$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa File: a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa (raw, json) Hash identifier: elk4QpBXe8JKGIlmr5w8g1yhRNixvPoRvSmlbK9EFMg= Subject key identifier: 26:08:FA:34:2F:CD:C3:14:60:09:AA:50:CD:13:75:CA:3D:BB:F0:63 Certificate issuer: /CN=8f815aac-9800-4d5f-b3d8-192e59cd145c Certificate serial: 010D0C9F4328584AD3A10ED70E1A1190E122D7C0 Authority key identifier: 76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 14588 IP address blocks: 104.219.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0e:d7:0e:1a:11:90:e1:22:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f815aac-9800-4d5f-b3d8-192e59cd145c Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=561f9fc7-0dce-4095-b7d2-5e1afecd93a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:6a:65:b9:06:70:eb:9f:13:21:76:2f:aa: ef:d0:f4:52:23:f3:d2:8d:8c:96:57:0e:72:b5:38: 29:df:27:cd:2c:87:50:f9:28:d5:b0:46:51:5e:4b: 00:df:97:fe:d2:c7:e2:1d:c9:14:a2:44:4c:8c:89: 54:fb:f2:d5:bb:ca:df:9c:73:79:39:10:ff:c4:1f: 87:20:9b:74:4a:06:87:69:50:2e:79:53:6c:ca:cc: a0:79:10:0a:6a:b8:e1:96:10:8a:3e:5c:5c:fb:23: 14:1a:91:2c:70:e9:be:49:6a:47:d7:b7:74:18:90: 7c:df:bc:15:3b:27:73:bf:a2:d9:6d:e1:8c:75:26: a6:55:14:da:2c:d3:4c:d9:d0:89:56:e7:a7:d8:67: 89:56:f4:78:f3:64:a8:9b:f4:a2:61:f5:a2:fb:cb: 0e:dc:22:5b:88:dc:30:a2:48:65:c7:b3:3c:81:34: 2a:6e:56:bf:96:ec:eb:36:7d:ce:a8:5c:d6:3a:0a: ca:8a:95:d5:bc:84:29:87:51:2d:bd:b5:32:d5:ae: 47:b1:3e:5b:28:68:3b:79:6b:3a:56:ae:5a:c9:51: f4:2a:4c:0b:dd:24:97:be:d5:d9:60:f7:45:af:fb: 26:2e:7d:e6:67:67:e7:af:33:7e:3f:df:fe:0a:7b: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:08:FA:34:2F:CD:C3:14:60:09:AA:50:CD:13:75:CA:3D:BB:F0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl X509v3 Authority Key Identifier: keyid:76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer sbgp-ipAddrBlock: critical IPv4: 104.219.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4f:a8:c6:be:c7:8b:54:a3:f4:c9:7a:fc:a8:21:83:11:f1: 17:32:72:27:3a:0c:33:14:2b:8f:06:da:53:b3:a9:4f:3a:29: 72:08:69:f3:46:9c:ee:0a:ef:95:27:56:3a:a1:02:bb:7e:b4: c8:cf:08:67:22:1d:ce:9e:56:7a:63:b3:dd:7d:08:ec:d1:b8: d3:f6:2e:60:0e:a1:ef:a9:2c:cd:d2:77:44:ec:2e:48:d4:aa: f0:05:a3:96:23:e5:ce:6b:79:8d:94:47:f5:62:9c:e7:a5:e9: df:c5:17:5a:5f:5b:6e:0f:cb:d1:b8:ac:48:ca:19:d7:d8:85: 07:4c:da:eb:76:29:b4:02:d8:44:87:0b:2a:aa:35:11:06:64: 74:61:3f:4e:af:ae:25:f0:5f:67:b8:c0:99:d5:c7:66:73:7d: 71:b5:a1:39:cc:a6:92:8e:1b:c3:b1:38:30:60:f2:eb:96:a7: 14:ef:23:33:e2:7f:42:56:0e:d1:36:a2:89:af:e1:5b:8d:a8: 85:73:dc:19:18:b1:82:05:05:cd:b5:d1:63:43:60:aa:48:4a: 26:5e:a9:65:bb:14:63:39:bb:ba:aa:0a:08:0a:c3:d1:15:9a: 01:86:ac:53:47:29:db:da:fd:d1:c5:51:14:08:28:15:6c:7c: b8:3e:4f:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToQ7XDhoRkOEi18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY4MTVhYWMtOTgwMC00ZDVmLWIzZDgtMTkyZTU5Y2Qx NDVjMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NTYxZjlmYzctMGRjZS00MDk1LWI3ZDItNWUxYWZlY2Q5M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN1qZbkGcOufEyF2L6rv0PRSI/PSjYyWVw5y tTgp3yfNLIdQ+SjVsEZRXksA35f+0sfiHckUokRMjIlU+/LVu8rfnHN5ORD/xB+H IJt0SgaHaVAueVNsysygeRAKarjhlhCKPlxc+yMUGpEscOm+SWpH17d0GJB837wV Oydzv6LZbeGMdSamVRTaLNNM2dCJVuen2GeJVvR482Som/SiYfWi+8sO3CJbiNww okhlx7M8gTQqbla/luzrNn3OqFzWOgrKipXVvIQph1EtvbUy1a5HsT5bKGg7eWs6 Vq5ayVH0KkwL3SSXvtXZYPdFr/smLn3mZ2fnrzN+P9/+Cnt1NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYI+jQvzcMUYAmqUM0Tdco9u/BjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjgx NWFhYy05ODAwLTRkNWYtYjNkOC0xOTJlNTljZDE0NWMvYTlmNzhlNjAtNzEyMC0z ZGE2LTllNWItOWM4NTkyMGRkMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY4MTVhYWMtOTgwMC00ZDVmLWIz ZDgtMTkyZTU5Y2QxNDVjLzhmODE1YWFjLTk4MDAtNGQ1Zi1iM2Q4LTE5MmU1OWNk MTQ1Yy5jcmwwHwYDVR0jBBgwFoAUdthC1yTja+NQ/IG4v/Fuz4iOjcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjgxNWFhYy05ODAwLTRkNWYtYjNkOC0xOTJl NTljZDE0NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJPqMa+x4tUo/TJevyoIYMR8Rcycic6DDMUK48G2lOzqU86KXIIafNG nO4K75UnVjqhArt+tMjPCGciHc6eVnpjs919COzRuNP2LmAOoe+pLM3Sd0TsLkjU qvAFo5Yj5c5reY2UR/VinOel6d/FF1pfW24Py9G4rEjKGdfYhQdM2ut2KbQC2ESH CyqqNREGZHRhP06vriXwX2e4wJnVx2ZzfXG1oTnMppKOG8OxODBg8uuWpxTvIzPi f0JWDtE2oomv4VuNqIVz3BkYsYIFBc210WNDYKpISiZeqWW7FGM5u7qqCggKw9EV mgGGrFNHKdva/dHFURQIKBVsfLg+T9Q= -----END CERTIFICATE-----Generated at Sun Aug 24 02:53:37 2025 by rpki-client