$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3903b2fb-38e9-378a-883f-e3c388339a4b.roa File: 3903b2fb-38e9-378a-883f-e3c388339a4b.roa (raw, json) Hash identifier: /c5918zBKrN9bna/58zUL8RE3Iec5Y1kf+v2yqO5OS8= Subject key identifier: 17:16:80:3B:BF:CD:6A:06:E3:33:70:29:55:92:42:51:FC:3F:9F:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA51D3C50162313402100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3903b2fb-38e9-378a-883f-e3c388339a4b.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.18.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a5:1d:3c:50:16:23:13:40:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=cd3c8f65-4cb2-4fde-a710-6d497092675a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:aa:f4:6e:d1:6d:14:95:f4:8d:53:17:3a: 0d:92:e5:be:f5:05:c0:39:0c:01:32:27:0b:43:3b: 28:c7:b2:6a:d0:34:41:69:3a:a8:6f:6f:bb:fb:ac: 58:21:e3:57:31:a6:89:d4:16:df:3b:4a:72:ce:1e: d6:a7:5e:cf:fb:9e:6c:8b:04:64:42:0c:da:1c:28: 23:26:79:dd:32:d7:a9:95:bd:3a:0d:12:f4:18:57: b0:38:bb:ed:55:cf:67:47:12:d7:31:89:c1:fd:1d: 83:20:62:93:00:5c:d0:cf:5d:8e:72:32:49:9b:b0: 0c:20:34:31:06:eb:c6:02:7d:0c:fc:d4:7c:87:ad: 64:12:12:c5:8e:55:1e:35:95:f7:dd:aa:15:9f:f6: 1c:e4:88:c0:e7:68:cb:f8:05:e9:04:30:8b:70:b7: 32:eb:e4:9c:8a:48:6c:b6:db:df:53:79:9c:0c:b2: 5f:a1:a6:05:4f:f6:b5:69:f2:2a:fb:f1:cc:c6:08: f1:d2:18:50:80:cd:b5:77:26:5b:c3:39:22:f7:9a: fd:48:a7:e2:c2:26:4b:67:03:c0:48:f3:84:2b:f3: 4b:cc:d6:97:4d:c4:b8:44:04:97:9c:c2:e2:78:32: 1b:66:22:78:52:a6:1c:ee:69:fd:10:3b:71:bc:b1: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:16:80:3B:BF:CD:6A:06:E3:33:70:29:55:92:42:51:FC:3F:9F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3903b2fb-38e9-378a-883f-e3c388339a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:be:64:6b:c7:00:5d:7a:4a:11:06:6c:81:c4:9a:ed:96:f3: e5:fa:b3:a4:41:b7:63:a3:28:d7:3c:64:ba:dc:18:9a:eb:22: 9d:66:c1:e9:99:f7:ab:7e:c8:08:15:bb:09:84:4f:38:45:69: 47:51:d9:94:cb:ac:0e:80:90:93:4c:2e:84:65:ca:f1:d2:14: 66:f6:49:3e:8e:d3:69:49:13:be:d3:02:6c:5f:5d:65:58:76: 8e:6e:d1:78:7b:53:6e:ed:81:55:0f:37:99:77:31:fd:1e:84: 2d:f8:47:77:f6:08:92:2e:42:48:a5:2a:00:ba:eb:d6:b2:cd: e8:d7:23:ba:13:fc:58:cb:f3:9b:67:f5:71:49:8c:37:18:9c: e1:24:64:3f:7b:04:fe:f6:a8:c9:13:62:53:96:7d:4d:50:d1: 2b:5e:ff:26:a6:70:45:17:51:be:aa:e5:fb:91:ce:6e:2b:a7: fb:42:25:72:21:3b:11:21:c0:9b:33:68:4f:dc:63:18:37:23: f6:35:34:c2:70:e9:98:fe:d3:c2:ec:3f:fe:02:0b:99:d8:00: da:d5:ae:de:d8:fe:74:9d:05:cb:75:4a:77:42:77:bb:15:be: 5c:ff:66:c4:17:ed:31:e8:45:de:a3:2e:6f:85:d1:c9:9c:c1: 5f:ce:0e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6UdPFAWIxNAIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2QzYzhmNjUtNGNiMi00ZmRlLWE3MTAtNmQ0OTcwOTI2NzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Daq9G7RbRSV9I1TFzoNkuW+9QXAOQwBMicL Qzsox7Jq0DRBaTqob2+7+6xYIeNXMaaJ1BbfO0pyzh7Wp17P+55siwRkQgzaHCgj JnndMteplb06DRL0GFewOLvtVc9nRxLXMYnB/R2DIGKTAFzQz12OcjJJm7AMIDQx BuvGAn0M/NR8h61kEhLFjlUeNZX33aoVn/Yc5IjA52jL+AXpBDCLcLcy6+Scikhs ttvfU3mcDLJfoaYFT/a1afIq+/HMxgjx0hhQgM21dyZbwzki95r9SKfiwiZLZwPA SPOEK/NLzNaXTcS4RASXnMLieDIbZiJ4UqYc7mn9EDtxvLHDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcWgDu/zWoG4zNwKVWSQlH8P59FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzkwM2IyZmItMzhlOS0z NzhhLTg4M2YtZTNjMzg4MzM5YTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa+ZGvHAF16ShEGbIHEmu2W8+X6s6RBt2OjKNc8ZLrcGJrrIp1mwemZ 96t+yAgVuwmETzhFaUdR2ZTLrA6AkJNMLoRlyvHSFGb2ST6O02lJE77TAmxfXWVY do5u0Xh7U27tgVUPN5l3Mf0ehC34R3f2CJIuQkilKgC669ayzejXI7oT/FjL85tn 9XFJjDcYnOEkZD97BP72qMkTYlOWfU1Q0Ste/yamcEUXUb6q5fuRzm4rp/tCJXIh OxEhwJszaE/cYxg3I/Y1NMJw6Zj+08LsP/4CC5nYANrVrt7Y/nSdBct1SndCd7sV vlz/ZsQX7THoRd6jLm+F0cmcwV/ODsk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:25 2025 by rpki-client