$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa File: 3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa (raw, json) Hash identifier: xfJi9VZ9x4XBlbo+O8T5BrenAxEl42yv2NcWVEBJnGQ= Subject key identifier: 2C:D1:12:95:34:A1:E0:71:A8:DF:43:2B:45:6F:92:24:D7:0C:28:4A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAD855BC15631ABE26BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ad:85:5b:c1:56:31:ab:e2:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=4ce64d07-0225-4502-8c9b-c7fb12f4eb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:79:5a:86:a5:65:7d:43:d2:c4:4c:35:7b: f3:3b:8b:96:1e:fd:95:20:2e:3e:ab:5e:54:c5:81: 3d:40:7f:92:a8:1c:e1:40:ac:98:e9:a6:3a:bd:f9: b7:5c:c5:49:61:f1:96:32:a7:c8:ff:15:12:ae:7f: bd:7b:de:6b:21:93:f3:8b:95:d1:6a:93:07:9f:ef: 82:50:5c:75:11:49:2a:12:db:f9:58:dd:44:7f:32: 26:45:9d:e8:1c:90:e6:19:b0:a8:40:6d:74:b6:0c: 63:81:3e:41:92:c1:12:40:bb:b4:f9:0e:51:e2:c5: 7a:61:81:62:4b:72:41:e1:86:48:a1:94:56:b9:c4: 37:00:2f:40:fd:e0:c8:d4:34:4e:f9:48:2e:58:dd: 2f:6a:16:84:dc:ba:81:1f:c0:0a:c8:ad:35:51:4a: a0:11:11:68:30:a4:d7:39:88:af:db:6b:39:68:78: 86:77:ae:28:05:ae:3d:04:3e:9a:18:40:2e:b5:9c: 7c:14:65:c5:f7:8a:d3:af:01:1f:58:a5:d8:f5:ad: 2c:0d:30:d2:32:4a:54:a8:d3:65:29:0e:a3:78:90: 68:75:64:9b:79:f4:3e:a7:9e:0d:cc:62:38:ef:6c: e0:9d:06:9f:93:c7:03:14:4c:7b:3c:6a:bf:56:4e: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:12:95:34:A1:E0:71:A8:DF:43:2B:45:6F:92:24:D7:0C:28:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ea:42:4f:10:8e:a4:9f:21:60:bc:2f:2d:15:cc:32:2f:e0: bf:20:58:c5:82:6c:30:49:e7:39:8e:f3:30:db:13:98:72:0a: 61:0d:a9:ab:a3:c7:95:0c:bc:0a:b8:d4:10:87:03:b1:c2:35: 98:48:ad:64:12:e0:02:32:ac:24:87:3e:ad:a5:b7:7c:15:df: 4f:04:66:8a:1e:e1:a9:83:fa:5b:f1:ca:6a:5e:26:13:4e:7e: 00:89:eb:eb:ca:97:38:d6:5e:c6:0d:54:42:58:c3:d7:5c:53: 04:d4:7a:19:e7:8c:1d:12:a1:35:a0:bb:c7:80:79:5b:cc:ef: 59:5e:31:dd:57:a1:9c:69:d4:62:4a:24:88:e7:8b:a0:b9:9d: 24:b5:f6:c9:10:ff:65:89:d7:4e:8a:45:ae:59:f8:a6:d2:63: 64:7b:e7:25:cf:73:c3:be:dd:0b:75:f4:e7:87:c3:8c:a8:06: cb:e3:5c:eb:75:6f:d3:08:c3:c5:57:aa:87:70:41:59:37:b0: 93:f6:eb:7e:5d:ed:96:0e:ee:ff:30:56:62:40:47:48:75:12: 33:75:e8:e5:98:eb:0b:a8:0b:3d:14:34:29:92:0f:00:62:ae: 03:74:ba:f3:a0:05:58:61:18:ac:62:94:5e:3d:cb:66:03:5b: 49:c1:0b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq62FW8FWMavia8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NGNlNjRkMDctMDIyNS00NTAyLThjOWItYzdmYjEyZjRlYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvx5WoalZX1D0sRMNXvzO4uWHv2VIC4+q15U xYE9QH+SqBzhQKyY6aY6vfm3XMVJYfGWMqfI/xUSrn+9e95rIZPzi5XRapMHn++C UFx1EUkqEtv5WN1EfzImRZ3oHJDmGbCoQG10tgxjgT5BksESQLu0+Q5R4sV6YYFi S3JB4YZIoZRWucQ3AC9A/eDI1DRO+UguWN0vahaE3LqBH8AKyK01UUqgERFoMKTX OYiv22s5aHiGd64oBa49BD6aGEAutZx8FGXF94rTrwEfWKXY9a0sDTDSMkpUqNNl KQ6jeJBodWSbefQ+p54NzGI472zgnQafk8cDFEx7PGq/Vk73QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzREpU0oeBxqN9DK0VvkiTXDChKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2Q4NzU3ZjgtNjYxYy0z YjVkLWI1YjAtZWRjZDk3YzA0YmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvqQk8QjqSfIWC8Ly0VzDIv4L8gWMWCbDBJ5zmO8zDbE5hyCmENqauj x5UMvAq41BCHA7HCNZhIrWQS4AIyrCSHPq2lt3wV308EZooe4amD+lvxympeJhNO fgCJ6+vKlzjWXsYNVEJYw9dcUwTUehnnjB0SoTWgu8eAeVvM71leMd1XoZxp1GJK JIjni6C5nSS19skQ/2WJ106KRa5Z+KbSY2R75yXPc8O+3Qt19OeHw4yoBsvjXOt1 b9MIw8VXqodwQVk3sJP2635d7ZYO7v8wVmJAR0h1EjN16OWY6wuoCz0UNCmSDwBi rgN0uvOgBVhhGKxilF49y2YDW0nBC9g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:53 2025 by rpki-client