$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa File: 3ad3404f-e0f0-3545-8701-e9e8495e4652.roa (raw, json) Hash identifier: tqn9hTftp9ET9Qscl7jjB0wBJGjwH0X5Wvar8oljPLE= Subject key identifier: 95:61:58:35:39:24:C2:98:C2:A5:3F:C3:EE:CE:A3:91:70:89:4E:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9D6D640A6AD1043AB0C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.24.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9d:6d:64:0a:6a:d1:04:3a:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=003d50a4-ee45-4b9b-8cf8-4a133840668c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:d4:53:a7:eb:2f:63:8f:d8:3e:e9:d4:c2: b5:90:f8:92:e9:d0:b2:79:6b:88:89:7d:51:a9:b6: 78:52:6b:7c:b2:89:c9:bb:50:6a:d2:68:95:33:0d: bf:62:51:e3:dd:af:de:e9:4b:a8:08:fe:56:7d:6a: 05:96:a6:6c:f2:b0:41:b8:a8:39:e2:6c:8e:43:17: e4:c2:62:1e:fb:90:73:d1:ba:fb:c6:93:a6:3a:e1: 51:35:9f:c7:2d:b3:eb:1b:56:08:19:d2:ec:1f:bd: d9:db:91:43:49:6d:14:32:e5:e8:a0:84:c9:b0:da: e5:52:82:cf:b4:f8:29:6f:fe:66:ef:cd:d8:ac:05: a7:55:0c:94:d7:8f:35:4c:0e:3b:d3:7e:9b:2f:d2: a3:38:03:98:cc:6d:29:2e:27:17:63:7c:82:cb:f4: 49:c3:4e:3a:4f:7f:26:1c:d3:0e:7a:3a:22:70:0e: 4c:23:97:d3:d0:d9:67:86:13:b6:8f:56:3d:5b:2b: be:f5:67:aa:7a:87:30:af:a3:1d:c9:eb:08:c4:80: 8c:03:ff:5f:dc:28:06:39:77:12:30:10:bb:d5:1a: 18:c7:73:59:be:5c:43:8d:24:d3:d5:39:40:94:e1: 36:1a:27:dc:00:6f:37:8b:92:95:a6:a7:d1:f8:b3: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:61:58:35:39:24:C2:98:C2:A5:3F:C3:EE:CE:A3:91:70:89:4E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:72:17:61:89:27:f3:13:05:8a:e1:8e:29:f9:b9:c2:cd:69: 27:9c:32:98:26:1c:4a:cf:b7:f2:46:7a:a0:ce:1e:8b:0e:06: f9:b2:cb:91:76:a7:91:3a:4a:32:ca:14:15:c9:55:fb:62:30: 5c:db:85:43:8d:1b:22:46:da:2c:22:5c:0b:d2:52:fa:d6:03: 10:42:6c:96:39:46:8c:5a:73:3c:16:05:24:7d:c1:5c:4c:f1: 6b:c4:96:ba:a0:ac:69:5d:42:a6:90:15:f3:ff:ad:49:12:5f: 21:f4:9e:c7:12:15:c8:1e:df:8d:8f:8f:16:af:54:bc:57:a4: 87:e0:ee:f5:27:5a:ae:2e:bb:cc:88:46:a5:f7:3b:32:6d:2e: e0:0a:11:fd:ad:b8:c2:a4:38:e0:13:c7:f9:3e:b0:e4:b5:0e: 81:7b:6a:87:38:4d:1b:bf:cf:4d:70:9f:9c:68:cf:0b:ab:66: 95:80:11:b6:ce:35:43:4a:1c:2e:7c:46:f3:4e:1b:eb:41:8d: 55:21:aa:e1:e6:b5:c2:66:ab:87:6e:89:b8:fe:d6:e0:8d:74: 04:38:10:33:f0:8e:d7:cf:4c:e6:cf:b8:e2:f3:a1:f9:1e:f6: dd:9b:51:2a:1d:cb:b4:c3:bc:8c:81:0c:38:11:f9:fa:28:83: 32:7d:d7:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq51tZApq0QQ6sMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MDAzZDUwYTQtZWU0NS00YjliLThjZjgtNGExMzM4NDA2NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqonUU6frL2OP2D7p1MK1kPiS6dCyeWuIiX1R qbZ4Umt8sonJu1Bq0miVMw2/YlHj3a/e6UuoCP5WfWoFlqZs8rBBuKg54myOQxfk wmIe+5Bz0br7xpOmOuFRNZ/HLbPrG1YIGdLsH73Z25FDSW0UMuXooITJsNrlUoLP tPgpb/5m783YrAWnVQyU1481TA47036bL9KjOAOYzG0pLicXY3yCy/RJw046T38m HNMOejoicA5MI5fT0NlnhhO2j1Y9Wyu+9Weqeocwr6MdyesIxICMA/9f3CgGOXcS MBC71RoYx3NZvlxDjSTT1TlAlOE2GifcAG83i5KVpqfR+LPrWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVhWDU5JMKYwqU/w+7Oo5FwiU4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2FkMzQwNGYtZTBmMC0z NTQ1LTg3MDEtZTllODQ5NWU0NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9yF2GJJ/MTBYrhjin5ucLNaSecMpgmHErPt/JGeqDOHosOBvmyy5F2 p5E6SjLKFBXJVftiMFzbhUONGyJG2iwiXAvSUvrWAxBCbJY5RoxaczwWBSR9wVxM 8WvElrqgrGldQqaQFfP/rUkSXyH0nscSFcge342PjxavVLxXpIfg7vUnWq4uu8yI RqX3OzJtLuAKEf2tuMKkOOATx/k+sOS1DoF7aoc4TRu/z01wn5xozwurZpWAEbbO NUNKHC58RvNOG+tBjVUhquHmtcJmq4duibj+1uCNdAQ4EDPwjtfPTObPuOLzofke 9t2bUSody7TDvIyBDDgR+foogzJ91zU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:36 2025 by rpki-client