$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa File: 0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa (raw, json) Hash identifier: omBq+VxHupPZ0mi9o93dAJNWRWcmNRWYmhfLkm9MnoM= Subject key identifier: E5:8A:D6:63:3F:3D:9B:61:50:B7:EA:93:83:04:D5:72:66:8E:16:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3730F583D1244F176D4380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.154.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:30:f5:83:d1:24:4f:17:6d:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=cb38a1ca-8d41-4fb9-a642-6ad6602324f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:0f:ad:c0:f5:8a:a5:b7:c8:a2:6f:86:38: 6a:08:f9:65:4e:2f:77:87:0b:86:28:1e:fb:1b:c0: 0c:90:66:17:05:05:32:d0:30:ed:61:87:dc:b4:92: be:00:16:77:f4:d9:37:33:85:d0:cb:1e:bb:03:e7: a7:fc:48:02:fd:c3:f3:e5:dc:39:68:ec:39:b6:ec: ca:16:b2:fd:c7:15:cd:02:98:b2:f6:46:7e:b6:33: 7b:9f:c2:63:84:c4:93:d2:7e:dd:d0:10:98:1e:a0: aa:e9:c3:be:91:45:f8:b0:47:e6:67:9b:36:59:dc: 4d:12:98:10:ef:ae:7f:24:97:92:dd:b9:da:9b:5f: 1f:29:06:b4:6d:74:8f:49:ec:83:8c:46:55:cb:4f: 23:9a:79:25:0e:8c:45:17:47:b5:b4:d6:e7:91:af: 45:54:7a:c2:12:43:54:b3:13:24:ad:0d:c5:e7:c5: aa:cf:da:f1:62:b1:1a:76:f9:fd:fb:7c:2e:6e:97: c7:30:58:bf:43:d5:af:9d:65:d1:78:4d:64:30:50: cd:00:d5:b0:7c:36:43:04:06:73:be:89:19:06:c2: 68:54:ca:a8:87:1f:8b:a7:b8:20:71:3e:28:50:28: 2f:ea:94:b8:cf:ba:2c:0e:51:e7:6d:4c:47:f6:0e: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:D6:63:3F:3D:9B:61:50:B7:EA:93:83:04:D5:72:66:8E:16:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:2d:4e:1d:56:a1:ea:fa:ea:06:58:a8:e1:6b:78:9d:22:d6: ca:36:27:bc:d4:1a:2f:84:8e:30:cf:a0:6c:c9:de:53:c0:7c: ee:d6:1f:a2:95:d5:5a:86:9a:b2:9d:09:da:bc:81:ce:1b:c7: bc:52:51:a8:c3:9b:8f:24:0d:88:92:cb:73:b7:17:86:3f:6c: 5c:cc:e3:67:7b:65:18:72:3e:59:6c:94:95:71:5f:7c:54:10: 07:58:ff:c9:b1:ce:09:ef:ff:d0:30:2a:0c:ac:01:65:12:b7: d3:8b:07:b2:d6:0d:7c:60:0a:30:52:a4:5f:42:45:c4:d5:40: 33:21:23:f6:2f:e3:78:91:ad:fa:95:cd:12:8a:bc:84:d3:c6: 0b:d9:18:ba:49:b6:92:5a:2b:ab:fb:b1:d2:2c:86:fe:53:67: cd:8c:b1:ce:1f:af:b0:0e:a9:2b:ab:10:0b:4f:22:76:88:12: 52:6c:b7:40:29:c3:b2:9f:97:61:a7:94:7d:f7:d5:2b:b1:84: 5c:f2:37:cb:cb:99:95:57:6d:80:4e:fb:bd:c9:46:10:e8:43: 94:d9:f7:f4:d5:00:fb:ad:f3:cb:ed:ff:35:b5:b7:ca:1a:1d: d7:c1:bd:cd:06:e2:11:4b:33:35:82:c2:88:c5:b1:1d:67:bc: ac:92:85:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzD1g9EkTxdtQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2IzOGExY2EtOGQ0MS00ZmI5LWE2NDItNmFkNjYwMjMyNGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1poPrcD1iqW3yKJvhjhqCPllTi93hwuGKB77 G8AMkGYXBQUy0DDtYYfctJK+ABZ39Nk3M4XQyx67A+en/EgC/cPz5dw5aOw5tuzK FrL9xxXNApiy9kZ+tjN7n8JjhMST0n7d0BCYHqCq6cO+kUX4sEfmZ5s2WdxNEpgQ 765/JJeS3bnam18fKQa0bXSPSeyDjEZVy08jmnklDoxFF0e1tNbnka9FVHrCEkNU sxMkrQ3F58Wqz9rxYrEadvn9+3wubpfHMFi/Q9WvnWXReE1kMFDNANWwfDZDBAZz vokZBsJoVMqohx+Lp7ggcT4oUCgv6pS4z7osDlHnbUxH9g5FQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWK1mM/PZthULfqk4ME1XJmjhbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQzZDYzY2EtNmE3YS0z ZWFjLWI4ZmMtN2QzNjI4NTE0NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgtTh1Woer66gZYqOFreJ0i1so2J7zUGi+EjjDPoGzJ3lPAfO7WH6KV 1VqGmrKdCdq8gc4bx7xSUajDm48kDYiSy3O3F4Y/bFzM42d7ZRhyPllslJVxX3xU EAdY/8mxzgnv/9AwKgysAWUSt9OLB7LWDXxgCjBSpF9CRcTVQDMhI/Yv43iRrfqV zRKKvITTxgvZGLpJtpJaK6v7sdIshv5TZ82Msc4fr7AOqSurEAtPInaIElJst0Ap w7Kfl2GnlH331SuxhFzyN8vLmZVXbYBO+73JRhDoQ5TZ9/TVAPut88vt/zW1t8oa HdfBvc0G4hFLMzWCwojFsR1nvKyShfo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:45 2025 by rpki-client