$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa File: f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa (raw, json) Hash identifier: CyFCB81jOdV1+zA/UxMKvOVYFBJULVqwsspkufEZRuw= Subject key identifier: 42:C1:87:97:6A:8F:3D:8F:64:FB:BC:61:3D:D9:84:46:2B:75:8E:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B9A7A0DD3C51F33D9A2A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9a:7a:0d:d3:c5:1f:33:d9:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=31995ca5-a68a-4525-b132-41591d9ee2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:bb:9d:71:4f:33:76:05:1c:b0:1e:b9:91: f0:94:3a:bd:03:bc:ef:78:52:61:75:a5:b1:b1:03: 72:aa:e5:3f:e4:50:32:e2:ad:a4:52:35:a6:02:36: d2:61:6c:06:c4:cb:77:be:13:1b:f5:ab:8c:d8:84: 5f:21:7b:86:3f:f3:07:64:f9:74:af:cb:e8:ec:6a: 39:bb:91:f6:35:5a:09:4a:54:cf:22:d7:b8:4a:fa: 7d:e7:ad:e8:b5:a2:8f:2d:39:11:13:64:49:a9:be: 5c:6f:ec:b4:39:ae:9d:73:d4:83:96:18:80:58:7c: 63:9e:e2:65:d1:0a:14:9e:62:03:39:0e:bd:31:fd: ae:bf:5d:b4:78:44:e9:f0:3a:83:35:20:94:90:12: cc:3c:77:e8:9c:d3:3a:db:cf:cb:06:be:2a:67:92: 6c:33:45:dc:99:cd:58:8a:ff:51:c5:6a:78:9b:60: 79:60:b0:2c:54:d1:4d:97:75:d9:c9:e7:70:88:57: 95:8e:6c:09:b5:15:62:be:71:e6:90:cb:ca:2a:40: 48:63:23:a4:c5:3c:f7:f4:21:ef:24:04:c8:bb:84: 7e:af:b3:8b:d0:75:9a:98:44:96:ba:5d:7d:6d:09: e6:c2:d0:f1:42:01:30:39:8f:14:f1:d6:5f:38:98: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C1:87:97:6A:8F:3D:8F:64:FB:BC:61:3D:D9:84:46:2B:75:8E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:55:64:84:45:08:53:9e:8d:bd:7f:82:4d:b0:20:de:5d:bc: f0:a0:7d:e9:6d:1b:a1:1e:34:fc:2d:08:a3:00:7c:ce:37:34: 33:c3:9c:1f:61:79:ca:4a:26:63:b2:87:7b:86:08:74:12:48: a7:16:ab:ba:f5:18:e8:da:4e:b0:7e:77:e0:f5:ae:c9:0c:4b: b0:a1:55:d0:22:a2:95:c1:56:c7:0e:40:88:a3:10:a7:b0:dc: 6c:cd:81:81:c7:27:ae:4c:b2:14:27:1a:9a:00:af:d0:91:17: fd:b0:b0:42:8a:01:83:6d:f8:5a:00:5a:a9:18:ed:d5:25:12: 2c:b2:0d:74:9d:4f:85:0b:1f:cf:6c:dc:bb:12:5f:ea:93:b3: fb:9c:6d:ce:47:51:fb:a1:41:71:4a:bc:8d:b6:3f:87:b3:38: c9:b0:bc:37:8c:3c:20:85:ac:9d:e2:de:87:5a:62:d0:6a:ef: d3:02:87:41:91:ce:a4:97:ad:ee:1f:e1:8a:ca:97:87:f9:08: fc:e2:98:ea:bf:2c:bf:9a:11:f4:60:4e:f9:21:1d:55:e5:b5: 2f:9e:ec:8c:16:bc:5e:44:c5:ce:83:f2:d2:0f:a7:e0:c5:cd: 65:d3:c5:a4:6e:7c:17:03:b9:4c:e1:18:f2:b5:59:0e:5c:76: 1b:47:84:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5p6DdPFHzPZoqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MzE5OTVjYTUtYTY4YS00NTI1LWIxMzItNDE1OTFkOWVlMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK67nXFPM3YFHLAeuZHwlDq9A7zveFJhdaWx sQNyquU/5FAy4q2kUjWmAjbSYWwGxMt3vhMb9auM2IRfIXuGP/MHZPl0r8vo7Go5 u5H2NVoJSlTPIte4Svp9563otaKPLTkRE2RJqb5cb+y0Oa6dc9SDlhiAWHxjnuJl 0QoUnmIDOQ69Mf2uv120eETp8DqDNSCUkBLMPHfonNM628/LBr4qZ5JsM0Xcmc1Y iv9RxWp4m2B5YLAsVNFNl3XZyedwiFeVjmwJtRVivnHmkMvKKkBIYyOkxTz39CHv JATIu4R+r7OL0HWamESWul19bQnmwtDxQgEwOY8U8dZfOJj8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELBh5dqjz2PZPu8YT3ZhEYrdY7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjlmNmYzMDgtMmMyNC0z Yjg0LWI0YmMtMDBlMWMyZjBlNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9VZIRFCFOejb1/gk2wIN5dvPCgfeltG6EeNPwtCKMAfM43NDPDnB9h ecpKJmOyh3uGCHQSSKcWq7r1GOjaTrB+d+D1rskMS7ChVdAiopXBVscOQIijEKew 3GzNgYHHJ65MshQnGpoAr9CRF/2wsEKKAYNt+FoAWqkY7dUlEiyyDXSdT4ULH89s 3LsSX+qTs/ucbc5HUfuhQXFKvI22P4ezOMmwvDeMPCCFrJ3i3odaYtBq79MCh0GR zqSXre4f4YrKl4f5CPzimOq/LL+aEfRgTvkhHVXltS+e7IwWvF5Exc6D8tIPp+DF zWXTxaRufBcDuUzhGPK1WQ5cdhtHhEI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:30 2025 by rpki-client