$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/393e7f75-5248-3b0e-90dc-0be84f528422.roa File: 393e7f75-5248-3b0e-90dc-0be84f528422.roa (raw, json) Hash identifier: yCue+2KZrnmBMpbDspK64DHxQPa6LtC7ZvXncB2LzsA= Subject key identifier: 03:96:24:64:59:A8:58:94:C8:70:97:44:36:21:81:7C:B7:23:78:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F377312F60586BAC5450400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/393e7f75-5248-3b0e-90dc-0be84f528422.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.199.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:73:12:f6:05:86:ba:c5:45:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=0dc2a23a-2f40-4840-8f8f-d116c1fec921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:ae:e0:07:6e:9c:48:92:e7:e9:67:aa:9f: 16:c7:bf:84:ff:50:3b:06:15:5c:a9:2c:b6:00:71: 96:5a:e5:36:09:b3:fb:6b:87:3b:c8:c4:c5:4d:a6: 66:da:29:89:c6:26:ea:80:62:ba:72:7a:14:09:9b: 1e:43:66:94:93:1c:6e:d3:8d:2f:24:19:60:10:d7: 7b:36:87:7b:0b:39:47:8b:93:43:e9:39:91:91:3c: d1:7f:44:be:a3:62:c9:93:01:db:88:12:eb:aa:ad: 7f:6d:c3:28:74:10:fe:0e:03:6a:21:5b:3f:c7:75: e7:eb:a2:c7:d8:7e:5b:94:29:80:8c:ed:b6:e2:80: 4e:47:0b:40:5f:3d:9a:5f:47:3d:24:26:8f:d3:4b: 6c:eb:4c:e9:9b:5b:56:71:ac:1e:03:70:0e:91:bc: 19:d1:04:e1:38:56:66:65:02:04:d0:ef:b1:ae:b3: 13:17:c6:71:16:4b:90:81:99:0d:88:29:ed:bf:9e: e5:c0:7c:1f:ea:f5:dc:c3:09:ab:a2:8c:4d:7a:1b: dd:40:58:d0:f3:28:20:09:a7:1a:86:ee:88:43:96: f5:d3:25:80:ec:6c:53:5e:36:a2:c0:8e:0f:21:2c: c8:08:2b:0e:7d:16:88:97:45:56:eb:12:7a:7e:ef: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:96:24:64:59:A8:58:94:C8:70:97:44:36:21:81:7C:B7:23:78:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/393e7f75-5248-3b0e-90dc-0be84f528422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:94:9e:02:75:56:80:07:3a:94:43:3a:65:ac:35:8a:3f:71: 7a:a6:a1:27:b1:80:38:b1:7f:a6:f7:31:5b:c2:0e:b8:3f:5f: d9:af:78:64:91:5f:4a:bb:14:da:70:0a:e7:f3:c7:d4:1f:ae: f7:4d:4e:d7:45:28:81:47:3f:ff:78:69:86:0c:ff:f7:5b:aa: cf:1d:3c:a5:57:4c:c3:50:48:35:3c:3c:00:cc:22:ed:d6:cd: f9:c7:d5:08:ad:4f:b2:87:75:ed:5c:11:3c:2b:a7:f9:20:1c: 8d:65:97:69:8a:9f:99:05:da:7f:4b:ae:ae:ea:70:4f:05:a8: 0f:69:52:57:05:48:de:55:2e:a1:39:6f:c9:db:9d:c3:8f:45: c9:69:a2:00:df:2d:62:2c:48:b5:00:df:ae:19:9b:2b:88:54: f0:6f:0b:19:47:33:f8:4c:14:0e:4b:0e:76:c1:76:8a:6f:5e: 72:5e:e4:46:9c:84:53:da:56:28:e3:7b:0a:19:35:93:37:49: e1:95:66:63:4e:8f:28:da:f5:fd:3d:40:40:1b:28:18:a7:a4: 96:32:a9:a5:f8:92:17:d2:9a:6a:40:4b:ee:32:09:6d:e7:a5: e0:96:c7:50:e2:80:29:bb:20:31:2c:05:86:d1:98:c7:65:25: d2:e8:0b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3MS9gWGusVFBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MGRjMmEyM2EtMmY0MC00ODQwLThmOGYtZDExNmMxZmVjOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtGu4AdunEiS5+lnqp8Wx7+E/1A7BhVcqSy2 AHGWWuU2CbP7a4c7yMTFTaZm2imJxibqgGK6cnoUCZseQ2aUkxxu040vJBlgENd7 Nod7CzlHi5ND6TmRkTzRf0S+o2LJkwHbiBLrqq1/bcModBD+DgNqIVs/x3Xn66LH 2H5blCmAjO224oBORwtAXz2aX0c9JCaP00ts60zpm1tWcaweA3AOkbwZ0QThOFZm ZQIE0O+xrrMTF8ZxFkuQgZkNiCntv57lwHwf6vXcwwmrooxNehvdQFjQ8yggCaca hu6IQ5b10yWA7GxTXjaiwI4PISzICCsOfRaIl0VW6xJ6fu8zsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOWJGRZqFiUyHCXRDYhgXy3I3j2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzkzZTdmNzUtNTI0OC0z YjBlLTkwZGMtMGJlODRmNTI4NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICUngJ1VoAHOpRDOmWsNYo/cXqmoSexgDixf6b3MVvCDrg/X9mveGSR X0q7FNpwCufzx9QfrvdNTtdFKIFHP/94aYYM//dbqs8dPKVXTMNQSDU8PADMIu3W zfnH1QitT7KHde1cETwrp/kgHI1ll2mKn5kF2n9Lrq7qcE8FqA9pUlcFSN5VLqE5 b8nbncOPRclpogDfLWIsSLUA364ZmyuIVPBvCxlHM/hMFA5LDnbBdopvXnJe5Eac hFPaVijjewoZNZM3SeGVZmNOjyja9f09QEAbKBinpJYyqaX4khfSmmpAS+4yCW3n peCWx1DigCm7IDEsBYbRmMdlJdLoC4I= -----END CERTIFICATE-----Generated at Mon Oct 20 10:38:33 2025 by rpki-client