ev8YfV6wDouFiePSfJshSPSTZaSoxe y52ehtYdbjDHNGsxTTfFD0svNMx5BYfuO5TJoAqouVaNEKHW/SPPda5x7FIVXtwT KdBVsEaBFIf+2q46fkTqVHMO2/l8boX2ozZ+pisA+/fryPXJGhCJAa4Drnl5Lcic bP2wAw8B7ivAtHCBjvI7nPclF9amGDXF0r3Tm/LLf5Ssykw3MdDO5XXB4C5cHeIa gG+lD7cZOMWNHelrkU5lH3iAUJO666vyIWEWlqfVpOrmA9dvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr4C86S4TgTELALlXA8g4QB7/A7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDg4YjUyMDAtMzEwZi0z ZDkyLTgwNmEtNGE4NjVmMGJiNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBcDHOvDDhYNBKjMjYU7Zvprv4PqBIYZ+eFLkjU2QRUPBltHhqJ2uy5 GYmE3BkQ5YOwj+Si8hX3YxWcrZLFd7QKVkcNakrBWfBqGEOJJwLnqEAQw9yI6PhB u/3ICXvesjedFoYodGT8ZcDCwod+qznD3tANQagdBw7+ZoFpa6dQ0mOQFq3kgtgT V3Xa374UIYIGg93KJXFBWElSgPTyE9yd9FR3OLC4tZcRYxDjizo+rU8/A0JzeKPg CYIjGbB0JcFPdJIUxR19LE8tWB1qzrhMIOjRoyEaM39gp+TqXpuv5pPiAb/X+Zo9 jguxWGtUc2Z0phiEFYl4qc+0q4m8fuE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:18 2025 by rpki-client