$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa File: 2b3279f2-fad4-3ca8-b7db-21db2208a819.roa (raw, json) Hash identifier: OF/0MrHtfjiHxwZzHEifzAGTVVC/S/MHESaetMSTMjk= Subject key identifier: 45:6E:20:3A:03:C6:5F:6E:84:0B:1E:8A:AE:6B:66:61:1D:FD:CC:29 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9C98537CD7BA88038D54 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.20.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9c:98:53:7c:d7:ba:88:03:8d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=ded5e66a-a164-4b31-a0a6-1db9442386fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:cf:ec:91:72:ec:1c:01:bb:80:2f:8c:50: fb:3a:74:50:fc:ef:77:9e:b0:b8:44:ca:6e:44:4c: c2:71:bd:74:44:23:e7:a8:3a:be:13:b6:85:88:f4: fb:32:d3:2c:bb:fa:88:bc:0b:33:9c:1c:ba:25:59: 6a:69:93:1f:8c:2b:28:07:ce:82:22:96:45:1a:06: 76:68:c0:97:49:1e:fc:94:c9:e7:89:5f:3f:c0:60: be:e6:1c:22:cb:24:f5:5e:3d:4e:28:68:47:c8:5f: 5a:f3:25:c0:27:fd:0e:df:1e:53:95:d6:8b:53:33: 61:27:0c:d2:08:41:5e:dc:9f:5a:41:b3:fd:78:c1: d1:ff:7f:81:5b:dd:2d:00:5c:6c:e3:87:cb:ff:ef: be:68:2c:20:90:12:91:62:2b:d2:5a:37:6d:0a:64: 14:ec:7b:95:95:a9:0d:72:ef:1c:28:0a:2c:be:0b: a4:83:17:3f:9e:92:6d:49:62:d0:7a:9a:74:93:44: a0:1b:f6:c1:e9:c5:ca:9f:63:4d:4e:5d:5d:a2:da: 87:1d:73:97:c1:d1:f1:4a:f0:60:16:eb:0e:f2:41: c5:97:66:07:e9:cf:a9:1d:f2:66:04:8c:6a:dc:4f: 69:ae:f1:0e:dc:aa:e1:6e:d7:04:fd:e4:ef:4f:52: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6E:20:3A:03:C6:5F:6E:84:0B:1E:8A:AE:6B:66:61:1D:FD:CC:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:98:b1:1c:f2:34:c3:af:e4:e1:58:c7:03:2b:e6:05:4b:b7: 59:a8:c0:af:62:5a:cd:50:3b:c8:53:cb:b8:c3:40:29:03:0e: 00:40:17:4c:1a:7a:b9:0b:d9:f3:6c:e5:d3:58:36:b5:28:20: 35:09:80:83:04:da:85:05:d6:fc:16:6e:ca:3e:7e:53:99:a5: 9a:60:21:17:b4:90:24:84:96:b1:26:4c:01:6f:fc:6a:d2:eb: 90:19:ab:66:97:89:c3:75:15:b2:38:5b:6c:ff:cc:44:10:89: ad:c3:c3:f1:66:86:15:cc:3f:6e:36:c1:18:9a:6d:91:db:e2: 70:dd:c1:fd:c0:06:08:a2:8b:07:1c:d3:98:4f:d1:dc:5e:e0: 58:b8:0e:45:3c:04:89:a3:aa:49:cb:4b:53:86:90:e8:e4:95: fe:1d:78:8d:59:d5:39:ce:f7:e1:40:ce:20:e1:9a:67:23:1c: 4f:46:ad:fd:dc:53:c5:e7:26:64:38:b9:7c:6c:98:05:94:5b: 82:4e:4d:51:f3:1e:24:67:b9:fc:59:7c:13:51:8c:76:17:a5: 3a:9c:36:0d:3f:79:a8:07:43:d8:47:90:eb:e8:13:13:05:ec: 2f:84:29:af:a4:dc:c9:e2:53:93:48:8a:5f:84:65:37:9f:04: 9f:fb:61:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5yYU3zXuogDjVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGVkNWU2NmEtYTE2NC00YjMxLWEwYTYtMWRiOTQ0MjM4NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVbP7JFy7BwBu4AvjFD7OnRQ/O93nrC4RMpu REzCcb10RCPnqDq+E7aFiPT7MtMsu/qIvAsznBy6JVlqaZMfjCsoB86CIpZFGgZ2 aMCXSR78lMnniV8/wGC+5hwiyyT1Xj1OKGhHyF9a8yXAJ/0O3x5TldaLUzNhJwzS CEFe3J9aQbP9eMHR/3+BW90tAFxs44fL/+++aCwgkBKRYivSWjdtCmQU7HuVlakN cu8cKAosvgukgxc/npJtSWLQepp0k0SgG/bB6cXKn2NNTl1dotqHHXOXwdHxSvBg FusO8kHFl2YH6c+pHfJmBIxq3E9prvEO3KrhbtcE/eTvT1Im1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVuIDoDxl9uhAseiq5rZmEd/cwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIzMjc5ZjItZmFkNC0z Y2E4LWI3ZGItMjFkYjIyMDhhODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+YsRzyNMOv5OFYxwMr5gVLt1mowK9iWs1QO8hTy7jDQCkDDgBAF0wa erkL2fNs5dNYNrUoIDUJgIME2oUF1vwWbso+flOZpZpgIRe0kCSElrEmTAFv/GrS 65AZq2aXicN1FbI4W2z/zEQQia3Dw/FmhhXMP242wRiabZHb4nDdwf3ABgiiiwcc 05hP0dxe4Fi4DkU8BImjqknLS1OGkOjklf4deI1Z1TnO9+FAziDhmmcjHE9Grf3c U8XnJmQ4uXxsmAWUW4JOTVHzHiRnufxZfBNRjHYXpTqcNg0/eagHQ9hHkOvoExMF 7C+EKa+k3MniU5NIil+EZTefBJ/7YbY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:33:55 2025 by rpki-client