$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21f05498-3fcb-333e-b852-eeea0ca97209.roa File: 21f05498-3fcb-333e-b852-eeea0ca97209.roa (raw, json) Hash identifier: D7eW1FJDHsiMV/W8e+cWsi1r+AfIO4KQQp/siFAvZ7A= Subject key identifier: F2:E9:FC:A5:C4:23:29:89:D9:58:5B:AF:30:7C:2A:BA:A4:60:2E:44 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABADBCA762822BB5196840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21f05498-3fcb-333e-b852-eeea0ca97209.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ad:bc:a7:62:82:2b:b5:19:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=051dcd18-f7d8-430c-8db2-5947472a5ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:b9:86:c3:e5:8b:46:19:45:b6:ee:07:63: 6b:85:f9:47:74:85:3a:ad:8c:f9:da:e1:e3:48:16: 0f:60:f1:0e:66:db:6d:ca:39:0b:12:fc:ea:e7:9e: 4a:26:7b:9e:b4:e6:3a:b1:6e:ca:05:6b:d5:f5:63: cd:8e:3c:24:d8:ac:16:cd:06:9a:93:26:b6:99:8a: 75:9a:55:3a:81:f9:4e:85:66:a7:9b:15:33:aa:5b: 0c:5b:30:73:f2:d9:3d:7d:70:4f:41:32:88:3b:da: 85:b5:9b:83:1d:1b:8d:8d:02:e0:6b:f9:8e:fe:30: 14:8d:bd:f1:5b:57:7c:c8:18:69:dc:64:99:5b:6f: 9d:cc:91:55:e5:7e:c5:77:b7:f5:da:64:9c:4d:cd: e9:59:c9:81:5d:8a:3d:3f:ad:b5:81:44:23:db:82: 39:a7:1a:59:a7:fe:ae:6f:24:ef:b5:f8:c7:d0:d8: e6:26:e1:d6:5b:c9:bf:4f:0f:31:ba:84:f2:c9:0d: a7:68:e9:c3:12:5f:8f:32:7b:e3:a6:e5:3f:51:a7: 34:4c:cb:47:0b:78:74:03:17:84:93:e7:c5:ad:ab: d2:e8:96:07:10:fc:6b:ad:e1:73:03:04:e2:74:c1: 71:63:a9:6d:9f:26:52:89:f2:b3:29:8d:fe:c5:50: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E9:FC:A5:C4:23:29:89:D9:58:5B:AF:30:7C:2A:BA:A4:60:2E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21f05498-3fcb-333e-b852-eeea0ca97209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a6:6d:0f:69:4a:7b:0d:f2:b3:fd:00:b9:c1:78:4b:fd:6a: f9:cb:40:99:19:58:58:f7:48:65:4c:f3:de:fe:9c:74:7e:ae: 87:01:05:01:e1:e9:77:e8:ee:e1:f1:cb:38:98:b4:0f:5b:f3: dc:d6:2d:a5:f7:ed:69:9e:56:79:09:e1:ff:42:10:9c:e0:8a: 57:99:ce:f5:42:bb:9c:0c:01:a2:32:85:49:ec:6b:86:8d:d5: 82:03:a6:a3:ab:bb:88:cd:6a:2b:75:1c:60:e4:96:1e:35:b6: 94:ab:bb:67:04:24:8a:92:e1:1d:e1:c6:51:ea:8a:b1:ab:ba: e0:e2:1a:84:50:b2:aa:02:f4:cc:35:bc:18:4c:16:98:ee:ba: dc:9f:76:01:f8:f5:a0:a9:8b:1d:8b:94:ae:8c:96:4e:70:ff: 60:a0:22:c4:f1:c9:3d:c0:ce:d7:86:d5:77:8c:c1:17:fb:1e: f4:84:8a:70:f8:46:82:e9:7e:2c:03:4c:44:cd:f0:aa:0c:ff: d1:58:1e:2a:60:0a:44:6f:e1:f5:46:3f:32:3b:b1:ca:99:eb: 24:03:88:de:f2:2d:8a:58:92:12:0a:c5:c2:4d:8a:35:16:32: 04:d0:79:b0:e5:08:97:62:ce:03:90:dd:0a:db:ab:ff:5a:0a: 6f:6e:ea:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq628p2KCK7UZaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MDUxZGNkMTgtZjdkOC00MzBjLThkYjItNTk0NzQ3MmE1Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Oi5hsPli0YZRbbuB2NrhflHdIU6rYz52uHj SBYPYPEOZtttyjkLEvzq555KJnuetOY6sW7KBWvV9WPNjjwk2KwWzQaakya2mYp1 mlU6gflOhWanmxUzqlsMWzBz8tk9fXBPQTKIO9qFtZuDHRuNjQLga/mO/jAUjb3x W1d8yBhp3GSZW2+dzJFV5X7Fd7f12mScTc3pWcmBXYo9P621gUQj24I5pxpZp/6u byTvtfjH0NjmJuHWW8m/Tw8xuoTyyQ2naOnDEl+PMnvjpuU/Uac0TMtHC3h0AxeE k+fFravS6JYHEPxrreFzAwTidMFxY6ltnyZSifKzKY3+xVA9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLp/KXEIymJ2VhbrzB8KrqkYC5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjFmMDU0OTgtM2ZjYi0z MzNlLWI4NTItZWVlYTBjYTk3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWmbQ9pSnsN8rP9ALnBeEv9avnLQJkZWFj3SGVM897+nHR+rocBBQHh 6Xfo7uHxyziYtA9b89zWLaX37WmeVnkJ4f9CEJzgileZzvVCu5wMAaIyhUnsa4aN 1YIDpqOru4jNait1HGDklh41tpSru2cEJIqS4R3hxlHqirGruuDiGoRQsqoC9Mw1 vBhMFpjuutyfdgH49aCpix2LlK6Mlk5w/2CgIsTxyT3AzteG1XeMwRf7HvSEinD4 RoLpfiwDTETN8KoM/9FYHipgCkRv4fVGPzI7scqZ6yQDiN7yLYpYkhIKxcJNijUW MgTQebDlCJdizgOQ3Qrbq/9aCm9u6uk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:32 2025 by rpki-client