$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39575516-689b-3bec-8266-5f4ad6379e0d.roa File: 39575516-689b-3bec-8266-5f4ad6379e0d.roa (raw, json) Hash identifier: Sdoao+cFiVF1amP0zg6AMZrDhOjFErqboT053IG5JVg= Subject key identifier: 9A:27:53:B8:6D:EF:DD:33:EC:B4:48:2B:EA:4E:7C:8D:B3:DE:FB:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3764722A6598BB2A0E8F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39575516-689b-3bec-8266-5f4ad6379e0d.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.199.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:64:72:2a:65:98:bb:2a:0e:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=6a275e6b-624d-4da8-96c7-cf4e34346bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:4f:a6:c0:89:dc:ab:3c:65:63:ae:b3:42: 09:91:bd:21:55:26:87:c1:4f:75:4d:8a:bc:32:51: 63:ea:5d:ec:0c:64:c6:50:ee:79:6e:79:73:3a:bb: 55:d1:76:01:32:12:eb:11:c4:88:6f:65:f2:41:fd: c3:00:78:b8:c2:90:4b:46:88:d8:39:25:d2:92:9c: 1c:29:3c:5e:5e:28:01:fc:ce:65:45:38:24:2b:45: 65:dd:57:bc:66:07:3c:a0:df:be:0c:3c:a7:59:f1: 2f:14:11:b0:70:ef:a9:9a:4d:ab:26:7f:e7:4c:00: 2a:b3:52:b4:65:f9:14:c0:09:c9:6b:50:a7:2c:b4: c1:b0:d9:a6:22:74:f7:a7:03:5c:f2:51:22:cb:e8: c8:c4:63:e6:22:0e:2f:fb:b1:00:af:91:ab:89:4f: cd:59:fe:3f:d9:6d:11:53:bd:69:f7:10:cb:91:31: 0d:46:4e:8a:10:98:69:61:76:ed:f6:d4:1f:38:93: f2:25:7c:bd:be:f2:ba:b6:4e:43:38:8c:5f:af:df: 59:6d:93:c7:a0:48:59:06:71:d0:31:45:18:f0:fd: 39:5a:48:28:b3:72:dc:36:5e:ff:be:a4:82:75:15: 81:6e:29:77:f9:49:b5:71:f3:61:73:a3:c3:6a:95: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:27:53:B8:6D:EF:DD:33:EC:B4:48:2B:EA:4E:7C:8D:B3:DE:FB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39575516-689b-3bec-8266-5f4ad6379e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:73:8a:9c:29:3e:ac:33:b6:68:2b:b6:22:d0:44:12:e5:8c: 66:c9:42:17:a0:9c:b6:b1:44:8e:cb:52:71:1a:ad:77:e9:66: 43:e8:65:38:44:1b:cb:85:26:57:44:7e:0d:81:17:58:c8:4c: c0:48:a6:45:a2:e3:d0:52:77:10:29:32:b7:7c:d4:ce:f4:89: e7:a4:78:d1:48:1a:6b:bb:a5:c3:fc:90:5a:9d:f7:a9:85:86: 36:4a:e3:0a:4c:fd:fb:01:df:7a:2d:7a:8a:97:55:db:19:b0: 44:4c:46:29:ae:f1:27:d6:92:42:9a:0c:ee:68:b3:fc:8c:d4: f3:4e:ef:78:f6:6b:51:e3:ae:75:3c:4c:49:7d:53:63:df:2a: 98:1c:ad:0b:a1:e1:14:ec:ca:fc:c1:62:37:00:3a:d3:1f:4f: fc:e8:42:4a:3b:08:b2:48:8c:51:ec:5a:60:a5:cb:c8:44:28: e9:0e:5a:fa:ef:ad:e5:ef:f3:d4:aa:ff:8b:2c:26:6e:0c:b5: b8:1b:84:33:a2:d5:66:1a:b6:15:87:5f:58:fc:1b:42:a6:9f: b4:93:c8:2d:1f:4e:b4:ee:f3:b4:54:5f:21:8d:28:ec:e3:dc: b6:a5:09:2a:98:5e:7d:ef:81:0d:ff:a3:7c:c7:f8:0c:22:a2: 38:1b:ea:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2RyKmWYuyoOj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NmEyNzVlNmItNjI0ZC00ZGE4LTk2YzctY2Y0ZTM0MzQ2YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCRPpsCJ3Ks8ZWOus0IJkb0hVSaHwU91TYq8 MlFj6l3sDGTGUO55bnlzOrtV0XYBMhLrEcSIb2XyQf3DAHi4wpBLRojYOSXSkpwc KTxeXigB/M5lRTgkK0Vl3Ve8Zgc8oN++DDynWfEvFBGwcO+pmk2rJn/nTAAqs1K0 ZfkUwAnJa1CnLLTBsNmmInT3pwNc8lEiy+jIxGPmIg4v+7EAr5GriU/NWf4/2W0R U71p9xDLkTENRk6KEJhpYXbt9tQfOJPyJXy9vvK6tk5DOIxfr99ZbZPHoEhZBnHQ MUUY8P05Wkgos3LcNl7/vqSCdRWBbil3+Um1cfNhc6PDapWneQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJonU7ht790z7LRIK+pOfI2z3vthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzk1NzU1MTYtNjg5Yi0z YmVjLTgyNjYtNWY0YWQ2Mzc5ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdzipwpPqwztmgrtiLQRBLljGbJQhegnLaxRI7LUnEarXfpZkPoZThE G8uFJldEfg2BF1jITMBIpkWi49BSdxApMrd81M70ieekeNFIGmu7pcP8kFqd96mF hjZK4wpM/fsB33oteoqXVdsZsERMRimu8SfWkkKaDO5os/yM1PNO73j2a1HjrnU8 TEl9U2PfKpgcrQuh4RTsyvzBYjcAOtMfT/zoQko7CLJIjFHsWmCly8hEKOkOWvrv reXv89Sq/4ssJm4MtbgbhDOi1WYathWHX1j8G0Kmn7STyC0fTrTu87RUXyGNKOzj 3LalCSqYXn3vgQ3/o3zH+Awiojgb6ik= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:48 2025 by rpki-client