$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa File: 2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa (raw, json) Hash identifier: dVvSKxgKVNB15uSLrWQCIya24DD+4tfdub8z4n5+GDE= Subject key identifier: 39:10:34:3C:CB:9B:43:7B:EA:08:DE:02:95:9F:59:B0:72:59:AE:BF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB97B8703ED0B16A877180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.16.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:97:b8:70:3e:d0:b1:6a:87:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=d436ca1e-436d-4ca4-9f89-43dfe8bc6abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e0:ff:b4:50:55:ac:6a:8d:64:b9:40:0a:e0: 9e:ee:8b:7c:05:e0:d3:59:0a:06:93:41:8f:cf:91: 6c:3e:52:4a:74:a3:aa:b4:27:7f:53:61:50:98:13: c3:63:f1:a7:75:64:b5:1a:ca:3b:ce:3c:d3:ff:7d: eb:11:da:c7:8d:37:fe:83:89:82:09:30:a4:b3:38: 54:a4:d5:55:05:7b:cf:a7:33:c2:ae:f1:48:50:ba: 78:d9:53:ac:40:56:ca:2a:45:99:5f:9f:90:a1:8b: 72:db:8d:3a:3e:68:2a:31:25:f2:a6:21:75:24:01: 03:63:c8:a3:b1:4a:55:38:e4:95:a8:b7:f5:db:52: 86:67:fc:37:88:b0:28:3d:d1:8f:2d:27:c9:ba:ac: 54:58:6a:6f:ec:73:92:45:5a:8a:d3:28:a0:3f:10: 7e:27:b9:a8:77:d8:9a:6d:7e:6a:d0:12:2c:19:e9: 3c:ca:b1:6f:18:67:de:cf:2f:a0:87:56:d9:86:95: 03:d6:e9:f2:35:14:a6:ef:76:0f:c3:a5:ce:13:d7: 07:97:99:62:c2:16:6a:74:0a:52:b5:49:81:31:52: 8f:da:52:5f:21:08:f5:e0:fc:0f:c8:ad:74:4b:d3: a1:8c:f7:57:96:18:89:1b:d2:bd:ba:ee:28:cf:3d: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:34:3C:CB:9B:43:7B:EA:08:DE:02:95:9F:59:B0:72:59:AE:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9f:12:19:fa:8c:cc:58:a0:cf:fa:73:8f:af:64:f8:87:38: 9a:de:b9:1a:e8:08:33:fc:82:8b:4c:28:39:04:a6:6f:3f:89: ba:01:db:dd:e8:be:15:0a:45:ae:53:83:c1:6a:6b:da:27:4e: 38:72:9a:7c:42:99:51:42:04:92:f7:92:b8:d1:f2:0e:97:c8: 53:6e:1c:64:6e:bb:84:92:33:2c:76:71:fa:08:f3:44:5f:ab: 44:c3:f0:f1:a5:e5:ae:1b:2d:0f:24:ed:48:fe:3a:70:90:50: 19:e9:64:bf:8c:67:91:38:76:2f:a8:7a:6a:e7:d8:2d:96:7f: 45:ad:98:4c:24:d3:6c:36:ad:53:04:b9:85:9a:75:53:97:9f: c5:3f:3a:81:03:96:29:19:a3:24:67:69:d2:18:ba:d9:ff:20: 5a:a9:3b:0f:8a:ba:8d:12:c6:54:33:62:78:d7:61:12:4c:23: 23:7e:2f:89:32:77:0f:9e:f6:b5:61:d7:0e:9b:e6:4f:0c:4f: f8:39:2b:80:5d:d0:5a:e0:74:31:d8:2d:c2:da:7a:a2:05:d4: ad:c2:57:fd:30:66:f7:a5:6a:06:f7:f3:a2:d6:36:b1:91:e4: 50:76:88:30:38:0d:b9:7d:62:1e:a6:72:1f:97:11:e5:7a:54: 97:e1:f3:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5e4cD7QsWqHcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDQzNmNhMWUtNDM2ZC00Y2E0LTlmODktNDNkZmU4YmM2YWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOD/tFBVrGqNZLlACuCe7ot8BeDTWQoGk0GP z5FsPlJKdKOqtCd/U2FQmBPDY/GndWS1Gso7zjzT/33rEdrHjTf+g4mCCTCkszhU pNVVBXvPpzPCrvFIULp42VOsQFbKKkWZX5+QoYty2406PmgqMSXypiF1JAEDY8ij sUpVOOSVqLf121KGZ/w3iLAoPdGPLSfJuqxUWGpv7HOSRVqK0yigPxB+J7mod9ia bX5q0BIsGek8yrFvGGfezy+gh1bZhpUD1unyNRSm73YPw6XOE9cHl5liwhZqdApS tUmBMVKP2lJfIQj14PwPyK10S9OhjPdXlhiJG9K9uu4ozz3XvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkQNDzLm0N76gjeApWfWbByWa6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmYzZGMxN2UtNjJiNS0z ZmU2LWE5ZjAtNGNhODc5ZTA2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJefEhn6jMxYoM/6c4+vZPiHOJreuRroCDP8gotMKDkEpm8/iboB293o vhUKRa5Tg8Fqa9onTjhymnxCmVFCBJL3krjR8g6XyFNuHGRuu4SSMyx2cfoI80Rf q0TD8PGl5a4bLQ8k7Uj+OnCQUBnpZL+MZ5E4di+oemrn2C2Wf0WtmEwk02w2rVME uYWadVOXn8U/OoEDlikZoyRnadIYutn/IFqpOw+Kuo0SxlQzYnjXYRJMIyN+L4ky dw+e9rVh1w6b5k8MT/g5K4Bd0FrgdDHYLcLaeqIF1K3CV/0wZvelagb386LWNrGR 5FB2iDA4Dbl9Yh6mch+XEeV6VJfh83U= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:42 2025 by rpki-client