$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a197ca-f3a9-3cba-8a3e-e1206256056a.roa File: d4a197ca-f3a9-3cba-8a3e-e1206256056a.roa (raw, json) Hash identifier: lQVTISOZ9N5n1vULE5+5oYtj0yuGORL0vHthigOBnsg= Subject key identifier: 35:1C:B5:54:AA:3A:2D:4C:EF:C0:30:59:70:50:6E:3D:A7:12:31:8F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F37302186F007E599ADCA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a197ca-f3a9-3cba-8a3e-e1206256056a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.196.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:30:21:86:f0:07:e5:99:ad:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=38607396-acef-4ac5-9cf4-1725f2f53584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:4d:36:ac:aa:0d:48:60:3a:a5:50:44:af: b2:6a:16:71:7e:23:a5:59:69:71:69:92:81:5f:be: 2b:7f:cc:b8:50:c2:e5:76:1c:c0:b2:6c:c3:f2:0b: 61:1d:15:b2:47:8e:ba:e5:bc:72:e7:04:36:d4:ff: 1a:8f:ba:fa:35:87:2a:c2:69:b6:25:45:68:32:a3: 8c:bb:5a:c9:a6:a9:e4:01:34:9b:bd:24:d6:80:ff: fc:b7:2e:00:44:70:42:95:55:46:6e:a4:ee:ea:b7: 8d:2c:39:2d:59:ab:ec:ee:96:ef:3f:fa:31:43:c5: 33:6c:2b:ca:9c:66:1d:3c:82:19:1b:0b:f3:32:77: 4d:7c:b9:0a:cd:14:b8:1d:a0:28:9b:6f:22:bc:4c: 0a:fe:1b:c1:90:4b:09:e6:b9:06:ba:34:33:06:7f: 78:0c:e6:24:3e:93:f6:10:83:44:04:94:bb:f3:1e: aa:76:f0:46:27:c6:52:5b:87:20:2f:52:5c:78:09: 80:a4:21:80:e6:71:3f:08:47:c7:02:68:d8:2e:db: 7c:15:a0:40:bd:3c:0e:f7:c0:57:18:3f:cd:81:10: 1b:11:ce:ce:19:fc:2b:57:b5:dd:85:2f:ea:bf:4d: 3b:41:34:6b:59:7d:8b:9e:e9:2e:73:f7:22:10:f4: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:B5:54:AA:3A:2D:4C:EF:C0:30:59:70:50:6E:3D:A7:12:31:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a197ca-f3a9-3cba-8a3e-e1206256056a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bb:ec:2e:a8:85:43:bf:91:51:e8:a3:c9:5b:e4:57:df:e3: e7:56:49:94:12:b0:cd:be:a1:1e:d1:a4:b4:b9:33:f3:d2:7f: 64:f0:14:8b:a0:85:c6:2d:bb:32:b9:f0:9a:57:fd:77:67:07: 73:0e:80:c9:2a:05:90:32:2d:83:a3:5a:c7:0f:f6:9a:95:a3: e2:43:57:31:88:77:6d:24:dd:2f:33:56:8f:7e:ad:1c:f7:cd: 62:bb:02:76:70:88:9c:aa:70:8a:1b:6f:4a:a0:5d:68:cd:af: 93:3a:b0:50:c4:29:e2:c5:5e:b6:04:cd:54:90:76:b0:a1:0a: 7f:bf:43:c0:14:72:98:5e:7a:ad:02:5d:9a:8e:a8:de:8b:a2: 05:b4:f4:6a:3b:b0:6c:1d:3f:df:72:aa:c4:51:8b:e3:82:73: 60:fa:c9:cd:b2:ad:70:97:2f:5f:5d:ff:09:cb:72:d5:3c:35: 29:8e:fc:36:c5:76:55:dd:31:09:3b:b1:71:53:cb:52:f0:44: 4c:2f:4d:b0:5a:54:f6:09:82:8f:b5:25:5d:54:67:b1:3b:72: c1:fd:d4:61:df:80:2f:f7:3a:53:5d:1b:b2:b2:ef:8c:2b:29: 31:12:b0:c4:74:46:e2:33:4c:b4:b0:6b:70:4f:5b:3b:9a:a4: 73:d1:66:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzAhhvAH5ZmtyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Mzg2MDczOTYtYWNlZi00YWM1LTljZjQtMTcyNWYyZjUzNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmctNNqyqDUhgOqVQRK+yahZxfiOlWWlxaZKB X74rf8y4UMLldhzAsmzD8gthHRWyR4665bxy5wQ21P8aj7r6NYcqwmm2JUVoMqOM u1rJpqnkATSbvSTWgP/8ty4ARHBClVVGbqTu6reNLDktWavs7pbvP/oxQ8UzbCvK nGYdPIIZGwvzMndNfLkKzRS4HaAom28ivEwK/hvBkEsJ5rkGujQzBn94DOYkPpP2 EINEBJS78x6qdvBGJ8ZSW4cgL1JceAmApCGA5nE/CEfHAmjYLtt8FaBAvTwO98BX GD/NgRAbEc7OGfwrV7XdhS/qv007QTRrWX2Lnukuc/ciEPT2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUctVSqOi1M78AwWXBQbj2nEjGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRhMTk3Y2EtZjNhOS0z Y2JhLThhM2UtZTEyMDYyNTYwNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO77C6ohUO/kVHoo8lb5Fff4+dWSZQSsM2+oR7RpLS5M/PSf2TwFIug hcYtuzK58JpX/XdnB3MOgMkqBZAyLYOjWscP9pqVo+JDVzGId20k3S8zVo9+rRz3 zWK7AnZwiJyqcIobb0qgXWjNr5M6sFDEKeLFXrYEzVSQdrChCn+/Q8AUcpheeq0C XZqOqN6LogW09Go7sGwdP99yqsRRi+OCc2D6yc2yrXCXL19d/wnLctU8NSmO/DbF dlXdMQk7sXFTy1LwREwvTbBaVPYJgo+1JV1UZ7E7csH91GHfgC/3OlNdG7Ky74wr KTESsMR0RuIzTLSwa3BPWzuapHPRZmM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:18 2025 by rpki-client