$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faedf950-c66c-3b14-ac74-e50d1d659e18.roa File: faedf950-c66c-3b14-ac74-e50d1d659e18.roa (raw, json) Hash identifier: wBzPmDnKvdjD+WSi7Q3ftOxy0SqdeM8FNN1sEzXpEVg= Subject key identifier: 6F:9D:C9:6B:29:2F:26:D6:E9:D3:29:71:10:85:37:D4:61:01:9E:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A7E7B8EDD297BDF6002B85D8E Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faedf950-c66c-3b14-ac74-e50d1d659e18.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 104.154.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8e:dd:29:7b:df:60:02:b8:5d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=52989ae0-96ca-46fc-a638-d552664be28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:34:4a:d5:36:67:3b:d2:cc:01:1d:5c:91:41: 6d:95:69:2c:1d:1a:3d:b8:19:4a:f7:bc:4f:4f:65: cb:01:e0:6b:63:7a:c8:ad:a7:35:ce:a4:b3:58:fe: e8:3f:a9:70:44:c2:92:41:c8:f6:01:36:58:9d:8d: bd:9c:1f:8e:69:9b:a6:92:a1:a2:a1:14:79:35:98: 9b:72:98:00:07:81:63:85:c8:1e:96:d4:58:57:e6: 77:a6:ac:b6:e4:d4:a5:95:d6:b0:36:18:fb:49:24: d2:a8:92:f5:95:2a:d7:ae:7d:9b:83:61:c0:a6:29: 7e:ba:d7:5f:5d:c8:13:6c:37:3d:5c:9e:d4:63:95: 81:a9:95:33:90:fa:27:93:04:8b:56:bf:78:cf:d6: df:a3:33:4c:1d:95:b1:ce:ff:f7:52:d3:c7:14:a8: da:2b:08:b6:c9:c6:93:bc:44:3f:09:1d:ce:71:c3: 96:42:b1:a6:3b:d1:b1:41:49:78:04:3d:a5:a5:09: 03:28:1d:37:ae:d5:b3:7f:71:00:ad:74:e1:d8:67: 69:2f:f6:0a:e9:6f:9e:7d:dc:99:0c:99:d8:17:36: bd:3b:14:74:d5:ef:61:3a:d6:f4:53:bd:20:bf:85: 5e:29:24:be:bc:a7:35:fa:bd:fe:2c:cf:4d:4f:a3: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9D:C9:6B:29:2F:26:D6:E9:D3:29:71:10:85:37:D4:61:01:9E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faedf950-c66c-3b14-ac74-e50d1d659e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0d:27:ca:5d:76:c7:93:85:55:46:39:b4:30:41:ae:c9:6c: cf:eb:94:28:2f:55:75:b6:24:33:cd:16:df:60:62:76:23:f8: a9:fe:0d:4e:f8:8c:ba:88:da:c8:9d:1f:90:61:84:43:d4:c5: 6f:0f:72:8b:f3:6a:dd:6b:66:2d:f2:5b:83:30:4d:26:f2:4f: fe:1a:ab:89:69:6a:24:13:60:94:34:79:3b:f9:05:e5:7a:cc: ac:da:c2:3f:ee:6e:89:2b:48:7c:61:1f:e7:5c:5e:76:f7:8c: b2:08:ab:14:20:91:65:b1:2f:cb:32:bd:0f:0a:b2:e8:f7:3c: 1a:e6:49:41:03:50:2f:15:46:7d:a1:f0:a5:13:f1:40:8e:7d: 2b:45:41:e0:85:4a:c6:ee:b4:90:76:6c:02:fe:38:bb:ac:36: b8:b3:7c:b6:22:82:5f:03:32:fa:2e:29:cd:9b:90:d9:9a:da: c1:57:9a:5d:4c:c7:2b:e7:3b:09:54:09:fa:60:ed:c5:42:83: 3f:93:92:d6:f9:e3:01:95:b4:4e:44:7e:21:19:c3:b7:fc:44: be:20:b9:00:71:d4:ef:6f:e6:86:2e:f4:f8:c0:15:25:e9:24: 4d:52:94:07:b0:4c:87:5e:e6:f8:eb:02:8e:01:02:f5:7c:33: 52:28:9e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e47dKXvfYAK4XY4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NTI5ODlhZTAtOTZjYS00NmZjLWE2MzgtZDU1MjY2NGJlMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDRK1TZnO9LMAR1ckUFtlWksHRo9uBlK97xP T2XLAeBrY3rIrac1zqSzWP7oP6lwRMKSQcj2ATZYnY29nB+OaZumkqGioRR5NZib cpgAB4FjhcgeltRYV+Z3pqy25NSlldawNhj7SSTSqJL1lSrXrn2bg2HApil+utdf XcgTbDc9XJ7UY5WBqZUzkPonkwSLVr94z9bfozNMHZWxzv/3UtPHFKjaKwi2ycaT vEQ/CR3OccOWQrGmO9GxQUl4BD2lpQkDKB03rtWzf3EArXTh2GdpL/YK6W+efdyZ DJnYFza9OxR01e9hOtb0U70gv4VeKSS+vKc1+r3+LM9NT6O0nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+dyWspLybW6dMpcRCFN9RhAZ7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmFlZGY5NTAtYzY2Yy0z YjE0LWFjNzQtZTUwZDFkNjU5ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADANJ8pddseThVVGObQwQa7JbM/rlCgvVXW2JDPNFt9gYnYj+Kn+DU74 jLqI2sidH5BhhEPUxW8Pcovzat1rZi3yW4MwTSbyT/4aq4lpaiQTYJQ0eTv5BeV6 zKzawj/ubokrSHxhH+dcXnb3jLIIqxQgkWWxL8syvQ8Ksuj3PBrmSUEDUC8VRn2h 8KUT8UCOfStFQeCFSsbutJB2bAL+OLusNrizfLYigl8DMvouKc2bkNma2sFXml1M xyvnOwlUCfpg7cVCgz+Tktb54wGVtE5EfiEZw7f8RL4guQBx1O9v5oYu9PjAFSXp JE1SlAewTIde5vjrAo4BAvV8M1IontU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:38:12 2025 by rpki-client