$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa File: 8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa (raw, json) Hash identifier: c1j5dWonvp/zlaQPCsjQ/1NIUo67aLDFpJ58uEFGqAw= Subject key identifier: CE:CC:4F:D1:12:CE:B4:BA:D9:A1:13:C1:6D:DC:B7:D2:13:6E:A7:72 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F376017975BDB2A7316B900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.196.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:60:17:97:5b:db:2a:73:16:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=bfb4aba0-fad6-427e-80b7-e06eec604d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:1d:37:d6:df:52:9b:80:0a:81:56:49:a9: 4b:c7:de:d4:ff:11:89:26:33:f6:27:3e:20:ff:6c: 2a:0f:8c:14:88:cd:cd:5c:8f:ba:98:00:ab:21:9b: bc:88:53:bf:46:99:f8:cd:85:9c:7f:58:76:4f:7e: 05:94:73:4e:4a:36:dd:fd:be:a5:0f:62:4d:b6:f3: b1:8d:05:42:4d:76:72:84:39:23:67:40:43:65:6f: a1:a7:bd:cd:27:0f:72:b6:ab:04:4d:05:da:7b:16: 3d:ac:cd:a5:26:df:ba:6b:6c:6f:5f:5d:9f:de:36: fd:6e:8c:8f:f0:67:24:24:f7:ad:94:0c:45:16:5e: e1:22:db:c9:97:67:05:ef:71:99:0d:ab:bf:1b:4c: 3b:f2:52:eb:d7:ed:09:39:38:cd:8d:c3:df:5b:be: ce:36:81:67:50:b6:ee:46:76:64:bb:b8:1d:f1:74: 5a:03:fa:41:f5:13:c9:df:86:78:6c:c4:8e:32:0f: 18:ea:8c:7d:a8:35:74:a2:66:34:b3:5b:23:2d:ed: 5c:7e:50:86:19:bc:ae:58:cf:56:16:09:ba:7f:99: b9:03:2d:15:49:29:ae:dd:5a:93:1f:d2:3e:cd:3b: 93:33:7e:a5:a3:2b:e2:00:7c:fd:c4:85:60:99:f7: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CC:4F:D1:12:CE:B4:BA:D9:A1:13:C1:6D:DC:B7:D2:13:6E:A7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f9:39:d9:6c:f1:19:94:c9:fa:d1:23:10:40:48:1d:9c:f5: f7:b0:13:ad:f5:ad:7b:ae:29:87:ec:2a:89:ce:9f:e4:94:27: d1:29:b2:ba:52:bd:3f:27:34:bf:9d:bd:68:1f:e2:d1:4f:7f: 7f:c9:58:19:c3:91:70:c5:1b:1c:4a:98:f3:9e:0b:52:f0:cc: 20:32:01:be:dd:eb:63:74:ba:1d:48:83:14:e6:5e:10:8a:bc: 99:83:dc:44:19:62:49:27:01:50:47:a0:49:9e:af:58:93:47: dd:90:e4:86:8e:14:8d:ba:72:81:6c:32:13:e4:00:00:e7:06: 2b:d3:68:77:e9:11:38:25:1e:31:89:9b:c6:67:ec:00:eb:65: 6b:1c:73:01:0b:da:4b:7f:6f:ce:cc:e3:9a:e2:b6:0b:ea:ff: 0b:27:74:b7:3c:bf:f7:b0:8a:01:87:aa:47:f1:21:2f:bf:c5: cd:bf:3a:6c:fc:6e:43:ae:f1:42:39:dc:8d:ef:2a:63:73:8d: 7e:45:fc:de:c2:13:39:3d:8e:e8:96:d8:1e:52:1d:d5:8b:65: de:2c:b3:15:26:d0:01:67:73:ab:a3:58:7e:13:81:ac:27:9a: 5f:26:f1:70:88:54:50:34:8b:b9:62:57:a4:55:a5:8e:38:c0: 47:e6:1b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2AXl1vbKnMWuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YmZiNGFiYTAtZmFkNi00MjdlLTgwYjctZTA2ZWVjNjA0ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwkdN9bfUpuACoFWSalLx97U/xGJJjP2Jz4g /2wqD4wUiM3NXI+6mACrIZu8iFO/Rpn4zYWcf1h2T34FlHNOSjbd/b6lD2JNtvOx jQVCTXZyhDkjZ0BDZW+hp73NJw9ytqsETQXaexY9rM2lJt+6a2xvX12f3jb9boyP 8GckJPetlAxFFl7hItvJl2cF73GZDau/G0w78lLr1+0JOTjNjcPfW77ONoFnULbu RnZku7gd8XRaA/pB9RPJ34Z4bMSOMg8Y6ox9qDV0omY0s1sjLe1cflCGGbyuWM9W Fgm6f5m5Ay0VSSmu3VqTH9I+zTuTM36loyviAHz9xIVgmff37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7MT9ESzrS62aETwW3ct9ITbqdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODMzOGIzY2YtYzU4Yy0z N2ExLWEyYjQtMjQ0Zjk2YzNlNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH5Odls8RmUyfrRIxBASB2c9fewE631rXuuKYfsKonOn+SUJ9EpsrpS vT8nNL+dvWgf4tFPf3/JWBnDkXDFGxxKmPOeC1LwzCAyAb7d62N0uh1IgxTmXhCK vJmD3EQZYkknAVBHoEmer1iTR92Q5IaOFI26coFsMhPkAADnBivTaHfpETglHjGJ m8Zn7ADrZWsccwEL2kt/b87M45ritgvq/wsndLc8v/ewigGHqkfxIS+/xc2/Omz8 bkOu8UI53I3vKmNzjX5F/N7CEzk9juiW2B5SHdWLZd4ssxUm0AFnc6ujWH4Tgawn ml8m8XCIVFA0i7liV6RVpY44wEfmG04= -----END CERTIFICATE-----Generated at Wed Oct 22 23:20:33 2025 by rpki-client