$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afcbf99d-e8f6-367d-9efc-c09823c99b3c.roa File: afcbf99d-e8f6-367d-9efc-c09823c99b3c.roa (raw, json) Hash identifier: cVkYYzv0XLWne+jlsZSLm1v4yJPxFieaGACJG0fvq1I= Subject key identifier: 68:7B:89:C5:D3:62:8D:59:B1:CC:6F:E6:06:23:8E:5E:93:FD:0F:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B72C1E7A520BB30B59692EA00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afcbf99d-e8f6-367d-9efc-c09823c99b3c.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 396982 IP address blocks: 104.155.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:e7:a5:20:bb:30:b5:96:92:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=3f18dd41-09af-483c-bd18-d4be24aa7ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:f5:aa:02:32:16:4e:2c:42:4b:dc:32:46: 44:70:60:9e:b8:02:b4:25:9f:e6:c5:ad:7d:b5:85: 0f:b7:02:11:ef:a9:91:9f:d8:11:e5:47:ac:a7:66: fd:a8:3e:1a:a5:1f:2d:7f:a2:52:77:b0:71:41:d5: c7:e3:11:c4:93:27:16:be:10:5c:90:ac:cb:9a:0c: 37:f8:e5:f9:79:c1:2a:22:99:c0:88:ab:98:af:a4: 22:22:98:03:1d:ca:a7:3a:cd:38:39:69:5f:c1:19: 4a:fb:bf:e1:4f:2b:3b:d2:eb:74:48:f5:b8:3c:7c: 0e:79:0c:ea:87:79:5e:e3:6d:81:17:fd:e3:f4:06: 10:13:f5:11:30:8f:85:c9:8f:ae:7e:e6:8f:48:85: 8d:c0:26:9f:d3:4c:6f:0a:bd:78:91:a6:95:61:53: 66:4c:16:35:cd:14:f9:af:2e:e7:47:d7:e3:25:cd: 5e:b1:f4:ad:5f:61:33:c0:be:45:a7:13:70:67:71: 79:48:2f:72:75:cc:fd:47:da:7f:bc:b5:ca:ec:00: dd:7b:69:28:a4:77:e9:14:7c:0b:ed:ce:aa:8d:71: 2c:f3:25:1c:63:5a:85:42:ca:b9:81:02:12:c2:b6: 31:7e:59:4a:c0:d8:5e:22:df:1b:48:9f:b6:46:a0: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:89:C5:D3:62:8D:59:B1:CC:6F:E6:06:23:8E:5E:93:FD:0F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afcbf99d-e8f6-367d-9efc-c09823c99b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.155.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:84:38:95:5b:f4:37:ac:31:17:dd:8d:46:ed:92:05:e9:99: 17:4b:2e:a1:81:e0:c4:f4:30:ba:fd:a6:cf:fc:4e:c0:f6:e8: 15:d0:02:d5:b7:a2:fb:09:3c:55:f4:a1:7b:41:7f:13:75:7f: 26:bf:96:c2:cc:22:47:e7:f3:2d:4f:33:28:c0:bd:a2:9e:7e: 65:a8:b8:a9:09:a4:59:81:93:34:fe:08:81:7d:a4:dd:23:06: 15:06:a8:38:a5:39:fd:da:1b:cc:71:b4:a7:88:cb:9e:25:fa: 07:b1:e7:c9:e3:98:12:26:64:b3:f8:37:45:3c:ca:e4:60:a1: 18:a5:47:7d:9d:1b:d7:f1:dc:2a:a5:f3:d6:2a:71:0a:df:eb: a7:78:f2:f6:7c:ad:a4:29:db:77:d4:5b:6c:7f:b1:6e:d3:18: d6:aa:4e:70:5f:6f:4b:0d:f5:36:25:52:c6:b3:b1:4c:30:36: 0b:31:52:01:4d:2a:15:f3:58:08:15:b4:f1:08:49:2c:70:e8: a9:95:34:e3:a0:b4:28:36:66:09:b6:41:5d:cf:06:bd:cc:e8: 75:9e:68:b0:51:87:19:c2:d2:a5:1a:b1:2f:f7:da:a7:47:cc: 90:61:36:e7:30:61:b4:c3:3c:82:47:4d:61:2b:5e:2d:5d:75: 0d:c1:2b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtyweelILswtZaS6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk M2YxOGRkNDEtMDlhZi00ODNjLWJkMTgtZDRiZTI0YWE3ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO71qgIyFk4sQkvcMkZEcGCeuAK0JZ/mxa19 tYUPtwIR76mRn9gR5Uesp2b9qD4apR8tf6JSd7BxQdXH4xHEkycWvhBckKzLmgw3 +OX5ecEqIpnAiKuYr6QiIpgDHcqnOs04OWlfwRlK+7/hTys70ut0SPW4PHwOeQzq h3le422BF/3j9AYQE/URMI+FyY+ufuaPSIWNwCaf00xvCr14kaaVYVNmTBY1zRT5 ry7nR9fjJc1esfStX2EzwL5FpxNwZ3F5SC9ydcz9R9p/vLXK7ADde2kopHfpFHwL 7c6qjXEs8yUcY1qFQsq5gQISwrYxfllKwNheIt8bSJ+2RqBNnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh7icXTYo1Zscxv5gYjjl6T/Q8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZjYmY5OWQtZThmNi0z NjdkLTllZmMtYzA5ODIzYzk5YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6EOJVb9DesMRfdjUbtkgXpmRdLLqGB4MT0MLr9ps/8TsD26BXQAtW3 ovsJPFX0oXtBfxN1fya/lsLMIkfn8y1PMyjAvaKefmWouKkJpFmBkzT+CIF9pN0j BhUGqDilOf3aG8xxtKeIy54l+gex58njmBImZLP4N0U8yuRgoRilR32dG9fx3Cql 89YqcQrf66d48vZ8raQp23fUW2x/sW7TGNaqTnBfb0sN9TYlUsazsUwwNgsxUgFN KhXzWAgVtPEISSxw6KmVNOOgtCg2Zgm2QV3PBr3M6HWeaLBRhxnC0qUasS/32qdH zJBhNucwYbTDPIJHTWErXi1ddQ3BK/s= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:10 2025 by rpki-client