$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa File: 0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa (raw, json) Hash identifier: IuTTUU8GipOGzxjoZPfBazOTopxqn6c3RQekYkqNMs8= Subject key identifier: 76:D9:69:0C:6D:76:51:B4:7C:88:C3:EC:C1:37:11:83:73:E5:13:B3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA722F103D1D8745E0980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.18.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a7:22:f1:03:d1:d8:74:5e:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=e7275422-8568-4bf1-a3e2-cd0b95d38037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ee:0d:58:cc:26:a5:7f:21:a3:0d:23:69:fe: 6f:d6:38:93:f7:4f:a1:fc:dc:d8:d1:c3:64:d8:0c: a2:da:93:d6:e3:8c:f1:d1:08:d8:ee:3e:2e:07:ba: ad:07:9e:a6:ac:75:cd:45:35:12:36:0c:3e:9a:10: e0:70:72:50:6f:99:d0:3f:f8:c7:cc:7b:33:c3:3f: 09:66:72:82:ec:cd:32:b5:ae:e0:12:2d:34:42:ea: 22:83:62:be:5c:1b:9b:ec:52:64:cb:9c:c6:46:63: d7:84:43:81:51:94:28:d3:f6:e9:5b:80:ae:62:5b: ae:54:2d:f3:c7:14:69:c0:ba:b8:88:ec:08:a1:a2: 6c:83:33:6f:e6:23:c6:36:7b:31:91:e1:13:d8:a8: 8d:e7:0c:1a:b8:8f:8f:d1:ff:59:e8:76:ef:bc:e4: 07:ce:07:18:8c:8a:fd:5e:51:8f:b8:7f:04:91:9d: f6:a5:fa:2b:8b:d8:a5:05:3c:7f:2f:2e:3c:6e:eb: 67:e5:09:8b:34:cc:28:7e:0d:fb:29:3d:18:05:32: d7:d8:8a:07:72:d5:59:d5:64:db:74:b0:03:24:9d: 39:eb:af:e0:05:8e:b1:dd:45:12:cb:1d:58:d5:7e: 6c:a4:c3:d2:8b:0d:35:0d:d3:78:72:0b:bb:63:c1: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:69:0C:6D:76:51:B4:7C:88:C3:EC:C1:37:11:83:73:E5:13:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:44:23:2d:5a:b4:f3:85:ff:20:0f:24:b5:52:e7:43:c1:e5: 9a:7d:09:6c:b4:b9:55:b7:71:d1:8c:1f:3b:27:2d:e9:6c:eb: 58:92:79:13:07:38:bf:12:94:91:6a:8c:35:13:fe:93:fd:75: 6b:1a:12:91:b4:30:0a:cd:59:d6:9a:c3:c8:a9:03:d7:b1:c8: 89:4b:35:36:4c:4c:61:05:ec:42:06:85:95:d2:5d:9c:52:8b: 70:76:dc:2c:58:14:c1:22:87:0e:62:1a:e6:6f:5c:71:1e:d4: bf:89:27:11:8d:7f:e0:45:9e:17:ed:72:0b:96:c3:b0:20:f3: 6e:52:75:33:19:a9:dd:10:81:fd:03:6c:58:f4:da:6b:95:3c: 25:ff:7d:f5:ae:de:53:a4:7f:ee:10:d8:7c:bc:9d:f1:95:8a: c3:74:b6:99:33:ef:3b:d3:e5:a2:9d:7f:40:a5:a8:8a:dc:54: 01:4e:77:88:e6:8f:32:39:78:da:40:41:4e:b4:18:1c:84:c4: 18:3b:31:dc:ae:e3:71:57:3b:39:cc:56:9d:e0:bb:93:08:ed: 8e:c9:b7:f4:29:f5:f1:c2:aa:48:fd:b4:7a:f1:33:b2:32:0b: 3e:81:e8:29:af:6a:73:1e:76:23:96:e9:9e:2e:f5:6e:25:cf: 88:39:5e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6ci8QPR2HReCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTcyNzU0MjItODU2OC00YmYxLWEzZTItY2QwYjk1ZDM4MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu4NWMwmpX8how0jaf5v1jiT90+h/NzY0cNk 2Ayi2pPW44zx0QjY7j4uB7qtB56mrHXNRTUSNgw+mhDgcHJQb5nQP/jHzHszwz8J ZnKC7M0yta7gEi00Quoig2K+XBub7FJky5zGRmPXhEOBUZQo0/bpW4CuYluuVC3z xxRpwLq4iOwIoaJsgzNv5iPGNnsxkeET2KiN5wwauI+P0f9Z6HbvvOQHzgcYjIr9 XlGPuH8EkZ32pfori9ilBTx/Ly48butn5QmLNMwofg37KT0YBTLX2IoHctVZ1WTb dLADJJ0566/gBY6x3UUSyx1Y1X5spMPSiw01DdN4cgu7Y8HKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbZaQxtdlG0fIjD7ME3EYNz5ROzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGY4NDNmMjUtYmRmNS0z Y2YyLWFiNWItMmM1NGQ1ZDMwOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNEIy1atPOF/yAPJLVS50PB5Zp9CWy0uVW3cdGMHzsnLels61iSeRMH OL8SlJFqjDUT/pP9dWsaEpG0MArNWdaaw8ipA9exyIlLNTZMTGEF7EIGhZXSXZxS i3B23CxYFMEihw5iGuZvXHEe1L+JJxGNf+BFnhftcguWw7Ag825SdTMZqd0Qgf0D bFj02muVPCX/ffWu3lOkf+4Q2Hy8nfGVisN0tpkz7zvT5aKdf0ClqIrcVAFOd4jm jzI5eNpAQU60GByExBg7Mdyu43FXOznMVp3gu5MI7Y7Jt/Qp9fHCqkj9tHrxM7Iy Cz6B6CmvanMediOW6Z4u9W4lz4g5Xok= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:44 2025 by rpki-client