$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa File: db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa (raw, json) Hash identifier: 7Km87jovlzg4AeD8ukEwRR0nLKY3ZJdQHocH1stMFs0= Subject key identifier: C7:14:9E:CB:A9:D3:53:33:BC:53:B0:A9:40:19:83:E5:42:C1:ED:0A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B72EC232C6D97803FC75B Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.197.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:72:ec:23:2c:6d:97:80:3f:c7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=d01a22e3-c45e-4392-9cbf-6f34fd99c1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ef:d0:b9:72:51:7c:1a:14:f4:88:64:12:8d: bf:f1:8c:79:7d:d8:cc:85:82:08:da:01:ac:2e:d2: ae:36:3c:96:49:7a:a4:21:ba:b8:98:ac:63:90:bd: 98:f9:87:33:36:69:e3:4a:28:76:71:04:c7:c6:0d: fc:a0:2c:e2:4f:a5:92:54:c7:70:e5:a4:ec:18:3d: bc:59:1c:54:13:a2:f3:47:fd:45:af:0a:0f:d3:61: 83:58:02:0b:0c:9e:92:5b:97:b9:94:1b:d6:0e:cf: 43:b9:48:30:20:83:e7:c2:cd:1a:99:43:1a:6a:1d: d8:19:c3:66:72:b0:c0:c6:f4:58:4e:a7:f1:11:5e: 4c:97:d9:c7:6b:c4:41:d4:d4:58:92:da:20:ae:28: 33:79:02:ad:24:7b:d3:a9:a7:9a:50:95:72:ce:ce: d8:db:2b:87:02:01:bd:b2:6a:e2:cb:74:6f:80:c2: 7c:cb:9f:d2:98:56:ea:82:f2:a0:c6:5a:04:66:b3: d2:0b:92:e9:2b:bb:d8:d9:56:e7:c2:af:66:b4:12: 57:c2:d8:62:b9:08:93:c1:b2:12:17:37:d4:da:15: d8:6d:32:70:0c:ad:82:d1:fd:9b:37:b7:ac:63:07: 95:d7:29:51:10:7d:19:d5:74:11:bd:ed:be:bf:e2: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:14:9E:CB:A9:D3:53:33:BC:53:B0:A9:40:19:83:E5:42:C1:ED:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3a:d1:17:4f:f3:d7:1c:12:7c:5b:2a:4d:01:fc:26:da:54: 62:a7:4b:55:21:b9:17:ad:78:c1:3c:a7:34:c9:1b:09:87:08: 71:6e:5c:1f:82:17:c0:94:26:db:fd:c9:83:a2:99:10:38:02: a3:1d:38:f9:50:91:25:9a:f4:d5:7c:c0:6f:00:e8:b5:2b:84: 03:de:21:0b:b9:7b:45:22:b5:08:5a:a8:2b:d3:7e:39:bd:9b: 94:65:be:f3:2d:e5:0d:8c:10:70:0f:e2:2b:f4:7a:7b:1e:58: 8c:54:2e:42:93:4a:02:61:21:98:69:0a:ca:4c:40:3f:b0:f4: 6d:b8:64:13:25:3d:0d:ce:d0:bf:3a:8d:71:c0:20:f0:ca:46: 6a:5a:94:7f:e6:17:ba:f9:6d:26:bc:6d:d7:0d:dc:d9:6b:7e: 41:78:30:8b:8f:26:e9:c8:6b:0c:2f:13:bf:19:72:44:ef:e2: e4:a1:44:ef:c4:2f:2b:e9:96:69:ff:40:19:c1:df:96:10:2c: 9c:5e:49:e0:65:45:e9:17:a2:14:70:c4:e7:8e:d2:1c:67:ec: d0:5c:d9:d2:49:29:38:6e:ac:37:db:59:05:95:1b:4b:1c:1d: a7:9b:3c:55:c7:fa:1c:b8:f2:2e:03:de:be:88:29:e7:84:11: 89:8b:61:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3LsIyxtl4A/x1swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDAxYTIyZTMtYzQ1ZS00MzkyLTljYmYtNmYzNGZkOTljMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu/QuXJRfBoU9IhkEo2/8Yx5fdjMhYII2gGs LtKuNjyWSXqkIbq4mKxjkL2Y+YczNmnjSih2cQTHxg38oCziT6WSVMdw5aTsGD28 WRxUE6LzR/1FrwoP02GDWAILDJ6SW5e5lBvWDs9DuUgwIIPnws0amUMaah3YGcNm crDAxvRYTqfxEV5Ml9nHa8RB1NRYktogrigzeQKtJHvTqaeaUJVyzs7Y2yuHAgG9 smriy3RvgMJ8y5/SmFbqgvKgxloEZrPSC5LpK7vY2Vbnwq9mtBJXwthiuQiTwbIS FzfU2hXYbTJwDK2C0f2bN7esYweV1ylREH0Z1XQRve2+v+L3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcUnsup01MzvFOwqUAZg+VCwe0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIyOGE4YmYtNzhhZi0z NWFhLWFmN2EtOGQ0Y2JjMzE4OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ60RdP89ccEnxbKk0B/CbaVGKnS1UhuReteME8pzTJGwmHCHFuXB+C F8CUJtv9yYOimRA4AqMdOPlQkSWa9NV8wG8A6LUrhAPeIQu5e0UitQhaqCvTfjm9 m5RlvvMt5Q2MEHAP4iv0enseWIxULkKTSgJhIZhpCspMQD+w9G24ZBMlPQ3O0L86 jXHAIPDKRmpalH/mF7r5bSa8bdcN3NlrfkF4MIuPJunIawwvE78ZckTv4uShRO/E Lyvplmn/QBnB35YQLJxeSeBlRekXohRwxOeO0hxn7NBc2dJJKThurDfbWQWVG0sc HaebPFXH+hy48i4D3r6IKeeEEYmLYRE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:54 2025 by rpki-client