$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/447ad0fe-aac2-39b6-a9c2-f9cb55c223d8.roa File: 447ad0fe-aac2-39b6-a9c2-f9cb55c223d8.roa (raw, json) Hash identifier: lH+Sa74Rxf4usFE5e2Fieg+nG5yYcK7693pPvRtsjQY= Subject key identifier: 49:A3:59:1D:87:D2:5A:2A:A5:D8:DF:E9:9F:1C:3A:CE:22:91:B7:84 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA4B15557001FABCB61C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/447ad0fe-aac2-39b6-a9c2-f9cb55c223d8.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.18.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a4:b1:55:57:00:1f:ab:cb:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=7e54380b-84be-4ed1-879e-72335a34c742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:51:fd:2f:8d:dc:3d:de:7d:20:b8:77:09: d5:e4:62:d1:bb:b5:11:df:f0:54:f2:1d:24:36:e8: 01:4b:7c:e3:38:51:7f:3e:52:48:fe:dd:e3:6b:5d: 01:1c:85:1b:0b:2f:78:c1:ea:53:3b:d8:75:c8:8b: 43:2c:66:8a:5b:8f:55:b5:88:8f:d8:76:1a:b4:fa: c6:dd:f5:0e:5f:e0:4f:78:05:16:75:61:16:36:49: 71:a8:3c:19:40:97:92:2b:37:97:69:8b:62:c1:38: 06:37:c3:7c:6c:4e:1c:92:72:c1:3f:28:ec:dd:5a: a3:ac:ba:29:2a:77:4c:a0:b4:4a:74:a0:9a:e8:93: ff:9e:4c:20:b8:bf:02:0a:de:6c:df:7b:b7:2b:08: 27:97:51:8d:6c:81:dd:ab:47:15:d1:c3:17:9e:70: b1:b9:c8:3e:e9:2f:6a:4c:d3:d5:c5:5d:c5:9a:1d: 9b:b0:21:17:6c:ae:9c:8e:5b:48:61:c2:a4:ea:d7: 5c:9e:3b:17:c1:a0:03:a1:e3:7b:51:3b:2c:c0:b1: b3:ca:ed:03:31:10:02:a8:a2:b3:26:37:be:d4:6b: f5:80:44:89:c4:4d:e0:17:c8:30:97:ac:df:1b:71: eb:ef:36:50:7f:31:a1:d8:9e:22:b2:f7:11:cb:6b: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A3:59:1D:87:D2:5A:2A:A5:D8:DF:E9:9F:1C:3A:CE:22:91:B7:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/447ad0fe-aac2-39b6-a9c2-f9cb55c223d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:de:04:2e:a9:b5:09:12:0b:0f:11:d0:06:30:d8:71:49:3c: 13:98:65:81:21:67:32:3c:34:a5:75:22:d1:f4:bf:7e:04:d5: c8:2a:87:b2:fa:6e:eb:5d:2b:94:0c:11:bb:5a:71:f9:0f:1c: 37:17:57:3b:d6:a5:23:62:33:68:ba:41:63:85:f4:90:37:b7: 2c:b2:cd:c7:40:a2:2a:0d:4d:9e:34:10:81:3a:95:07:67:8f: 5c:d9:a5:73:ae:23:3d:c2:47:09:89:6d:30:fb:1d:10:96:f5: 9b:a8:e1:23:ef:52:bf:89:7f:b5:82:67:b8:84:a0:fe:93:01: 59:24:8a:93:3d:06:98:3a:ee:d7:2a:03:34:16:fb:e0:0d:f0: 9b:89:29:3e:25:d0:fe:49:bb:59:cf:3c:c7:0a:2c:e6:17:93: 6a:9a:36:28:df:c8:a6:05:3e:cd:67:05:b2:ef:ed:a3:92:f4: 7e:50:bc:ef:c3:55:aa:1a:5c:a8:80:0d:03:c6:32:d8:66:20: ae:5c:a4:f1:ec:8e:4d:e6:20:30:f9:15:02:68:66:fa:11:b9: ac:a4:f7:4b:14:be:48:94:bf:35:2e:df:aa:c0:da:ee:2f:25: 8a:de:0c:00:53:eb:a7:c4:eb:7d:d2:f9:a1:8a:db:e2:7e:fa: 03:03:90:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6SxVVcAH6vLYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk N2U1NDM4MGItODRiZS00ZWQxLTg3OWUtNzIzMzVhMzRjNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU1R/S+N3D3efSC4dwnV5GLRu7UR3/BU8h0k NugBS3zjOFF/PlJI/t3ja10BHIUbCy94wepTO9h1yItDLGaKW49VtYiP2HYatPrG 3fUOX+BPeAUWdWEWNklxqDwZQJeSKzeXaYtiwTgGN8N8bE4cknLBPyjs3VqjrLop KndMoLRKdKCa6JP/nkwguL8CCt5s33u3Kwgnl1GNbIHdq0cV0cMXnnCxucg+6S9q TNPVxV3Fmh2bsCEXbK6cjltIYcKk6tdcnjsXwaADoeN7UTsswLGzyu0DMRACqKKz Jje+1Gv1gESJxE3gF8gwl6zfG3Hr7zZQfzGh2J4isvcRy2vVaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmjWR2H0loqpdjf6Z8cOs4ikbeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDQ3YWQwZmUtYWFjMi0z OWI2LWE5YzItZjljYjU1YzIyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTeBC6ptQkSCw8R0AYw2HFJPBOYZYEhZzI8NKV1ItH0v34E1cgqh7L6 butdK5QMEbtacfkPHDcXVzvWpSNiM2i6QWOF9JA3tyyyzcdAoioNTZ40EIE6lQdn j1zZpXOuIz3CRwmJbTD7HRCW9Zuo4SPvUr+Jf7WCZ7iEoP6TAVkkipM9Bpg67tcq AzQW++AN8JuJKT4l0P5Ju1nPPMcKLOYXk2qaNijfyKYFPs1nBbLv7aOS9H5QvO/D VaoaXKiADQPGMthmIK5cpPHsjk3mIDD5FQJoZvoRuayk90sUvkiUvzUu36rA2u4v JYreDABT66fE633S+aGK2+J++gMDkDE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:18 2025 by rpki-client