$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa File: 44dc2154-dfb0-3282-ae78-26a93970380b.roa (raw, json) Hash identifier: bP7h2lqzeCpMPlgiI0OkkET2PU+K+vP8jb2BTzw/qHY= Subject key identifier: A0:CC:A2:8B:28:FD:A3:31:C1:97:71:46:05:C2:AA:DE:CE:71:C6:C5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABADDDBAA340044975CBC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ad:dd:ba:a3:40:04:49:75:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=605a0e88-a817-4d10-ac0d-384e7a08c61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:61:e6:9c:c0:38:bc:97:ce:a7:ac:44:cd:41: b3:81:59:9b:ac:b1:54:79:e6:f4:91:1d:2a:9f:bc: 86:2a:51:3d:0c:5b:f3:fd:c6:73:fc:f2:7d:00:99: d1:cc:58:2b:87:bd:f4:22:89:04:7e:46:54:84:93: b7:e5:d9:b1:0a:92:79:a9:c3:af:a5:f1:17:83:52: 89:b5:81:81:7b:50:b3:3e:50:cf:ee:90:8f:18:02: 3a:d9:8b:3b:a2:79:08:0d:dd:86:ed:88:8d:e7:c0: 9e:98:1d:3d:c7:dc:a1:a4:ad:74:e1:a6:f5:03:28: d2:f7:aa:d5:69:1c:cf:cb:db:01:b4:40:22:eb:b0: f9:bb:f9:63:70:bc:76:eb:23:31:1f:1a:fe:0b:e4: 97:a8:f3:9d:10:a2:1a:aa:99:c7:1a:af:0c:69:b6: e7:c4:38:b6:25:03:e5:e3:2c:7f:66:f3:87:fa:2d: 4a:11:fa:81:f6:c8:3c:11:82:38:90:82:75:1b:61: f2:6e:bc:62:1c:29:28:42:d5:83:45:06:87:e8:11: ae:c2:b3:79:de:5d:fa:a4:7f:ad:90:7f:75:42:b1: a7:f7:00:ef:0d:bd:8a:b4:47:2e:54:d4:46:b9:b1: 60:1a:5d:02:59:fa:5c:32:ea:ff:d2:96:74:fa:ce: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:A2:8B:28:FD:A3:31:C1:97:71:46:05:C2:AA:DE:CE:71:C6:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b6:14:72:ae:8b:0b:16:07:0d:27:1f:75:49:41:9c:ba:22: c0:22:35:c4:d3:5c:b4:dd:f0:ac:d2:25:69:93:f4:78:af:0d: ed:7d:d8:14:56:6c:f5:76:7d:7d:8f:9f:37:8c:bd:8b:97:49: 6e:5c:47:94:e6:fa:20:4f:bb:22:c3:70:9d:45:98:c9:f9:ab: 92:e7:16:69:65:c3:b9:3d:2e:e6:0c:37:23:7b:29:a6:4a:12: 7b:d9:f5:ac:89:10:67:45:f2:08:8c:10:e4:4b:41:0a:ed:ac: c1:ff:67:52:11:74:44:21:d4:a6:5f:e9:49:7a:91:12:5d:ff: 20:f5:63:7e:73:03:cc:77:d6:5b:0b:04:84:2b:e7:b1:30:80: c9:7b:38:26:b9:94:60:7b:4d:0e:12:0b:5c:6f:85:a2:af:63: bb:a5:46:96:90:35:13:58:32:5e:bd:54:7d:b1:79:76:41:38: f5:c4:d6:b7:9e:9e:c9:1d:62:d4:88:0f:31:90:e1:aa:15:bc: 7e:d3:ec:05:1c:df:1a:1f:92:33:6d:f0:1a:bc:c1:6a:c0:dd: d6:1b:e4:b8:68:56:ef:39:ba:47:a3:6b:0f:84:38:72:3d:5e: 9e:21:66:39:2a:e1:18:0a:25:14:62:91:cc:4c:6f:64:b1:79: b4:4c:69:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq63duqNABEl1y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NjA1YTBlODgtYTgxNy00ZDEwLWFjMGQtMzg0ZTdhMDhjNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGHmnMA4vJfOp6xEzUGzgVmbrLFUeeb0kR0q n7yGKlE9DFvz/cZz/PJ9AJnRzFgrh730IokEfkZUhJO35dmxCpJ5qcOvpfEXg1KJ tYGBe1CzPlDP7pCPGAI62Ys7onkIDd2G7YiN58CemB09x9yhpK104ab1AyjS96rV aRzPy9sBtEAi67D5u/ljcLx26yMxHxr+C+SXqPOdEKIaqpnHGq8MabbnxDi2JQPl 4yx/ZvOH+i1KEfqB9sg8EYI4kIJ1G2HybrxiHCkoQtWDRQaH6BGuwrN53l36pH+t kH91QrGn9wDvDb2KtEcuVNRGubFgGl0CWfpcMur/0pZ0+s6o8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDMooso/aMxwZdxRgXCqt7OccbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDRkYzIxNTQtZGZiMC0z MjgyLWFlNzgtMjZhOTM5NzAzODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW2FHKuiwsWBw0nH3VJQZy6IsAiNcTTXLTd8KzSJWmT9HivDe192BRW bPV2fX2PnzeMvYuXSW5cR5Tm+iBPuyLDcJ1FmMn5q5LnFmllw7k9LuYMNyN7KaZK EnvZ9ayJEGdF8giMEORLQQrtrMH/Z1IRdEQh1KZf6Ul6kRJd/yD1Y35zA8x31lsL BIQr57EwgMl7OCa5lGB7TQ4SC1xvhaKvY7ulRpaQNRNYMl69VH2xeXZBOPXE1ree nskdYtSIDzGQ4aoVvH7T7AUc3xofkjNt8Bq8wWrA3dYb5LhoVu85ukejaw+EOHI9 Xp4hZjkq4RgKJRRikcxMb2SxebRMaak= -----END CERTIFICATE-----Generated at Sat Aug 23 15:09:26 2025 by rpki-client