$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/01938e3d-dfe9-3693-8fb6-971490e02e06.roa File: 01938e3d-dfe9-3693-8fb6-971490e02e06.roa (raw, json) Hash identifier: okF6GrgjmHovv3EOVxSDPqh0SbJW5ishX8QABBQwE00= Subject key identifier: 75:BA:A2:CF:64:49:E9:94:5F:BA:C8:93:90:85:10:5D:2A:BA:3A:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71105B5D099F6D76227A1B8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/01938e3d-dfe9-3693-8fb6-971490e02e06.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.30.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:05:b5:d0:99:f6:d7:62:27:a1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=5045494d-87d0-4dd8-873a-ab2cec10e620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:24:7c:6c:13:bc:ca:b5:21:09:11:b6:54: a1:4d:70:f3:49:5f:c9:f7:99:8e:c0:4d:46:92:cc: 84:3e:26:56:7b:06:aa:08:e8:b4:3d:ee:57:1b:f1: d6:45:84:51:4c:98:71:05:bf:91:d7:e2:ea:00:10: c2:ed:06:92:30:83:66:cc:57:fe:42:a8:53:ac:72: f4:36:ac:4e:d5:74:66:b9:da:4d:7f:75:97:01:84: b6:10:09:c7:1e:b4:17:58:84:e7:50:ec:db:22:0e: cf:31:1d:1b:3c:f8:cb:72:6f:f6:c5:05:d8:29:a0: 6c:3f:f4:88:71:b6:c6:b1:a6:45:32:10:88:c3:fb: 14:15:8d:5f:c4:b8:37:10:03:ba:ce:b2:7e:07:f0: 1d:de:df:81:13:5a:7f:12:e2:e6:83:c6:57:f8:4e: fc:0c:29:ae:09:d5:96:26:87:d6:8e:1e:84:3d:12: 48:45:71:76:bf:23:d6:ec:4c:f5:bf:95:ec:d3:ca: ec:b9:f6:98:3a:04:1a:75:17:3a:87:4c:d8:1e:10: 31:4f:dc:ef:64:ae:8c:ed:ae:3f:1f:97:cd:92:8d: 0a:b3:05:c5:bc:c4:fb:04:ec:c1:d4:01:eb:c3:14: 0d:cb:86:66:f3:25:e2:d1:a8:f4:22:2a:9e:32:a5: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BA:A2:CF:64:49:E9:94:5F:BA:C8:93:90:85:10:5D:2A:BA:3A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/01938e3d-dfe9-3693-8fb6-971490e02e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.30.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a0:0e:cb:9f:e3:7c:24:5d:e9:6a:d5:ad:f6:dd:81:49:1c: 44:8d:d3:a3:7d:66:dc:97:b5:40:1e:96:83:9b:50:d3:bd:3b: b4:71:65:2d:88:ac:ad:0f:54:42:33:aa:0e:32:65:19:b5:44: 0d:9e:09:d5:a4:21:3b:e2:2b:89:56:ba:19:d0:5a:f5:0e:bf: b6:a3:6b:08:45:d1:5b:ba:c0:4e:00:c0:5b:e6:6b:ec:73:1e: bc:16:bb:56:ca:f2:91:09:aa:c7:4a:18:d1:c7:36:29:4d:c6: 9b:33:49:b4:aa:be:11:d2:6f:91:5c:c3:54:a8:44:57:70:a1: da:14:1e:e9:82:ed:91:36:d8:23:ca:cd:3a:18:3e:29:74:85: 5b:44:69:c3:bd:be:38:c3:19:66:75:2c:a4:a5:47:ac:91:ea: 93:82:78:d8:1d:cf:95:29:8a:7f:d3:c8:ad:84:72:be:4b:1e: 1e:c9:75:ed:bc:8b:31:fc:40:05:66:4e:a4:2b:c6:42:75:b7: b1:b1:56:ba:98:a0:c9:cc:17:3f:06:dc:43:ba:46:c7:2e:ab: f7:0f:cb:84:94:c3:b0:68:b2:29:5c:e8:81:7e:81:3f:15:21: 83:ea:f4:cf:6c:ed:26:cb:e4:5a:bd:83:07:1c:5c:03:6b:61: b8:fd:79:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQW10Jn212InobgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NTA0NTQ5NGQtODdkMC00ZGQ4LTg3M2EtYWIyY2VjMTBlNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknIkfGwTvMq1IQkRtlShTXDzSV/J95mOwE1G ksyEPiZWewaqCOi0Pe5XG/HWRYRRTJhxBb+R1+LqABDC7QaSMINmzFf+QqhTrHL0 NqxO1XRmudpNf3WXAYS2EAnHHrQXWITnUOzbIg7PMR0bPPjLcm/2xQXYKaBsP/SI cbbGsaZFMhCIw/sUFY1fxLg3EAO6zrJ+B/Ad3t+BE1p/EuLmg8ZX+E78DCmuCdWW JofWjh6EPRJIRXF2vyPW7Ez1v5Xs08rsufaYOgQadRc6h0zYHhAxT9zvZK6M7a4/ H5fNko0KswXFvMT7BOzB1AHrwxQNy4Zm8yXi0aj0IiqeMqVxRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW6os9kSemUX7rIk5CFEF0qujpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDE5MzhlM2QtZGZlOS0z NjkzLThmYjYtOTcxNDkwZTAyZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaB4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSgDsuf43wkXelq1a323YFJHESN06N9ZtyXtUAeloObUNO9O7RxZS2I rK0PVEIzqg4yZRm1RA2eCdWkITviK4lWuhnQWvUOv7ajawhF0Vu6wE4AwFvma+xz HrwWu1bK8pEJqsdKGNHHNilNxpszSbSqvhHSb5Fcw1SoRFdwodoUHumC7ZE22CPK zToYPil0hVtEacO9vjjDGWZ1LKSlR6yR6pOCeNgdz5Upin/TyK2Ecr5LHh7Jde28 izH8QAVmTqQrxkJ1t7GxVrqYoMnMFz8G3EO6Rscuq/cPy4SUw7Bosilc6IF+gT8V IYPq9M9s7SbL5Fq9gwccXANrYbj9eTo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:07 2025 by rpki-client