$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa File: ea140b0e-fbec-328e-ad5e-7fce06f11002.roa (raw, json) Hash identifier: hFxyeQ0miwSsRj2K1+2TEa/MCLSVZ9ws1lZ4JE+lDLs= Subject key identifier: 0C:D5:21:F0:A8:24:27:4D:27:9B:A2:53:4B:11:4A:3E:D8:D5:BC:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B9D121EB9BA272A5143C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.59.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9d:12:1e:b9:ba:27:2a:51:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ae29b163-c25e-4dae-a9f7-808f4687f2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:3b:51:89:7b:5c:c8:9d:76:7a:a8:01:2f: 95:d8:1d:b3:62:a9:58:e4:27:c7:96:d7:83:7f:8a: a9:9a:6b:9a:a4:66:42:75:76:e9:8a:54:36:6b:64: 67:dd:1b:98:8a:07:50:2b:53:fb:b9:b1:9c:f7:6d: 6a:eb:b0:9f:68:5e:29:38:90:05:bd:d6:8b:c2:38: ce:e5:bc:eb:1a:31:2b:d1:53:b3:8b:3a:79:ec:3f: a5:40:f2:9a:b8:05:9b:c5:f8:47:74:d2:e2:8c:c7: 54:63:a4:ab:9b:b0:97:eb:06:20:2f:63:7b:29:7e: 6e:04:4a:45:d8:9f:e4:70:2b:ca:43:f8:2c:58:d7: ba:97:69:f5:3d:4c:4b:b5:35:28:7e:14:74:31:5a: 92:a6:59:be:a2:8f:40:69:c8:7e:a2:57:75:f2:22: 8f:65:49:0c:99:35:71:b1:ff:07:91:40:41:22:fb: 1f:94:d9:d8:95:c9:5f:06:a8:b2:95:96:cb:0d:bf: ee:86:ed:1a:25:88:75:b9:ca:5a:32:06:85:55:ca: aa:bf:08:3b:64:89:91:2d:1f:fe:c1:d7:2a:ef:f7: 57:a3:36:9d:c9:ae:d7:ec:f6:fa:d2:7f:ab:ad:80: 32:59:62:19:8d:38:7e:74:26:bf:cd:f6:3b:04:5c: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:21:F0:A8:24:27:4D:27:9B:A2:53:4B:11:4A:3E:D8:D5:BC:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea140b0e-fbec-328e-ad5e-7fce06f11002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1b:56:29:87:c2:80:1a:4f:18:5f:f7:de:7c:24:08:a9:3f: 7a:04:84:67:82:60:99:2f:2f:15:39:33:07:8b:de:e8:55:e0: 48:a5:50:33:54:07:a5:eb:ad:89:40:10:e5:00:66:c2:44:a2: 06:3e:be:a4:3f:bd:d1:75:8d:6c:07:4e:d2:31:5b:97:d5:d9: 3a:98:d6:d7:3d:07:9b:d8:0f:35:9c:5e:0a:34:a8:be:54:f2: fd:45:05:f1:9d:9b:fc:cb:42:4e:48:b8:8b:6c:65:19:a2:7c: aa:18:a1:ce:28:51:3e:84:21:9e:14:ac:05:7d:ba:27:67:a2: b8:13:69:ec:f3:a6:1f:88:9e:72:37:4a:80:28:55:78:0e:03: 2d:c7:95:f1:7b:91:e6:0e:33:ee:94:7e:58:aa:75:5f:19:ee: 24:a3:e7:3b:8d:26:50:e4:0c:2a:35:51:f8:eb:ba:83:b7:2b: 2e:e1:41:0a:fc:94:7d:2d:3b:e6:45:f5:f1:cd:3d:59:71:a8: 08:88:fe:b8:98:f4:ad:fc:5c:a6:d1:e1:03:12:67:cb:43:f1: f4:c9:94:8e:28:25:29:91:c4:37:11:c0:27:9b:d8:f9:51:c7: 37:52:85:ca:a3:99:1d:f6:77:7c:76:f1:65:91:d6:91:05:04: 76:d2:aa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e50SHrm6JypRQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YWUyOWIxNjMtYzI1ZS00ZGFlLWE5ZjctODA4ZjQ2ODdmMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7c7UYl7XMiddnqoAS+V2B2zYqlY5CfHlteD f4qpmmuapGZCdXbpilQ2a2Rn3RuYigdQK1P7ubGc921q67CfaF4pOJAFvdaLwjjO 5bzrGjEr0VOzizp57D+lQPKauAWbxfhHdNLijMdUY6Srm7CX6wYgL2N7KX5uBEpF 2J/kcCvKQ/gsWNe6l2n1PUxLtTUofhR0MVqSplm+oo9Aach+old18iKPZUkMmTVx sf8HkUBBIvsflNnYlclfBqiylZbLDb/uhu0aJYh1ucpaMgaFVcqqvwg7ZImRLR/+ wdcq7/dXozadya7X7Pb60n+rrYAyWWIZjTh+dCa/zfY7BFxrqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzVIfCoJCdNJ5uiU0sRSj7Y1bxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWExNDBiMGUtZmJlYy0z MjhlLWFkNWUtN2ZjZTA2ZjExMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwbVimHwoAaTxhf9958JAipP3oEhGeCYJkvLxU5MweL3uhV4EilUDNU B6XrrYlAEOUAZsJEogY+vqQ/vdF1jWwHTtIxW5fV2TqY1tc9B5vYDzWcXgo0qL5U 8v1FBfGdm/zLQk5IuItsZRmifKoYoc4oUT6EIZ4UrAV9uidnorgTaezzph+InnI3 SoAoVXgOAy3HlfF7keYOM+6UfliqdV8Z7iSj5zuNJlDkDCo1UfjruoO3Ky7hQQr8 lH0tO+ZF9fHNPVlxqAiI/riY9K38XKbR4QMSZ8tD8fTJlI4oJSmRxDcRwCeb2PlR xzdShcqjmR32d3x28WWR1pEFBHbSqvY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:17:14 2025 by rpki-client