$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa File: 2d04850b-c425-399f-a2a3-1e07cbe5340a.roa (raw, json) Hash identifier: 3P1qSfrlbIEDSW2HHyQlzIk5/g5BshWkGYac8xfeWyI= Subject key identifier: CB:B3:B4:FF:27:9D:D9:C5:86:C3:A8:12:FF:15:9A:D2:8B:44:22:08 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71113EF20308983C24F9300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:13:ef:20:30:89:83:c2:4f:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=d5def11f-1d7e-439a-9c89-3fdf3163b49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:76:9c:9a:09:fa:fd:fa:08:35:09:10:f5: 0f:c8:42:84:a3:99:61:8c:f2:47:67:a3:50:e9:b3: cd:57:79:e1:b3:22:fe:be:17:c4:b8:63:07:1c:0b: 19:85:a3:56:d7:c8:ab:19:7b:05:97:27:4a:62:10: a3:fd:95:78:7c:e1:fe:9b:36:21:7f:52:ff:5a:da: 97:de:02:20:b7:de:18:b5:4b:52:1a:df:9d:d8:a4: 33:e1:b4:2c:90:ae:ca:7b:ce:b3:20:0e:fc:90:ad: 7f:dd:3b:e2:55:a8:00:c0:c7:72:aa:b3:b3:bb:cc: fe:f2:9b:2f:cc:68:98:8f:fc:3a:36:8c:5b:f7:59: 3b:79:af:8d:83:53:79:78:1f:55:80:dc:e8:03:53: b5:17:7d:16:ce:51:84:f7:85:92:6e:4f:9d:78:aa: 91:d0:20:dc:78:ea:9f:a1:ea:41:cc:62:74:c7:77: 7c:be:6f:d5:5c:6d:ae:ff:62:7b:2a:d0:79:ec:f6: 83:84:95:84:75:7e:62:03:c1:a8:77:0f:01:53:03: 53:16:e1:fd:9e:60:b3:26:aa:83:b1:ae:62:3f:95: b6:fb:60:b9:ac:1e:d5:f8:d7:e5:32:fb:eb:59:07: da:74:9e:4b:f6:5c:7d:55:a7:5d:d2:4f:67:87:f4: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B3:B4:FF:27:9D:D9:C5:86:C3:A8:12:FF:15:9A:D2:8B:44:22:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9a:b8:9e:b7:29:21:9a:fe:66:09:f2:28:1f:69:c7:92:90: 74:00:0c:39:9a:50:80:1c:8f:44:63:a7:cf:af:61:84:a9:fd: 53:3b:3d:03:38:04:23:5b:5c:6e:79:fe:c2:3c:1a:f5:8a:32: 12:8a:e6:01:f0:a7:82:fd:ca:40:52:d1:be:bb:11:25:9d:13: be:97:03:79:1e:71:34:6c:c4:a6:4d:67:03:d8:5c:0b:de:a9: 38:9c:90:c3:4e:23:8f:40:63:c0:78:9b:f9:32:a2:cf:b3:35: 05:96:7a:6f:72:3f:8c:81:99:a1:f8:07:dd:1f:14:f1:64:a6: cc:ee:08:2c:e0:76:aa:09:0c:ab:f3:4b:e8:31:b4:3d:c3:6e: e7:fd:27:fc:5f:a4:66:f4:1e:f0:75:3d:8b:7b:f0:62:e8:65: 07:e9:b1:f3:a7:93:cc:c4:66:a0:fb:61:56:68:4d:83:52:8e: f7:9d:04:90:42:ec:bf:8b:cd:bb:08:0b:50:d1:96:88:49:d6: 7b:19:86:f2:2e:94:42:8f:ff:13:26:33:f2:af:81:00:28:8e: 9e:2d:43:d4:36:1b:fb:bc:7e:0d:24:9f:e7:5d:38:29:1b:d6: 4d:84:da:2e:51:19:c7:df:39:04:8a:ff:e3:c3:dc:66:f7:e0: 5d:90:55:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERPvIDCJg8JPkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZDVkZWYxMWYtMWQ3ZS00MzlhLTljODktM2ZkZjMxNjNiNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmp2nJoJ+v36CDUJEPUPyEKEo5lhjPJHZ6NQ 6bPNV3nhsyL+vhfEuGMHHAsZhaNW18irGXsFlydKYhCj/ZV4fOH+mzYhf1L/WtqX 3gIgt94YtUtSGt+d2KQz4bQskK7Ke86zIA78kK1/3TviVagAwMdyqrOzu8z+8psv zGiYj/w6Noxb91k7ea+Ng1N5eB9VgNzoA1O1F30WzlGE94WSbk+deKqR0CDceOqf oepBzGJ0x3d8vm/VXG2u/2J7KtB57PaDhJWEdX5iA8Godw8BUwNTFuH9nmCzJqqD sa5iP5W2+2C5rB7V+NflMvvrWQfadJ5L9lx9Vadd0k9nh/TBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuztP8nndnFhsOoEv8VmtKLRCIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmQwNDg1MGItYzQyNS0z OTlmLWEyYTMtMWUwN2NiZTUzNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyauJ63KSGa/mYJ8igfaceSkHQADDmaUIAcj0Rjp8+vYYSp/VM7PQM4 BCNbXG55/sI8GvWKMhKK5gHwp4L9ykBS0b67ESWdE76XA3kecTRsxKZNZwPYXAve qTickMNOI49AY8B4m/kyos+zNQWWem9yP4yBmaH4B90fFPFkpszuCCzgdqoJDKvz S+gxtD3Dbuf9J/xfpGb0HvB1PYt78GLoZQfpsfOnk8zEZqD7YVZoTYNSjvedBJBC 7L+LzbsIC1DRlohJ1nsZhvIulEKP/xMmM/KvgQAojp4tQ9Q2G/u8fg0kn+ddOCkb 1k2E2i5RGcffOQSK/+PD3Gb34F2QVYA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:07 2025 by rpki-client