$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa File: 9baeeff1-275e-3c98-a3ea-85555542d7e8.roa (raw, json) Hash identifier: zEbDlVn0Sts2wuCgCvNyCby4D70swJz40/O0XiB4Amk= Subject key identifier: BE:51:4D:30:04:80:61:EA:7C:25:DF:89:5B:25:11:BE:0E:D8:FE:EA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F37746EFCD56E537208C140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.197.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:74:6e:fc:d5:6e:53:72:08:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=04f357aa-f034-4190-a5ea-d4bb4fc9479b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:5c:ed:5f:19:ee:19:8f:2c:07:b8:bd:90: ed:07:3b:15:a4:59:7d:98:89:9b:4c:6d:63:51:eb: ef:26:3d:ed:85:06:33:c0:de:f5:3b:35:b1:80:79: ca:dd:eb:ca:96:0b:4d:1c:49:c3:87:c3:5c:8e:b4: 0d:15:9b:9d:4f:bb:2f:03:6c:e3:56:2d:36:63:1f: 90:45:4b:4b:c6:85:f1:67:22:42:fd:e9:88:cb:99: 93:86:55:cf:61:89:6d:f6:2a:95:c4:77:4e:00:63: c0:df:ca:cc:d5:d2:6b:8e:8d:09:d2:fb:d3:d1:ee: 4c:45:31:80:af:16:40:be:8d:c6:ad:7f:87:9d:ea: c6:57:4b:64:36:7c:02:28:d0:75:ba:b1:82:b5:e4: e1:59:fb:aa:86:27:df:32:2e:f1:ee:41:d9:21:2c: c5:72:4c:78:86:87:15:13:35:45:aa:97:04:55:b1: 41:65:7b:16:be:3d:8a:59:56:44:32:f7:14:53:df: ca:dc:b0:b0:c3:6e:40:38:c9:41:86:a4:3e:a3:1b: e5:d8:13:a9:d2:13:4a:ba:4c:82:32:13:c8:c2:15: c1:95:6b:dc:01:7b:4a:1c:d8:0b:73:1f:7f:d0:6c: f1:83:35:64:d0:f4:df:c6:e5:48:26:5e:1e:e3:a8: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:51:4D:30:04:80:61:EA:7C:25:DF:89:5B:25:11:BE:0E:D8:FE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:91:ee:e9:a1:a3:be:8b:52:a3:44:48:7a:23:ae:7b:89:e9: 4d:ce:72:2f:f4:71:ab:4f:f3:c5:27:71:d6:63:3d:72:3d:e1: f6:d3:da:eb:28:39:38:78:e7:21:b2:b8:7d:7d:a7:be:5d:37: bc:b0:13:f6:35:c8:52:40:0d:d3:fc:f9:17:cd:81:d7:84:f5: c1:3c:c1:b2:8e:9d:d0:aa:e6:c0:9a:5f:d7:99:2d:a5:2d:26: d1:fc:29:ef:75:d5:48:85:18:42:60:4a:a0:15:f7:75:2b:40: 00:98:38:00:49:c9:21:40:30:5c:a5:42:d0:76:ab:81:79:c4: e9:88:8b:de:ce:34:15:34:9f:25:61:e1:e1:5f:dd:cd:42:b8: 1d:5a:1d:c8:0f:ce:e8:01:8d:47:0f:af:e8:41:df:14:59:4a: 6b:9c:ed:de:b6:2b:86:d2:db:61:6c:a0:b9:e1:f9:4e:1d:ba: 68:f2:47:b7:81:b1:91:f3:0d:b0:a1:f0:bd:31:89:5f:2f:68: 8a:76:63:e2:e1:77:73:0f:8f:bc:f5:f1:15:57:17:ba:f2:e2: bf:af:f6:a1:79:cc:21:d7:82:a0:56:3f:78:bd:fd:96:af:88: 43:1d:b6:1f:6b:0c:7d:26:82:fc:8f:6f:9b:a8:65:7a:0a:df: d4:6b:99:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3Ru/NVuU3IIwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MDRmMzU3YWEtZjAzNC00MTkwLWE1ZWEtZDRiYjRmYzk0NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1tc7V8Z7hmPLAe4vZDtBzsVpFl9mImbTG1j UevvJj3thQYzwN71OzWxgHnK3evKlgtNHEnDh8NcjrQNFZudT7svA2zjVi02Yx+Q RUtLxoXxZyJC/emIy5mThlXPYYlt9iqVxHdOAGPA38rM1dJrjo0J0vvT0e5MRTGA rxZAvo3GrX+HnerGV0tkNnwCKNB1urGCteThWfuqhiffMi7x7kHZISzFckx4hocV EzVFqpcEVbFBZXsWvj2KWVZEMvcUU9/K3LCww25AOMlBhqQ+oxvl2BOp0hNKukyC MhPIwhXBlWvcAXtKHNgLcx9/0GzxgzVk0PTfxuVIJl4e46h/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5RTTAEgGHqfCXfiVslEb4O2P7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJhZWVmZjEtMjc1ZS0z Yzk4LWEzZWEtODU1NTU1NDJkN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGR7umho76LUqNESHojrnuJ6U3Oci/0catP88UncdZjPXI94fbT2uso OTh45yGyuH19p75dN7ywE/Y1yFJADdP8+RfNgdeE9cE8wbKOndCq5sCaX9eZLaUt JtH8Ke911UiFGEJgSqAV93UrQACYOABJySFAMFylQtB2q4F5xOmIi97ONBU0nyVh 4eFf3c1CuB1aHcgPzugBjUcPr+hB3xRZSmuc7d62K4bS22FsoLnh+U4dumjyR7eB sZHzDbCh8L0xiV8vaIp2Y+Lhd3MPj7z18RVXF7ry4r+v9qF5zCHXgqBWP3i9/Zav iEMdth9rDH0mgvyPb5uoZXoK39RrmXw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:09 2025 by rpki-client