$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa File: 5b65e206-849c-3cf1-a6e0-7265114b7c15.roa (raw, json) Hash identifier: 0JNUHOPJYO9jp4NWNIgJ9d1AmkTUllwISkP7/d5vNOU= Subject key identifier: 30:E8:8F:6D:B3:0C:19:5F:50:F6:08:A3:9F:6D:CC:74:8B:C8:2C:CE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAAFB630C31C3F468CA40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.25.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:aa:fb:63:0c:31:c3:f4:68:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=fec7ce12-4d0d-4a6e-b836-ae2fd03a8745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:2d:e2:d2:da:34:e4:d5:09:79:b5:8e:b4: d3:64:bc:c9:22:46:76:d7:05:92:ad:66:0f:83:51: d0:d4:e0:2d:c1:38:61:d3:8f:5a:24:0d:c0:b6:84: 87:c3:38:ec:30:0a:d2:74:e1:dc:18:26:9e:be:b5: 62:51:1d:f0:dd:a2:a8:21:59:7f:00:c0:0b:24:5a: 80:a8:2e:79:41:b9:83:5c:ec:24:7f:66:20:7e:a2: b6:1a:49:10:7f:6e:c2:1b:77:db:2d:3a:44:bc:78: 7e:76:6e:0f:d5:a6:6f:29:53:2e:d2:09:a3:69:87: 16:58:bc:30:07:27:6b:01:df:ae:b7:20:10:a6:41: bc:68:be:3f:14:08:29:ea:fc:ca:6a:93:e7:7f:25: 24:ff:84:c0:ca:c1:09:d0:a7:0d:ee:a3:44:e9:15: d8:47:cc:82:4d:fc:5a:62:39:7b:af:7d:cc:83:4a: 1d:ba:48:36:a5:86:60:c6:fc:d0:4e:dd:f4:1d:13: 2b:b2:67:15:f4:d6:db:a2:65:b8:ef:0f:55:a9:f9: 65:b7:2b:21:09:92:ef:1d:e9:9b:c4:78:c6:47:bc: 55:5c:36:6a:76:a7:4b:30:e6:81:10:15:e4:dc:a2: 34:e5:8b:45:d1:e5:ae:d6:3d:e5:04:0b:d3:e9:75: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:8F:6D:B3:0C:19:5F:50:F6:08:A3:9F:6D:CC:74:8B:C8:2C:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4b:01:70:5b:1c:76:05:9a:d4:70:41:90:c1:58:b6:cf:ab: 42:b6:54:61:89:e9:41:30:b5:d8:99:1f:30:0e:50:8c:25:30: 8d:58:3c:72:fc:80:2d:bc:31:f1:71:cd:0b:91:d4:f3:4d:bb: bc:a7:96:20:f1:95:fc:cd:74:a1:c8:77:f3:d5:f0:ef:89:6e: 6c:a9:58:3e:2e:48:71:1f:5c:b0:c9:14:8f:94:99:d9:ef:4e: 43:0b:dc:a3:86:16:27:23:e3:35:81:e6:ab:f9:6e:3d:ee:b9: 0d:82:14:d7:4b:fd:a9:d6:b6:89:5f:8f:75:26:03:f1:56:cf: 4a:e7:25:21:98:2c:a3:3b:cc:41:b5:f8:f2:c6:47:3b:41:ff: 74:ad:6b:13:2c:26:e7:ba:88:83:bd:dd:5b:df:79:b8:59:ae: d8:2a:14:b0:be:c5:60:b7:96:f0:c8:49:dc:81:d5:8a:a6:37: 14:07:31:73:4d:39:8e:ab:10:44:23:2a:27:1b:b3:09:ec:ab: 56:8f:e4:23:31:1c:73:45:6b:cf:53:9a:44:53:48:5a:b2:f9: 6b:ee:fc:b8:7a:fa:cd:cb:ac:de:75:fc:a1:ec:55:39:89:aa: 70:02:f6:db:e0:c3:6e:92:61:ed:3d:4f:d6:0b:aa:94:b5:5a: c9:77:b4:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6r7Ywwxw/RoykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZmVjN2NlMTItNGQwZC00YTZlLWI4MzYtYWUyZmQwM2E4NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRUt4tLaNOTVCXm1jrTTZLzJIkZ21wWSrWYP g1HQ1OAtwThh049aJA3AtoSHwzjsMArSdOHcGCaevrViUR3w3aKoIVl/AMALJFqA qC55QbmDXOwkf2YgfqK2GkkQf27CG3fbLTpEvHh+dm4P1aZvKVMu0gmjaYcWWLww BydrAd+utyAQpkG8aL4/FAgp6vzKapPnfyUk/4TAysEJ0KcN7qNE6RXYR8yCTfxa Yjl7r33Mg0odukg2pYZgxvzQTt30HRMrsmcV9NbbomW47w9VqflltyshCZLvHemb xHjGR7xVXDZqdqdLMOaBEBXk3KI05YtF0eWu1j3lBAvT6XV+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDoj22zDBlfUPYIo59tzHSLyCzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWI2NWUyMDYtODQ5Yy0z Y2YxLWE2ZTAtNzI2NTExNGI3YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNLAXBbHHYFmtRwQZDBWLbPq0K2VGGJ6UEwtdiZHzAOUIwlMI1YPHL8 gC28MfFxzQuR1PNNu7ynliDxlfzNdKHId/PV8O+JbmypWD4uSHEfXLDJFI+Umdnv TkML3KOGFicj4zWB5qv5bj3uuQ2CFNdL/anWtolfj3UmA/FWz0rnJSGYLKM7zEG1 +PLGRztB/3StaxMsJue6iIO93VvfebhZrtgqFLC+xWC3lvDISdyB1YqmNxQHMXNN OY6rEEQjKicbswnsq1aP5CMxHHNFa89TmkRTSFqy+Wvu/Lh6+s3LrN51/KHsVTmJ qnAC9tvgw26SYe09T9YLqpS1Wsl3tNY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:29 2025 by rpki-client