$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eada6c8-9189-3262-b2ac-599737b70a7c.roa File: 0eada6c8-9189-3262-b2ac-599737b70a7c.roa (raw, json) Hash identifier: 16LrBfT4Jvyw4EvEuoP0Mlu5OWa54v5aZhjiwdHtKns= Subject key identifier: DF:05:1F:3C:81:2B:14:23:75:B8:A0:A1:BE:B3:C2:1C:A2:82:6F:1A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3775D0FE187950B8763040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eada6c8-9189-3262-b2ac-599737b70a7c.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.198.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:75:d0:fe:18:79:50:b8:76:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=00926509-3074-47f2-b213-87751308ebf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:fd:00:6e:ba:05:9a:65:65:fc:31:55:9e: c2:a4:17:c3:83:58:50:4c:89:88:66:fb:a8:bf:9e: 32:65:03:33:db:d1:eb:40:19:9f:ec:2e:5e:b3:d5: ad:e0:a7:c5:00:b1:0c:56:d5:3d:89:c3:81:df:e2: b0:b4:ad:7e:5e:4b:20:75:a4:01:48:c7:71:90:e2: ff:25:6e:d2:16:e5:fa:47:2f:a6:e3:d8:9a:4b:f5: d2:04:6e:0a:d0:c0:e4:c7:c6:88:c3:61:06:d6:b1: b5:4e:ce:4f:a2:9f:34:a3:92:28:a1:27:64:bc:7d: 5b:bb:f9:0f:ef:5b:c5:de:59:51:72:04:fa:fb:23: 72:0f:82:93:9d:a4:d2:1a:de:4d:c4:49:64:23:85: 44:38:8b:46:47:7e:ee:7a:2f:72:48:a1:2b:b9:c1: eb:7d:38:da:ab:af:73:c6:2b:e0:52:ed:a1:c1:99: 55:e3:71:fa:c4:57:9e:dc:0c:65:59:a6:bf:37:71: ad:2b:5c:7f:8e:a5:3b:af:3b:cc:b5:ce:74:02:f8: 17:6d:3a:ac:ff:75:fb:f9:5a:fb:da:7a:00:2f:9f: fd:e5:9d:80:b7:db:09:ec:31:72:5e:cd:10:13:b2: 2d:d2:a6:bf:18:ce:8a:24:aa:0e:f4:5b:b1:27:04: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:05:1F:3C:81:2B:14:23:75:B8:A0:A1:BE:B3:C2:1C:A2:82:6F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eada6c8-9189-3262-b2ac-599737b70a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1d:8d:12:7e:d9:0e:c0:6d:cd:7f:b2:5e:9c:be:83:a6:da: 45:54:bc:ca:e0:f3:13:54:89:a9:b0:e5:93:54:bc:8b:1d:d2: ab:4f:ac:e4:58:74:c1:f6:c0:e8:a0:da:73:9b:5a:b6:3f:f3: 2a:e1:3b:d3:53:5b:99:ee:ab:54:cf:3f:ba:1b:6f:d6:d8:f0: f1:b2:d6:d9:82:36:db:6b:d2:08:26:16:86:6a:39:ed:1c:84: 05:5a:d4:99:0c:25:f0:91:cf:7b:bd:60:93:52:b2:cb:80:60: eb:66:cb:24:42:f6:9e:6c:84:84:bd:31:23:8c:23:f8:22:6e: 21:6d:03:b6:85:4d:b2:da:a2:71:13:a0:95:fc:67:69:9b:be: 20:36:66:02:1a:1c:08:2f:07:1e:df:7e:c6:78:70:8c:fd:66: 45:72:38:eb:0f:80:6d:a2:9f:fa:c4:93:28:c6:fc:d9:27:48: 7e:2c:10:64:26:81:99:f3:c1:a8:b8:fd:09:c4:12:42:73:4c: 1d:03:a0:5a:a4:84:0a:54:15:5c:fa:15:d2:d0:c0:bb:78:5e: 42:da:28:4b:3e:e6:72:03:42:56:09:73:6b:ec:c8:a2:80:79: cf:2a:34:e6:e3:c3:d4:ec:8d:26:2d:c8:c6:e1:b3:a1:4b:9b: 1c:e5:35:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3XQ/hh5ULh2MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MDA5MjY1MDktMzA3NC00N2YyLWIyMTMtODc3NTEzMDhlYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgn9AG66BZplZfwxVZ7CpBfDg1hQTImIZvuo v54yZQMz29HrQBmf7C5es9Wt4KfFALEMVtU9icOB3+KwtK1+XksgdaQBSMdxkOL/ JW7SFuX6Ry+m49iaS/XSBG4K0MDkx8aIw2EG1rG1Ts5Pop80o5IooSdkvH1bu/kP 71vF3llRcgT6+yNyD4KTnaTSGt5NxElkI4VEOItGR37uei9ySKErucHrfTjaq69z xivgUu2hwZlV43H6xFee3AxlWaa/N3GtK1x/jqU7rzvMtc50AvgXbTqs/3X7+Vr7 2noAL5/95Z2At9sJ7DFyXs0QE7It0qa/GM6KJKoO9FuxJwQCsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8FHzyBKxQjdbigob6zwhyigm8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGVhZGE2YzgtOTE4OS0z MjYyLWIyYWMtNTk5NzM3YjcwYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsdjRJ+2Q7Abc1/sl6cvoOm2kVUvMrg8xNUiamw5ZNUvIsd0qtPrORY dMH2wOig2nObWrY/8yrhO9NTW5nuq1TPP7obb9bY8PGy1tmCNttr0ggmFoZqOe0c hAVa1JkMJfCRz3u9YJNSssuAYOtmyyRC9p5shIS9MSOMI/gibiFtA7aFTbLaonET oJX8Z2mbviA2ZgIaHAgvBx7ffsZ4cIz9ZkVyOOsPgG2in/rEkyjG/NknSH4sEGQm gZnzwai4/QnEEkJzTB0DoFqkhApUFVz6FdLQwLt4XkLaKEs+5nIDQlYJc2vsyKKA ec8qNObjw9TsjSYtyMbhs6FLmxzlNfU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:13:26 2025 by rpki-client