$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa File: 385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa (raw, json) Hash identifier: uJV7UKoDLsdWPmRF2bJ1/ztskyP1i76PnC+E4bOfHL0= Subject key identifier: 9F:A9:70:4F:DA:6B:40:51:E0:01:08:97:D7:2E:AA:DA:4C:A0:A7:98 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC711170B76AEFD632672FF40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.31.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:17:0b:76:ae:fd:63:26:72:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=5d0e884f-f26b-445f-bd6d-01b33217f0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:ab:25:f5:83:37:85:a2:f2:97:bb:a8:84: 7a:87:35:fb:a1:be:f3:03:17:12:12:ab:00:72:e3: 10:71:7c:5c:ab:dc:e9:95:f8:7c:52:fe:6d:72:43: e7:e3:f9:11:c4:df:87:f2:24:81:82:a6:ab:11:9e: 76:3c:46:71:65:10:44:44:2d:4a:55:1a:77:40:6a: 2a:1c:a4:07:f5:87:c1:ed:04:a6:58:25:db:95:39: b5:29:8b:cc:61:d2:6b:e0:de:63:0c:be:04:ea:9b: 7b:5b:5d:36:8f:81:3a:17:fd:67:84:ad:74:ba:8e: bb:d7:72:cf:dd:27:f2:b5:21:0b:b2:1e:c4:32:0d: 4f:55:91:eb:e6:22:51:dc:1c:8a:52:e8:87:47:e2: ec:52:b4:19:36:44:33:9b:57:97:f7:30:fb:09:da: 6a:3e:14:4a:32:2d:d3:87:3a:ac:30:18:46:3f:18: c0:31:57:74:e5:78:5c:47:43:53:b5:61:d6:67:d5: c8:5f:d6:5e:fd:99:a5:98:08:08:42:71:7b:00:80: d7:c3:b4:59:a7:9d:f1:d3:7d:37:32:18:7c:2b:d5: 9b:cc:a7:79:6e:19:60:02:d8:41:46:94:32:cb:09: d4:f4:65:09:d4:d7:bb:c3:c7:7a:0f:48:b6:be:c7: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A9:70:4F:DA:6B:40:51:E0:01:08:97:D7:2E:AA:DA:4C:A0:A7:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a1:88:2d:f3:f6:43:f9:b7:c0:9c:94:a4:d8:77:b8:dc:fd: 15:bc:a0:6d:09:31:d2:61:46:6b:c7:4a:05:d4:0f:15:1b:89: 08:f8:2b:b1:38:e0:ae:76:10:00:13:5d:4a:1f:95:c8:e6:92: 74:72:b0:8e:d3:cf:15:2f:a9:ab:a4:f5:80:cb:07:88:40:8c: 38:84:b5:a7:4e:7a:4a:6f:78:ec:28:c4:66:af:2e:3b:30:47: 3c:39:65:35:9a:f7:dd:b6:ac:4b:e8:33:b0:8e:10:5b:54:ba: 9f:9a:e3:db:fb:b5:3c:6a:84:3a:93:c7:32:8b:e4:1e:6d:32: e4:5a:0e:e2:e3:95:a0:3b:ca:d9:5b:38:a5:33:9d:36:7e:da: ca:f0:3e:3c:86:a5:41:e5:ea:d2:20:02:76:5d:5f:fc:ee:71: 6a:6d:fd:08:cf:07:00:a8:c4:f7:81:30:7f:29:4b:7b:8d:dd: d5:74:51:a9:e9:be:ea:5f:95:b0:ba:5e:db:34:e2:e6:d8:f4: 1e:0b:59:1a:79:3e:16:76:cd:9d:e3:9a:90:7a:38:83:27:f6: a6:35:72:0a:f9:5c:18:5f:63:d2:6b:ff:92:86:33:be:c3:2d: f8:2c:6e:eb:f5:be:4c:36:d4:da:ac:fb:d0:71:a6:0b:bc:25: 20:e0:be:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERcLdq79YyZy/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NWQwZTg4NGYtZjI2Yi00NDVmLWJkNmQtMDFiMzMyMTdmMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDqrJfWDN4Wi8pe7qIR6hzX7ob7zAxcSEqsA cuMQcXxcq9zplfh8Uv5tckPn4/kRxN+H8iSBgqarEZ52PEZxZRBERC1KVRp3QGoq HKQH9YfB7QSmWCXblTm1KYvMYdJr4N5jDL4E6pt7W102j4E6F/1nhK10uo6713LP 3SfytSELsh7EMg1PVZHr5iJR3ByKUuiHR+LsUrQZNkQzm1eX9zD7CdpqPhRKMi3T hzqsMBhGPxjAMVd05XhcR0NTtWHWZ9XIX9Ze/ZmlmAgIQnF7AIDXw7RZp53x0303 Mhh8K9WbzKd5bhlgAthBRpQyywnU9GUJ1Ne7w8d6D0i2vscQFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+pcE/aa0BR4AEIl9cuqtpMoKeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzg1ODU1ZWQtMzcxNy0z MmI5LWE1YWUtYjI5NTlmNGJjYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByhiC3z9kP5t8CclKTYd7jc/RW8oG0JMdJhRmvHSgXUDxUbiQj4K7E4 4K52EAATXUoflcjmknRysI7TzxUvqauk9YDLB4hAjDiEtadOekpveOwoxGavLjsw Rzw5ZTWa9922rEvoM7COEFtUup+a49v7tTxqhDqTxzKL5B5tMuRaDuLjlaA7ytlb OKUznTZ+2srwPjyGpUHl6tIgAnZdX/zucWpt/QjPBwCoxPeBMH8pS3uN3dV0Uanp vupflbC6Xts04ubY9B4LWRp5PhZ2zZ3jmpB6OIMn9qY1cgr5XBhfY9Jr/5KGM77D Lfgsbuv1vkw21Nqs+9Bxpgu8JSDgvjc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:21 2025 by rpki-client