$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa File: 3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa (raw, json) Hash identifier: EWvasulHJFDHYgAetZKaUqo9Zpx3KmfUEx19pWu8g/4= Subject key identifier: 96:60:B8:9B:F6:7C:41:FA:39:05:6C:66:E8:AE:C0:67:48:E9:F4:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71111CED9F213D77548C780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:11:ce:d9:f2:13:d7:75:48:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=3cc509ae-c8cb-440b-a5ca-ef4c4f9c0d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:46:cb:0f:a7:c2:84:97:07:d9:90:64:19: bb:22:c4:8b:c4:c9:6c:1c:31:50:a1:d8:18:0c:50: d6:07:ce:78:31:c1:bb:ff:1e:c0:d5:69:92:d4:6f: 6f:dc:bc:af:6d:ce:69:e2:11:a3:ab:58:e9:df:75: 85:82:b5:20:3f:3f:91:03:08:8b:fb:ad:bd:02:f2: 33:2b:f5:12:80:c8:d6:18:5a:4e:bf:3d:20:3f:4c: a0:eb:a3:2c:93:91:f1:3b:19:b9:8d:cc:54:16:0d: 0e:e9:62:fa:1f:d7:e8:31:a8:1f:ef:fc:ff:b6:fc: f3:be:8c:9b:65:00:c9:00:ea:ba:d3:9e:12:6d:ba: fd:8f:f0:dd:37:fb:41:9a:e7:67:b8:a9:92:0a:15: e3:2e:7e:5e:76:25:a6:4b:8f:c9:5f:6f:4c:de:f1: c7:74:29:a7:c1:49:91:6a:0a:58:69:36:cf:a9:93: 84:f7:e3:37:cf:6a:0b:b2:c4:d3:61:a2:96:79:b5: 4f:68:11:03:3e:4c:6a:cf:41:0d:df:60:65:7d:55: cc:40:44:01:09:8f:42:5c:ea:09:7d:16:44:58:f6: 36:75:bf:e4:29:11:79:61:72:1b:96:ec:2a:ae:12: d5:e3:e3:a4:14:73:75:00:fe:0b:61:fc:11:1e:fc: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:60:B8:9B:F6:7C:41:FA:39:05:6C:66:E8:AE:C0:67:48:E9:F4:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:67:69:76:a6:13:0b:cb:19:f1:45:80:45:31:c7:3a:00:88: ea:11:24:18:a5:b8:ae:a1:d5:18:12:ad:4c:24:b9:7b:8e:4f: 8d:21:89:95:1d:b3:29:fb:79:52:6d:76:51:5e:71:91:17:60: eb:c9:ac:63:69:f6:4d:fe:d8:34:d4:fb:e1:16:91:ef:cb:d6: 97:93:c9:cf:a1:18:78:4f:3c:05:d1:14:15:67:04:a2:c8:7a: f0:0b:97:64:0b:b4:f0:b6:45:3e:fd:e7:7d:86:6e:43:cd:de: a3:ec:48:ec:c5:77:67:b7:4e:ef:d8:24:b0:f9:fb:02:0f:1a: 00:8b:57:44:da:e7:42:eb:a9:fe:95:39:35:1f:aa:e5:53:56: 05:2b:3c:9d:0d:1d:e3:6c:a8:38:ac:60:b9:bd:41:8f:ce:bd: d6:7a:1d:18:28:fe:83:9c:5d:51:84:ed:f2:44:d9:04:f0:ca: a4:c9:18:a5:92:12:65:5d:51:d2:80:a9:41:5e:b2:eb:24:1a: be:ac:68:e6:f4:9c:ba:10:e1:c0:8c:fd:cd:d8:60:fc:9a:17: 6f:dd:13:56:1c:04:e7:a5:b4:51:d4:7e:5c:86:02:21:7f:b4: 3b:69:e3:7c:f3:5c:6b:9f:c5:d4:4f:59:4b:8c:fb:0a:bc:ac: 44:45:1d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERHO2fIT13VIx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk M2NjNTA5YWUtYzhjYi00NDBiLWE1Y2EtZWY0YzRmOWMwZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/NGyw+nwoSXB9mQZBm7IsSLxMlsHDFQodgY DFDWB854McG7/x7A1WmS1G9v3Lyvbc5p4hGjq1jp33WFgrUgPz+RAwiL+629AvIz K/USgMjWGFpOvz0gP0yg66Msk5HxOxm5jcxUFg0O6WL6H9foMagf7/z/tvzzvoyb ZQDJAOq6054Sbbr9j/DdN/tBmudnuKmSChXjLn5ediWmS4/JX29M3vHHdCmnwUmR agpYaTbPqZOE9+M3z2oLssTTYaKWebVPaBEDPkxqz0EN32BlfVXMQEQBCY9CXOoJ fRZEWPY2db/kKRF5YXIbluwqrhLV4+OkFHN1AP4LYfwRHvw7TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZguJv2fEH6OQVsZuiuwGdI6fTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2IyZGEwYTEtZWNhNy0z NzdjLThhYTYtZDg2ZjA5Yzk4NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpnaXamEwvLGfFFgEUxxzoAiOoRJBiluK6h1RgSrUwkuXuOT40hiZUd syn7eVJtdlFecZEXYOvJrGNp9k3+2DTU++EWke/L1peTyc+hGHhPPAXRFBVnBKLI evALl2QLtPC2RT79532GbkPN3qPsSOzFd2e3Tu/YJLD5+wIPGgCLV0Ta50Lrqf6V OTUfquVTVgUrPJ0NHeNsqDisYLm9QY/OvdZ6HRgo/oOcXVGE7fJE2QTwyqTJGKWS EmVdUdKAqUFesuskGr6saOb0nLoQ4cCM/c3YYPyaF2/dE1YcBOeltFHUflyGAiF/ tDtp43zzXGufxdRPWUuM+wq8rERFHWs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:20 2025 by rpki-client