$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13903fcf-4875-38ef-a5e0-d1f360d6d77a.roa File: 13903fcf-4875-38ef-a5e0-d1f360d6d77a.roa (raw, json) Hash identifier: XUVFy95sqVPNChiEJY4C9Slu4SiIICElnfEHSQpTr0U= Subject key identifier: 51:CB:47:9D:69:C1:85:A6:26:DA:DF:AF:92:D3:F7:1A:66:C6:E8:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9D45D1B50CD6E5E9E980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13903fcf-4875-38ef-a5e0-d1f360d6d77a.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.22.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9d:45:d1:b5:0c:d6:e5:e9:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=35c3a190-014d-4e2a-8d7a-b8f055a891a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:3b:fe:0e:dd:94:e3:81:03:5e:85:b8:55: a8:68:52:31:f6:0d:36:7b:8a:c2:ff:02:1d:a5:8c: 43:80:fa:2f:bf:c5:45:a3:99:54:04:92:0d:39:90: d2:76:90:aa:63:fe:d3:ff:7d:2c:75:6d:d2:15:20: e3:33:e3:0c:6e:92:46:42:49:68:2a:58:ae:85:9d: 2e:90:0e:fa:20:ed:df:30:e1:98:fe:0d:01:20:6d: 8a:d3:6f:f3:c2:7c:0b:84:48:69:c9:ad:bf:26:15: 55:bd:78:f0:c9:c4:62:d1:f7:07:ce:ef:86:7c:b9: c6:27:ba:58:3e:f7:cb:f3:c6:ef:db:03:c0:28:e0: ac:71:11:db:65:6d:30:55:8d:c1:74:6a:08:71:de: 70:a2:37:a0:c8:08:48:ca:bc:1b:95:e9:81:6e:f2: bd:85:f0:55:58:63:49:25:06:ea:29:ef:84:53:20: 9d:c2:c3:70:19:1a:fb:bf:ce:07:0c:10:f1:4c:78: 58:47:4d:a9:84:08:92:c6:d8:72:7b:0e:a2:8f:d3: 5b:41:63:3e:3c:d3:59:38:a3:39:a8:6c:e6:2c:ab: c5:92:58:0d:c9:21:fc:f2:61:53:39:50:28:e3:95: 6d:d5:44:38:be:11:cf:d9:7d:f1:9a:f7:53:85:ff: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CB:47:9D:69:C1:85:A6:26:DA:DF:AF:92:D3:F7:1A:66:C6:E8:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13903fcf-4875-38ef-a5e0-d1f360d6d77a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:70:20:b0:97:0f:74:eb:92:3c:ed:33:f2:f7:45:22:6a:71: 7b:c3:45:13:4c:d1:71:a1:51:9c:8f:91:e4:5d:2f:0e:a9:19: 42:ce:b7:42:62:5c:c3:75:46:6b:30:16:d5:bb:b2:f4:ba:82: 83:ef:36:43:86:a7:9f:3c:8c:56:d9:26:b0:73:f2:e9:80:aa: 66:0a:96:6c:d8:f9:d3:e5:a4:43:4b:5d:ec:2c:a4:93:dd:94: 0a:fe:81:0f:76:7c:57:da:35:fe:db:6e:17:41:a4:bc:4c:48: 3a:d2:1c:d9:71:7f:04:81:cf:f4:b1:c8:58:f1:ca:92:b5:5a: d9:8f:fb:90:f4:81:a2:4a:5a:4a:d8:c3:f1:fb:b0:8e:12:ef: 81:50:02:a1:63:7c:83:d3:d6:b9:47:3e:c2:17:1b:43:28:e5: e4:b8:4d:79:4d:1d:75:9b:c3:df:48:6a:e6:76:56:ee:fa:f7: ad:9c:ff:a0:44:5a:50:37:d9:10:31:5e:10:9a:b5:de:9e:04: 9c:b7:fe:cc:e6:c0:54:5e:71:23:0c:90:30:f5:45:fd:4c:92: 6f:29:59:bd:05:dc:2e:bb:b9:0e:9e:42:c6:7f:28:25:e0:67: 47:44:56:9c:cf:73:4b:53:1a:64:18:cd:6e:ed:da:67:e3:f0: f0:a1:e3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq51F0bUM1uXp6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MzVjM2ExOTAtMDE0ZC00ZTJhLThkN2EtYjhmMDU1YTg5MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ07/g7dlOOBA16FuFWoaFIx9g02e4rC/wId pYxDgPovv8VFo5lUBJINOZDSdpCqY/7T/30sdW3SFSDjM+MMbpJGQkloKliuhZ0u kA76IO3fMOGY/g0BIG2K02/zwnwLhEhpya2/JhVVvXjwycRi0fcHzu+GfLnGJ7pY PvfL88bv2wPAKOCscRHbZW0wVY3BdGoIcd5wojegyAhIyrwblemBbvK9hfBVWGNJ JQbqKe+EUyCdwsNwGRr7v84HDBDxTHhYR02phAiSxthyew6ij9NbQWM+PNNZOKM5 qGzmLKvFklgNySH88mFTOVAo45Vt1UQ4vhHP2X3xmvdThf+QFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHLR51pwYWmJtrfr5LT9xpmxujRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTM5MDNmY2YtNDg3NS0z OGVmLWE1ZTAtZDFmMzYwZDZkNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBwILCXD3TrkjztM/L3RSJqcXvDRRNM0XGhUZyPkeRdLw6pGULOt0Ji XMN1RmswFtW7svS6goPvNkOGp588jFbZJrBz8umAqmYKlmzY+dPlpENLXewspJPd lAr+gQ92fFfaNf7bbhdBpLxMSDrSHNlxfwSBz/SxyFjxypK1WtmP+5D0gaJKWkrY w/H7sI4S74FQAqFjfIPT1rlHPsIXG0Mo5eS4TXlNHXWbw99IauZ2Vu76962c/6BE WlA32RAxXhCatd6eBJy3/szmwFRecSMMkDD1Rf1Mkm8pWb0F3C67uQ6eQsZ/KCXg Z0dEVpzPc0tTGmQYzW7t2mfj8PCh420= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:39 2025 by rpki-client