$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa File: dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa (raw, json) Hash identifier: jUsSigkN2Jbv4zaceLG/sq8ZmM8Rb67wbtDYuZ02ayc= Subject key identifier: 93:B4:AB:E1:E0:F7:69:3F:8E:4D:D4:89:71:4A:6A:64:16:5D:6E:22 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B9C23A2DA62FC7FD96600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9c:23:a2:da:62:fc:7f:d9:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=008722e4-d74f-4fdc-a46b-181a1d7d9a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:a1:91:84:14:d0:da:84:0e:28:21:56:bd: 46:c5:da:83:f0:f2:88:5e:84:8c:81:46:8d:05:df: 90:79:76:f9:10:10:bb:75:8e:92:6a:e9:7f:40:5d: 44:4c:34:fd:29:27:e7:90:c5:6f:45:a7:5f:be:e5: 69:db:b7:a1:da:9d:26:77:8a:98:de:d1:6a:cf:2c: 76:b1:5f:29:d2:80:e1:8c:3c:b2:57:85:e8:a1:6c: 94:cf:d1:22:9b:92:b4:12:94:14:96:63:f3:23:21: fd:18:18:91:5f:0a:07:df:d4:5c:8a:7d:dd:9a:9c: 22:9c:96:52:0e:7c:3c:ac:ed:7c:11:27:cc:dd:e8: 1d:57:ed:16:70:29:ef:23:b0:a3:50:5f:d2:48:91: e2:95:55:1f:b4:ff:cb:b6:6e:95:e9:24:7f:1c:66: 61:5d:aa:91:2f:1e:bd:dc:72:6b:6e:31:09:94:70: 47:74:f5:e8:65:0d:20:31:ee:87:6d:d9:7d:cd:7e: 40:90:9f:71:b0:20:ee:5b:86:a5:a8:de:7d:0e:41: 41:0c:d9:48:66:91:13:ee:a3:66:12:de:4b:23:c3: f3:f3:38:db:d1:5f:f8:51:3c:e4:47:40:82:22:12: c8:e3:89:36:55:6f:d4:63:22:ec:c2:ce:66:97:fe: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B4:AB:E1:E0:F7:69:3F:8E:4D:D4:89:71:4A:6A:64:16:5D:6E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:57:1c:50:c1:00:e0:0f:f7:8e:d1:06:c2:1c:84:8c:0c:79: c7:ae:09:04:4e:c1:e7:2b:a5:f3:16:ad:a3:68:9f:67:87:bd: 2a:71:6d:80:cd:df:87:ea:54:07:6f:a4:e4:55:a3:e5:59:03: a2:d4:a0:08:f1:82:9c:cc:70:f2:46:ba:a9:3d:ab:a4:09:74: a3:f4:52:5e:70:3d:35:a4:7e:16:e3:b8:97:1c:68:89:ef:34: 10:b7:32:2b:ab:5a:4e:dc:4b:a0:65:04:3a:9a:71:93:62:5c: f8:bf:22:70:47:dd:37:da:3d:61:a5:d8:65:e0:a9:d0:45:ff: 5e:df:fe:b1:f7:d1:90:7b:dc:74:da:d9:59:9c:e4:e2:99:30: 0a:3c:f0:8e:86:62:13:9c:00:ce:ef:a9:89:cf:ba:42:31:8b: c9:ec:e2:be:94:23:ea:e2:22:2e:46:06:d9:32:9a:28:66:aa: e6:6d:2f:1c:95:f9:59:21:9d:2a:d6:5a:48:d1:d1:ff:31:66: b4:5a:8f:07:ab:6d:55:fb:c8:fe:af:f7:37:f1:8f:de:83:92: 3e:7f:e4:27:f6:d9:05:28:ee:a0:8f:de:c7:fa:78:89:fc:6c: c4:4e:3c:c5:56:f9:e1:83:94:d6:45:ac:32:51:75:0c:60:18: 3e:0f:f7:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5wjotpi/H/ZZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDA4NzIyZTQtZDc0Zi00ZmRjLWE0NmItMTgxYTFkN2Q5YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojmhkYQU0NqEDighVr1GxdqD8PKIXoSMgUaN Bd+QeXb5EBC7dY6Saul/QF1ETDT9KSfnkMVvRadfvuVp27eh2p0md4qY3tFqzyx2 sV8p0oDhjDyyV4XooWyUz9Eim5K0EpQUlmPzIyH9GBiRXwoH39Rcin3dmpwinJZS Dnw8rO18ESfM3egdV+0WcCnvI7CjUF/SSJHilVUftP/Ltm6V6SR/HGZhXaqRLx69 3HJrbjEJlHBHdPXoZQ0gMe6Hbdl9zX5AkJ9xsCDuW4alqN59DkFBDNlIZpET7qNm Et5LI8Pz8zjb0V/4UTzkR0CCIhLI44k2VW/UYyLsws5ml/4b0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO0q+Hg92k/jk3UiXFKamQWXW4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGNmOGZlMmQtMmZhNy0z NzAwLTkwZWUtNmU1NDM0NjFhMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJp2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVXHFDBAOAP947RBsIchIwMeceuCQROwecrpfMWraNon2eHvSpxbYDN 34fqVAdvpORVo+VZA6LUoAjxgpzMcPJGuqk9q6QJdKP0Ul5wPTWkfhbjuJccaInv NBC3MiurWk7cS6BlBDqacZNiXPi/InBH3TfaPWGl2GXgqdBF/17f/rH30ZB73HTa 2Vmc5OKZMAo88I6GYhOcAM7vqYnPukIxi8ns4r6UI+riIi5GBtkymihmquZtLxyV +VkhnSrWWkjR0f8xZrRajwerbVX7yP6v9zfxj96Dkj5/5Cf22QUo7qCP3sf6eIn8 bMROPMVW+eGDlNZFrDJRdQxgGD4P99M= -----END CERTIFICATE-----Generated at Tue Jul 22 04:34:43 2025 by rpki-client