$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa File: 5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa (raw, json) Hash identifier: b2ii6hAZqSFuzJPhzVmpttO086sfZLolPoYPB3R6YMU= Subject key identifier: 0A:C0:FE:08:71:12:0D:B4:5E:B2:84:8B:E9:FF:CA:E2:0C:02:1F:B4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC7110457A54AE833881F7900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:04:57:a5:4a:e8:33:88:1f:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=73a7fd34-f6f9-4fd8-94b9-610806a2f0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:67:dd:e2:23:11:4a:1b:21:49:81:4c:51: 12:54:41:a0:c1:55:74:94:b5:f1:9e:2b:05:3c:d6: fb:19:f1:40:86:76:1b:24:d0:60:7e:40:88:b1:80: 04:e2:e4:2c:f5:05:14:ab:65:b0:34:1c:d2:3e:cd: 92:e6:ea:97:3b:27:d8:4d:33:40:6e:90:8a:19:0a: 4d:28:cb:a8:84:e4:d9:53:5c:ae:ad:ae:6d:fa:f7: 00:79:c2:79:aa:c1:b5:df:6d:65:39:a4:bd:ff:93: e2:52:6f:68:78:8e:d9:61:5d:4d:5d:d5:a2:c1:e3: 1e:7f:23:d1:60:48:c5:91:fe:8b:c1:84:6a:d4:05: e7:48:9e:70:02:f2:4c:0e:c1:3b:ba:2c:0c:bc:9e: d7:02:7e:86:ea:a3:07:bd:c1:88:27:6c:f2:65:f0: 97:1d:54:f6:c9:ab:0e:76:8c:95:a0:50:d1:3e:4b: db:63:96:8f:68:bc:cc:33:07:f2:2a:48:07:78:fe: ca:59:9b:67:64:f9:18:d6:45:0a:b2:fd:d4:c8:e5: 48:cf:c2:8c:da:d5:1a:df:67:46:c4:25:0f:58:a9: f7:49:3e:22:46:a8:e8:08:79:a0:6c:d8:33:ac:60: 01:98:b4:a5:67:8e:26:90:9a:af:2b:35:7b:d1:37: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C0:FE:08:71:12:0D:B4:5E:B2:84:8B:E9:FF:CA:E2:0C:02:1F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:68:10:ea:3f:05:5c:fc:2d:94:65:a5:a2:56:da:d8:f0:b0: 37:70:4a:a3:07:bb:03:54:1b:e3:76:65:db:06:5f:3e:68:2c: 14:81:d6:58:1a:9b:47:5f:5b:1b:3e:17:72:17:79:95:19:01: 6a:e1:10:60:e5:c0:28:25:df:17:37:8e:17:2f:57:ee:cd:47: 53:07:9d:85:25:2c:f9:92:d7:ff:41:0a:43:c2:4e:a5:8b:cc: 0f:e0:1a:da:18:56:ef:b6:a9:29:cf:6b:c6:f8:1b:77:16:57: b2:cf:b3:75:fc:1e:df:b6:2f:e3:df:02:db:96:d9:fa:d1:d5: a7:4e:17:3a:09:9c:80:b0:0e:6b:e1:38:5e:d8:94:8d:f8:2c: eb:da:ea:9f:76:c7:a7:5e:cf:83:ee:61:34:3b:6f:40:46:27: 35:cf:2a:39:76:ae:b6:6c:9b:5e:00:38:29:d3:43:80:c7:d8: ef:fe:eb:97:a4:f2:83:fd:34:57:16:1b:e7:c3:e0:75:2b:dd: 73:3e:26:dc:7e:15:fe:cb:f7:06:59:8a:e8:0f:31:25:ec:04: 08:c9:cc:62:cf:38:48:80:24:42:4f:e6:5a:c6:d4:cb:a5:4c: 76:e5:70:18:0e:55:55:f8:79:89:65:1a:d2:89:94:da:06:d3: 20:e3:58:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQRXpUroM4gfeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NzNhN2ZkMzQtZjZmOS00ZmQ4LTk0YjktNjEwODA2YTJmMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmORn3eIjEUobIUmBTFESVEGgwVV0lLXxnisF PNb7GfFAhnYbJNBgfkCIsYAE4uQs9QUUq2WwNBzSPs2S5uqXOyfYTTNAbpCKGQpN KMuohOTZU1yura5t+vcAecJ5qsG1321lOaS9/5PiUm9oeI7ZYV1NXdWiweMefyPR YEjFkf6LwYRq1AXnSJ5wAvJMDsE7uiwMvJ7XAn6G6qMHvcGIJ2zyZfCXHVT2yasO doyVoFDRPkvbY5aPaLzMMwfyKkgHeP7KWZtnZPkY1kUKsv3UyOVIz8KM2tUa32dG xCUPWKn3ST4iRqjoCHmgbNgzrGABmLSlZ44mkJqvKzV70TdCtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArA/ghxEg20XrKEi+n/yuIMAh+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWFiZjc0YzMtNjkxYy0z M2MwLWJiZTItNmRlMDY0OWUzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJoEOo/BVz8LZRlpaJW2tjwsDdwSqMHuwNUG+N2ZdsGXz5oLBSB1lga m0dfWxs+F3IXeZUZAWrhEGDlwCgl3xc3jhcvV+7NR1MHnYUlLPmS1/9BCkPCTqWL zA/gGtoYVu+2qSnPa8b4G3cWV7LPs3X8Ht+2L+PfAtuW2frR1adOFzoJnICwDmvh OF7YlI34LOva6p92x6dez4PuYTQ7b0BGJzXPKjl2rrZsm14AOCnTQ4DH2O/+65ek 8oP9NFcWG+fD4HUr3XM+Jtx+Ff7L9wZZiugPMSXsBAjJzGLPOEiAJEJP5lrG1Mul THblcBgOVVX4eYllGtKJlNoG0yDjWEA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:30 2025 by rpki-client