$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa File: 2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa (raw, json) Hash identifier: ruL8+tdWtlpj+qQ8Es3s3ifYNKMK9B+iVBB3v/eEC0w= Subject key identifier: F5:D1:C5:2D:19:AF:38:9A:10:D6:E4:02:92:65:02:17:C2:F8:1F:D9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9F599A7C099FEC864D30 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9f:59:9a:7c:09:9f:ec:86:4d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=8f281bf7-5255-4d9c-a100-154a2a68880f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:ae:bd:2b:76:d4:79:9a:0e:4a:8b:21:64: dc:a9:a9:74:04:4b:9e:a8:18:b1:83:24:91:66:3d: 01:d8:23:1a:6a:e0:89:21:b8:a7:72:7c:45:f6:e5: de:8e:ac:4b:89:a1:95:4b:e8:09:b2:e0:a7:1f:90: c6:d5:53:06:ad:e7:f3:cd:d4:bb:47:b5:0d:80:8b: 68:cb:4b:c5:b7:9d:47:0a:42:98:39:68:e3:7f:bf: 89:dc:e4:21:62:b7:a8:82:79:5f:80:ae:c3:60:7b: 2d:db:b9:48:cc:d7:2b:43:46:98:b1:be:2b:96:a9: 22:9e:c1:07:f4:00:7a:5f:3f:95:b8:00:64:a2:e1: 45:6c:ea:29:9a:c1:ae:aa:9d:b3:ba:b7:d6:94:53: 0c:37:2f:59:6d:47:1b:9e:59:ba:00:1f:08:dd:6f: 7f:ec:4d:48:9c:0c:9d:2a:8f:e9:01:12:69:eb:30: df:f3:26:8e:b4:4c:46:e5:4e:e7:b4:f3:3a:b3:f5: 4f:04:35:b1:1c:0f:87:e6:55:b4:1a:b6:74:a9:2f: f8:8a:1b:84:1d:cc:66:f3:2f:86:8f:f2:ef:f2:5e: 81:06:b1:4c:77:6f:44:cc:a7:8d:e8:16:20:a3:1c: 04:aa:eb:b1:6e:b4:95:2a:82:0f:42:b1:e2:cb:df: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D1:C5:2D:19:AF:38:9A:10:D6:E4:02:92:65:02:17:C2:F8:1F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:31:d9:01:aa:22:4f:7b:5e:22:17:23:b2:25:f2:2f:45:de: 4d:7b:af:5b:19:f4:da:3d:57:9c:9d:6c:e1:3d:f0:d3:82:ba: 0f:8a:ec:76:46:5e:63:c9:f6:52:b2:86:0d:a0:09:9d:f1:8e: db:10:5e:98:df:88:06:27:b9:7e:ff:c0:a8:ed:b0:99:0b:c5: 06:97:e7:50:2f:4e:7b:7c:36:d9:ed:f4:c4:cf:ee:0f:9e:a4: 40:f6:42:0d:41:f7:a4:30:15:35:14:0f:d5:62:6c:d3:06:52: 30:81:86:d4:c6:55:5a:15:0b:e8:77:2f:69:37:bb:13:be:c0: 2c:07:47:60:df:09:0b:21:12:d8:26:f9:28:c3:b4:f5:a2:f8: 7f:6c:45:58:4e:48:ae:e1:0e:d9:16:5c:04:b8:46:56:d1:00: b3:b2:c4:fa:bf:2b:60:90:1f:c4:74:1e:68:cb:e1:0d:5d:a5: 33:8c:02:05:14:29:9e:eb:72:63:09:ea:ea:a3:a0:14:cf:7e: 92:2e:fc:b3:59:b5:8c:c2:42:14:b4:38:58:05:67:36:bc:dc: bf:58:6e:3a:bb:78:17:2d:1c:51:04:f7:d0:a1:da:97:a7:5f: 2a:8d:bd:de:97:a8:d6:f2:46:47:71:a2:2a:ab:74:f8:4b:0d: 19:38:e4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq59ZmnwJn+yGTTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OGYyODFiZjctNTI1NS00ZDljLWExMDAtMTU0YTJhNjg4ODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiCuvSt21HmaDkqLIWTcqal0BEueqBixgySR Zj0B2CMaauCJIbincnxF9uXejqxLiaGVS+gJsuCnH5DG1VMGrefzzdS7R7UNgIto y0vFt51HCkKYOWjjf7+J3OQhYreognlfgK7DYHst27lIzNcrQ0aYsb4rlqkinsEH 9AB6Xz+VuABkouFFbOopmsGuqp2zurfWlFMMNy9ZbUcbnlm6AB8I3W9/7E1InAyd Ko/pARJp6zDf8yaOtExG5U7ntPM6s/VPBDWxHA+H5lW0GrZ0qS/4ihuEHcxm8y+G j/Lv8l6BBrFMd29EzKeN6BYgoxwEquuxbrSVKoIPQrHiy98/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXRxS0ZrziaENbkApJlAhfC+B/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM4OWRhODItN2MxMy0z NzhhLWJmYjItZjhmMWRlOTQwZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQx2QGqIk97XiIXI7Il8i9F3k17r1sZ9No9V5ydbOE98NOCug+K7HZG XmPJ9lKyhg2gCZ3xjtsQXpjfiAYnuX7/wKjtsJkLxQaX51AvTnt8Ntnt9MTP7g+e pED2Qg1B96QwFTUUD9VibNMGUjCBhtTGVVoVC+h3L2k3uxO+wCwHR2DfCQshEtgm +SjDtPWi+H9sRVhOSK7hDtkWXAS4RlbRALOyxPq/K2CQH8R0HmjL4Q1dpTOMAgUU KZ7rcmMJ6uqjoBTPfpIu/LNZtYzCQhS0OFgFZza83L9Ybjq7eBctHFEE99Ch2pen XyqNvd6XqNbyRkdxoiqrdPhLDRk45OI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:20 2025 by rpki-client