$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa File: f21189fb-e23d-3eb9-89ca-2076fda69f76.roa (raw, json) Hash identifier: KyArUslTLZI1otv3BltuAcNbA9brXgeMdtt9aB+di6M= Subject key identifier: 28:87:15:E9:B6:AD:F4:EE:E5:E7:26:64:8E:6C:43:3D:B5:C8:EA:E3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B74DF75DD8A7FE3827E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:74:df:75:dd:8a:7f:e3:82:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=19b8c097-74aa-4ea7-9ec5-264d2f077751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:af:84:ae:76:ff:05:8a:90:6b:c8:6a:70: 49:e1:c8:74:0a:d3:5e:bf:47:e4:1e:d1:66:77:8a: e6:ab:0c:af:bf:48:8b:2d:e1:73:1c:e2:f7:d4:59: 43:cd:82:af:d3:15:14:23:33:21:6e:7a:5b:ca:45: 9d:77:f3:2b:7e:72:fb:c2:d9:1a:70:b1:01:f6:a6: 1d:b6:7f:14:c5:d6:40:a4:68:34:2d:95:13:0a:5a: 2c:00:fb:a8:30:fd:7c:30:a0:22:d6:3c:94:35:fc: 66:15:96:be:e2:2b:33:16:fc:8d:58:b8:bd:a5:e5: f5:71:98:4a:7b:8b:36:1b:16:1f:2d:d2:06:14:ba: a9:c9:4f:ee:aa:41:b9:84:85:74:dd:eb:a6:6e:86: 65:79:76:c4:98:c7:e3:a3:a1:f2:53:71:b1:1b:8c: 7e:f4:b0:4e:4c:c8:63:5c:36:32:e9:20:36:bb:41: 2c:e9:2c:5c:d2:d6:43:f2:af:26:f3:f9:82:4c:5f: f6:7f:99:ab:19:cc:f6:77:ed:46:5c:0d:67:a6:5d: 7c:19:f7:f3:e5:88:89:ba:fc:05:c2:7f:a3:7c:c1: dc:f7:d3:ce:ab:00:a2:05:9c:0c:a6:45:bd:2d:d5: d8:44:a3:4d:21:70:d4:dc:f1:16:f8:65:5c:35:e3: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:15:E9:B6:AD:F4:EE:E5:E7:26:64:8E:6C:43:3D:B5:C8:EA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:78:cc:b9:97:69:80:96:98:0f:06:b2:05:b6:25:ed:53:b5: 6d:ed:ce:3d:ee:33:81:a4:47:2f:5a:cc:e6:c2:93:d8:28:ad: 6e:be:f4:08:ce:0c:ab:40:37:1d:ab:73:11:2e:4e:32:c2:5e: 44:f0:a2:92:45:7c:20:08:fd:16:e7:46:ca:47:fb:f7:66:f2: 26:6f:86:2e:6a:3b:44:e0:d1:85:67:5a:8e:11:85:b6:1d:56: 74:8b:d8:2a:f6:dc:6e:9a:51:12:f5:54:da:4f:d0:2b:ed:ef: 98:29:f6:7b:19:a8:44:cd:ba:9c:1c:05:ce:5f:37:2c:f1:67: d3:c3:2d:4a:26:5d:80:8f:81:15:d8:4b:0a:37:2b:54:25:4d: 54:f1:2b:4b:e2:6e:c1:65:74:a0:58:7e:93:60:3d:6c:b1:ab: 48:81:5b:cb:94:f2:28:42:05:68:8d:ee:26:92:9b:77:9d:62: 39:b5:4e:2f:12:bf:90:94:8c:a8:95:78:2c:3e:a4:df:e6:83: 76:9e:2e:2c:c3:97:2c:42:28:2d:4a:52:74:6b:b3:6a:87:86: 18:b2:bd:ab:38:e1:bd:c1:3d:a8:00:e8:d4:50:43:57:09:0c: 0d:4e:02:46:f7:d6:47:67:ec:45:20:38:4c:f2:8d:75:4c:5e: 94:79:51:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3Tfdd2Kf+OCfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTliOGMwOTctNzRhYS00ZWE3LTllYzUtMjY0ZDJmMDc3NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptGvhK52/wWKkGvIanBJ4ch0CtNev0fkHtFm d4rmqwyvv0iLLeFzHOL31FlDzYKv0xUUIzMhbnpbykWdd/MrfnL7wtkacLEB9qYd tn8UxdZApGg0LZUTClosAPuoMP18MKAi1jyUNfxmFZa+4iszFvyNWLi9peX1cZhK e4s2GxYfLdIGFLqpyU/uqkG5hIV03eumboZleXbEmMfjo6HyU3GxG4x+9LBOTMhj XDYy6SA2u0Es6Sxc0tZD8q8m8/mCTF/2f5mrGcz2d+1GXA1npl18Gffz5YiJuvwF wn+jfMHc99POqwCiBZwMpkW9LdXYRKNNIXDU3PEW+GVcNeOb3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiHFem2rfTu5ecmZI5sQz21yOrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjIxMTg5ZmItZTIzZC0z ZWI5LTg5Y2EtMjA3NmZkYTY5Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV4zLmXaYCWmA8GsgW2Je1TtW3tzj3uM4GkRy9azObCk9gorW6+9AjO DKtANx2rcxEuTjLCXkTwopJFfCAI/RbnRspH+/dm8iZvhi5qO0Tg0YVnWo4RhbYd VnSL2Cr23G6aURL1VNpP0Cvt75gp9nsZqETNupwcBc5fNyzxZ9PDLUomXYCPgRXY Swo3K1QlTVTxK0vibsFldKBYfpNgPWyxq0iBW8uU8ihCBWiN7iaSm3edYjm1Ti8S v5CUjKiVeCw+pN/mg3aeLizDlyxCKC1KUnRrs2qHhhiyvas44b3BPagA6NRQQ1cJ DA1OAkb31kdn7EUgOEzyjXVMXpR5UXg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:08 2025 by rpki-client