$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0586fa12-755e-307c-94ca-6cf2a53d3ec3.roa File: 0586fa12-755e-307c-94ca-6cf2a53d3ec3.roa (raw, json) Hash identifier: 0hLamN1HcfTa3MYHwMSRmqqENEGXQZUVpbIwmlyj3MM= Subject key identifier: 87:2E:B7:62:61:2F:8C:AE:75:C4:F2:44:D0:A5:A8:68:37:2B:E0:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3733CBE401A55E20F2F530 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0586fa12-755e-307c-94ca-6cf2a53d3ec3.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.196.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:33:cb:e4:01:a5:5e:20:f2:f5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=1461988d-681b-4fb4-9263-a82345c97de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:7e:99:25:c4:d8:2a:ae:be:eb:90:69:c6: 41:a2:e6:07:8f:c9:a8:c4:58:28:ef:4d:34:33:1e: f7:05:4d:59:79:7e:ad:fc:61:3c:63:21:41:10:a8: bf:57:fc:38:3a:9d:e3:7e:15:0e:4a:29:1d:49:2f: d2:81:00:00:7e:5d:b7:6f:93:c1:a6:02:4f:78:94: f8:a6:55:4d:d1:8e:44:c4:4e:b8:17:bd:ae:3d:13: 4e:3a:3c:f7:5a:e2:1c:a9:5c:cf:ba:07:d5:50:04: 71:b5:20:76:2f:06:c1:af:f8:44:9a:ee:47:9b:e7: 27:0b:2a:2b:f4:01:70:9b:c0:e8:02:03:5b:6c:28: e6:29:87:47:68:b2:67:d6:a3:cc:5a:b6:14:95:df: ae:95:01:85:33:02:29:5f:20:2c:a1:88:3c:d9:10: 38:5e:bc:39:97:ed:41:ff:65:f9:28:5c:a5:4a:8e: be:3b:a4:c2:d4:4a:eb:be:64:89:56:dc:77:83:02: a4:f1:82:91:0e:26:28:1c:2b:81:83:70:2a:27:53: e4:0c:06:fb:19:f5:26:60:db:5a:4b:b9:76:d3:ab: de:85:60:fe:3a:39:c5:7e:eb:e7:23:33:a9:79:5a: a2:d1:5a:29:d4:9d:f1:af:ef:66:b1:7c:22:41:39: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2E:B7:62:61:2F:8C:AE:75:C4:F2:44:D0:A5:A8:68:37:2B:E0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0586fa12-755e-307c-94ca-6cf2a53d3ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:18:8d:da:2a:5b:09:1b:92:c1:ea:61:f3:f1:65:2e:fa:99: 0d:ee:b5:7e:2c:23:8d:b9:3b:88:25:22:b7:81:3b:28:fb:6d: f8:0b:26:79:9f:3f:10:ff:d5:c5:70:2f:31:80:b6:bd:95:57: b5:5d:68:0a:4c:0d:23:47:5a:f2:57:af:e2:a1:7a:e4:fc:5b: 73:c0:df:d5:f1:0f:cb:e2:a1:0b:4f:34:f4:5c:ec:70:3c:c0: 93:ed:0f:17:6b:e9:2c:ec:22:2e:5a:7e:90:7a:89:3d:f9:07: 43:40:0e:a5:7d:70:f3:5e:19:03:05:63:2a:bb:c6:93:82:c1: 63:d6:85:4b:02:d2:e3:80:71:c5:0a:06:79:96:e4:d3:70:89: cb:5d:67:16:21:56:48:a8:d2:ba:9b:64:b6:e6:1f:29:74:69: a9:1d:6b:1b:ed:70:b4:be:d4:49:68:2d:ea:92:57:e5:4e:86: 37:58:88:91:74:3f:d4:6c:91:35:e0:eb:99:d2:30:b2:d9:f0: cf:89:a5:2c:02:c9:7c:8b:6c:d1:5e:70:0f:d5:0b:4c:62:a9: b6:3e:00:64:6b:a5:bc:8f:8d:8f:c0:1d:ef:02:62:9a:96:1c: 49:88:7c:0c:53:0c:17:5e:b4:89:6d:d5:cf:ef:c2:42:77:d0: 54:83:97:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzPL5AGlXiDy9TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MTQ2MTk4OGQtNjgxYi00ZmI0LTkyNjMtYTgyMzQ1Yzk3ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJN+mSXE2CquvuuQacZBouYHj8moxFgo7000 Mx73BU1ZeX6t/GE8YyFBEKi/V/w4Op3jfhUOSikdSS/SgQAAfl23b5PBpgJPeJT4 plVN0Y5ExE64F72uPRNOOjz3WuIcqVzPugfVUARxtSB2LwbBr/hEmu5Hm+cnCyor 9AFwm8DoAgNbbCjmKYdHaLJn1qPMWrYUld+ulQGFMwIpXyAsoYg82RA4Xrw5l+1B /2X5KFylSo6+O6TC1ErrvmSJVtx3gwKk8YKRDiYoHCuBg3AqJ1PkDAb7GfUmYNta S7l206vehWD+OjnFfuvnIzOpeVqi0Vop1J3xr+9msXwiQTnEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcut2JhL4yudcTyRNClqGg3K+AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDU4NmZhMTItNzU1ZS0z MDdjLTk0Y2EtNmNmMmE1M2QzZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEYjdoqWwkbksHqYfPxZS76mQ3utX4sI425O4glIreBOyj7bfgLJnmf PxD/1cVwLzGAtr2VV7VdaApMDSNHWvJXr+KheuT8W3PA39XxD8vioQtPNPRc7HA8 wJPtDxdr6SzsIi5afpB6iT35B0NADqV9cPNeGQMFYyq7xpOCwWPWhUsC0uOAccUK BnmW5NNwictdZxYhVkio0rqbZLbmHyl0aakdaxvtcLS+1EloLeqSV+VOhjdYiJF0 P9RskTXg65nSMLLZ8M+JpSwCyXyLbNFecA/VC0xiqbY+AGRrpbyPjY/AHe8CYpqW HEmIfAxTDBdetIlt1c/vwkJ30FSDlzA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:09 2025 by rpki-client