$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa File: 1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa (raw, json) Hash identifier: +Dk9e0PhtF0sLzeFW5y79HsUkn5pJLk9ooYuvWepnDI= Subject key identifier: BD:CD:83:BB:84:32:CA:28:0A:69:91:20:43:3B:9F:E7:FB:7F:6D:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71114E53BF94D61C00F3D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:14:e5:3b:f9:4d:61:c0:0f:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=f7a9b9e3-891f-4bdc-b4b1-a959653552c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:7b:fd:c2:e2:94:d9:08:f3:d4:d0:a6:53: 23:86:d2:ea:e2:4d:19:63:47:28:da:2e:03:29:23: 74:7f:64:c5:8d:7e:67:3e:15:1a:85:5a:07:f4:7f: 84:57:6c:37:57:e5:54:60:31:b4:74:cb:c8:a0:4f: 46:05:3d:13:48:fd:4c:23:be:0f:61:7a:df:3a:7a: 3b:c6:1a:53:85:29:7a:04:1b:95:11:11:98:f4:84: 99:78:b0:3b:87:61:17:91:f2:6c:05:d7:ab:c1:3b: f8:ac:fa:f9:2c:d8:d1:42:3c:70:76:8b:90:11:75: ea:8e:20:4d:f6:a5:12:71:ed:4b:cb:3e:cf:f7:8b: 0e:04:51:0a:5e:60:77:ab:63:3f:4b:92:1a:8d:cf: e0:87:80:21:a8:f6:dc:bb:d2:9e:b4:6a:0d:84:3f: a7:47:e0:5b:ae:7e:87:6b:4b:5b:c6:a4:04:c4:2e: 14:c4:95:a7:a5:03:18:4e:20:e7:d9:2c:8c:3a:76: ef:44:9c:ca:4b:92:6f:24:a1:f3:e0:4e:c5:b3:54: 27:ee:e5:80:d9:5a:4f:c9:70:fa:42:bd:b9:70:76: 15:a9:d0:4a:34:28:79:b9:f3:ba:9d:50:31:94:bc: 8d:74:b9:76:4c:32:16:a1:99:95:c5:3d:51:b0:cf: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CD:83:BB:84:32:CA:28:0A:69:91:20:43:3B:9F:E7:FB:7F:6D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:45:83:6e:cd:4f:41:80:0e:c4:c4:b2:44:2f:79:11:ee:3d: 58:b4:d4:2e:45:1d:22:e3:31:bb:8f:7b:49:51:97:ee:e0:bf: 37:37:02:09:c7:f3:54:2b:03:4e:ec:40:ae:ab:9e:03:d0:dc: 9f:b7:16:db:46:bd:42:f4:5d:59:ae:3e:60:93:60:33:dc:c7: 79:27:a7:8b:c3:e8:ee:f2:fc:6b:66:2c:c0:61:a8:8c:ea:30: 8f:d2:81:4a:74:0a:12:58:f0:b4:67:99:4c:14:38:ce:53:2c: 83:8e:0b:46:21:59:1a:bd:65:ab:b5:9b:d6:04:5b:ff:db:dd: f3:d8:7d:18:4f:f9:45:ce:91:8f:11:09:a5:a7:6f:f8:0f:52: 84:44:4b:23:ea:da:d0:18:f7:f1:ad:91:00:b0:3c:ae:ce:5a: 54:74:97:23:e9:6c:de:14:0e:7d:3f:26:ce:f4:77:63:66:11: 85:76:92:98:25:68:57:f4:cc:5a:31:a0:0d:ef:b0:0d:0c:ff: 14:e3:e6:ac:f7:89:92:9b:09:c9:78:bd:ae:37:d9:95:fe:87: 62:74:48:26:19:e2:88:cf:47:e7:d8:1b:49:16:53:3d:e1:24: da:b0:95:9e:09:3b:19:a4:d1:f0:4e:96:02:65:61:67:e0:09: 9b:06:ee:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERTlO/lNYcAPPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZjdhOWI5ZTMtODkxZi00YmRjLWI0YjEtYTk1OTY1MzU1MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT97/cLilNkI89TQplMjhtLq4k0ZY0co2i4D KSN0f2TFjX5nPhUahVoH9H+EV2w3V+VUYDG0dMvIoE9GBT0TSP1MI74PYXrfOno7 xhpThSl6BBuVERGY9ISZeLA7h2EXkfJsBderwTv4rPr5LNjRQjxwdouQEXXqjiBN 9qUSce1Lyz7P94sOBFEKXmB3q2M/S5Iajc/gh4AhqPbcu9KetGoNhD+nR+Bbrn6H a0tbxqQExC4UxJWnpQMYTiDn2SyMOnbvRJzKS5JvJKHz4E7Fs1Qn7uWA2VpPyXD6 Qr25cHYVqdBKNCh5ufO6nVAxlLyNdLl2TDIWoZmVxT1RsM8WmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3Ng7uEMsooCmmRIEM7n+f7f21HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWZkZjZiODAtYzZjZC0z ZjMyLWE5YmUtNGE0YmVhYjViZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpFg27NT0GADsTEskQveRHuPVi01C5FHSLjMbuPe0lRl+7gvzc3AgnH 81QrA07sQK6rngPQ3J+3FttGvUL0XVmuPmCTYDPcx3knp4vD6O7y/GtmLMBhqIzq MI/SgUp0ChJY8LRnmUwUOM5TLIOOC0YhWRq9Zau1m9YEW//b3fPYfRhP+UXOkY8R CaWnb/gPUoRESyPq2tAY9/GtkQCwPK7OWlR0lyPpbN4UDn0/Js70d2NmEYV2kpgl aFf0zFoxoA3vsA0M/xTj5qz3iZKbCcl4va432ZX+h2J0SCYZ4ojPR+fYG0kWUz3h JNqwlZ4JOxmk0fBOlgJlYWfgCZsG7mE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:52 2025 by rpki-client