$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8de6b606-7472-3b84-acb2-422ea7708172.roa File: 8de6b606-7472-3b84-acb2-422ea7708172.roa (raw, json) Hash identifier: b4vQ9S4bRRe+bpLNakbHLI4zimwZz5RK1D6kweJOq+Y= Subject key identifier: 55:8A:00:13:D0:0D:CD:DB:34:33:8A:C4:3D:2E:92:8E:EF:3B:ED:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F376B7DB3CD6A892F514640 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8de6b606-7472-3b84-acb2-422ea7708172.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.197.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:6b:7d:b3:cd:6a:89:2f:51:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=f5432ad1-6163-4fd3-b899-05e1e0cf3c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:ff:ad:be:02:b3:b7:af:eb:9b:86:49:3a: 36:96:fb:f9:c0:65:4e:8f:2e:76:ae:51:de:86:d7: ce:b7:31:e0:f1:98:18:26:5c:b5:b7:65:25:c3:ae: 56:29:9f:ec:30:af:98:8f:a5:52:1b:88:a1:6e:5e: 2d:ce:ca:bc:bd:37:87:df:ee:a7:31:bc:f6:40:17: 79:0c:af:34:45:c9:69:4b:41:de:af:c5:fa:7e:00: ec:58:b2:44:86:bb:d7:b5:da:2a:c9:c7:22:1d:44: 02:b0:cb:d1:fa:e8:93:9d:32:14:36:e9:8c:58:78: ce:e6:32:56:65:57:65:8c:78:96:4b:61:a3:d1:7e: 22:06:55:81:84:59:75:ae:ec:b4:a7:73:40:6c:40: 2c:91:e1:80:b5:4d:7c:78:12:f8:71:66:60:c0:6f: fd:0c:68:4b:06:8e:f2:f0:c4:84:7a:28:f4:42:41: 07:99:30:05:85:88:7b:61:c6:93:a3:f9:3a:78:0b: 55:ea:73:53:f5:ad:25:05:7a:86:f1:df:bf:8d:73: 56:c4:e0:52:b7:d8:45:e0:5b:ae:cc:6f:26:4e:37: 44:d1:8d:26:62:dd:ab:05:92:41:3a:d5:e0:6e:42: 79:08:8c:e9:12:d3:85:f5:37:1e:43:a6:ae:1d:d3: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8A:00:13:D0:0D:CD:DB:34:33:8A:C4:3D:2E:92:8E:EF:3B:ED:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8de6b606-7472-3b84-acb2-422ea7708172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3b:05:6b:26:02:7c:70:fc:93:e5:74:27:b2:bb:d0:a3:28: ae:25:d9:63:18:a7:30:80:50:e4:ca:0a:6c:24:52:7b:c3:98: 0f:9e:79:10:1f:c4:a2:7f:d4:67:95:75:21:03:1e:42:80:57: 1e:61:94:c7:f4:63:07:40:fb:a5:c9:bc:f7:1d:c9:ec:ed:4d: b3:45:0a:e4:48:d5:70:f4:74:8b:ad:cb:aa:60:53:a0:7f:ab: f3:60:84:9a:3e:99:1a:4d:9c:d7:16:3d:42:9d:6b:a3:8f:e6: 8a:83:a0:a7:e2:5a:f5:85:f1:04:e9:2e:6f:3d:3d:e4:54:bb: 16:7e:3c:75:30:bb:3b:81:70:9a:65:69:0d:90:28:2f:fe:c7: 22:b9:5b:d8:7b:65:63:7b:ac:bb:0b:54:fb:e4:ed:10:4a:22: e0:8a:ee:3c:41:ce:57:51:2f:89:69:63:7b:5f:b5:ce:bb:32: ad:d2:8c:1c:73:c3:49:e5:87:4f:7f:67:83:59:89:f4:d7:11: 38:71:ff:eb:89:c6:23:59:8f:bf:d1:69:b2:50:47:a8:7f:df: 5c:40:71:ed:e8:b0:f9:9f:2a:2a:ed:fd:86:12:b4:33:a1:12: 5e:6a:7d:8a:f6:ed:68:4a:ac:d7:19:ce:e4:d3:2c:b1:c1:19: 0c:a9:9d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2t9s81qiS9RRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjU0MzJhZDEtNjE2My00ZmQzLWI4OTktMDVlMWUwY2YzYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy7/rb4Cs7ev65uGSTo2lvv5wGVOjy52rlHe htfOtzHg8ZgYJly1t2Ulw65WKZ/sMK+Yj6VSG4ihbl4tzsq8vTeH3+6nMbz2QBd5 DK80RclpS0Her8X6fgDsWLJEhrvXtdoqycciHUQCsMvR+uiTnTIUNumMWHjO5jJW ZVdljHiWS2Gj0X4iBlWBhFl1ruy0p3NAbEAskeGAtU18eBL4cWZgwG/9DGhLBo7y 8MSEeij0QkEHmTAFhYh7YcaTo/k6eAtV6nNT9a0lBXqG8d+/jXNWxOBSt9hF4Fuu zG8mTjdE0Y0mYt2rBZJBOtXgbkJ5CIzpEtOF9TceQ6auHdO8GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWKABPQDc3bNDOKxD0uko7vO+1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGRlNmI2MDYtNzQ3Mi0z Yjg0LWFjYjItNDIyZWE3NzA4MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM7BWsmAnxw/JPldCeyu9CjKK4l2WMYpzCAUOTKCmwkUnvDmA+eeRAf xKJ/1GeVdSEDHkKAVx5hlMf0YwdA+6XJvPcdyeztTbNFCuRI1XD0dIuty6pgU6B/ q/NghJo+mRpNnNcWPUKda6OP5oqDoKfiWvWF8QTpLm89PeRUuxZ+PHUwuzuBcJpl aQ2QKC/+xyK5W9h7ZWN7rLsLVPvk7RBKIuCK7jxBzldRL4lpY3tftc67Mq3SjBxz w0nlh09/Z4NZifTXEThx/+uJxiNZj7/RabJQR6h/31xAce3osPmfKirt/YYStDOh El5qfYr27WhKrNcZzuTTLLHBGQypnQk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:31 2025 by rpki-client