$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68172c21-fc0b-360f-9222-5fd95bff5634.roa File: 68172c21-fc0b-360f-9222-5fd95bff5634.roa (raw, json) Hash identifier: slR1HIoTiyQsBLLyEsuf07r9Ap0oebPQl3uqR6Qcpkc= Subject key identifier: B4:93:5B:B2:FF:86:DD:D5:16:DD:D4:46:D1:57:A8:BD:D1:10:01:AC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC711157686E191BB3BB95D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68172c21-fc0b-360f-9222-5fd95bff5634.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:15:76:86:e1:91:bb:3b:b9:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=633ee773-3f12-4c36-90ee-bf8a475b257c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:02:a8:b2:b4:da:f5:09:2d:36:bc:be:ff: e9:f1:3b:4c:89:47:87:b8:09:06:86:c9:42:c0:b6: d5:10:46:90:b2:01:e5:66:91:56:2b:d0:76:9b:49: a0:d3:2f:52:ca:c0:82:bd:0f:48:33:b3:b1:fd:e8: 3a:78:ae:b3:28:74:74:89:fb:47:fa:70:0e:d3:d5: 2a:d6:b6:27:72:df:63:ac:55:8a:12:3c:c2:38:2e: 5c:a6:71:2c:77:b1:6e:aa:24:cb:da:52:11:bf:92: 09:c7:0f:8b:15:97:d3:01:35:77:9f:12:d6:30:3f: da:20:f0:2e:e5:e0:00:15:a7:81:ce:14:a7:74:77: 71:0f:e7:5e:33:ea:25:67:f9:50:46:8c:3c:2f:16: 07:4d:e0:3c:74:c3:2d:2e:50:bb:bd:61:ae:49:e0: 42:38:89:33:39:df:00:c0:b0:c7:ce:d7:fb:c9:5f: 38:db:cc:5b:da:19:1a:c7:03:13:67:7d:98:d5:f2: a6:48:79:24:e3:ee:df:b3:d7:5a:c8:82:fb:72:10: be:83:79:29:7e:72:4d:a2:21:1a:c3:ce:99:0a:25: 50:b8:e2:ff:08:5d:82:7f:73:c6:78:d6:99:32:b9: e8:53:f9:46:be:0a:33:95:ec:d6:fd:44:5f:1b:49: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:93:5B:B2:FF:86:DD:D5:16:DD:D4:46:D1:57:A8:BD:D1:10:01:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68172c21-fc0b-360f-9222-5fd95bff5634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:93:0b:36:05:14:b3:f2:ff:fb:98:a0:c4:dd:48:b9:8e:81: ec:51:74:d8:07:55:ad:8e:ba:66:34:eb:a1:16:1e:d3:7a:a3: a7:51:b8:59:33:ab:5b:39:99:6c:1f:53:fa:6a:98:72:fc:56: 84:0f:48:12:5f:77:3f:42:10:87:bf:d5:08:42:f6:44:09:ea: 83:53:e0:4a:55:3b:10:6f:e8:d0:42:7a:8f:90:e1:00:98:fe: 12:eb:42:f2:d1:5b:42:81:3e:b8:2a:71:24:a1:66:57:d7:a4: 80:47:a6:3b:40:3f:c5:f1:ba:38:57:0b:4b:dc:c8:9c:43:e3: 4d:4e:48:4b:de:72:b6:58:00:6c:ab:f4:d0:46:19:13:55:2f: f0:0b:49:c4:9e:e8:d8:b2:7a:cf:d2:5f:f4:8b:d7:77:71:8f: 6e:6d:e0:85:6e:9f:bd:6a:d5:09:12:14:20:3e:1a:5d:a8:da: 88:64:f4:1e:c8:c5:71:c2:f7:ab:aa:16:5c:79:aa:6f:54:4a: 70:0d:a4:99:3e:92:af:16:4c:03:b3:bc:6f:6c:9f:e7:e7:da: 6a:05:d9:6a:ae:c0:df:64:fb:36:16:c3:af:d7:c9:b5:d7:95: 5a:f2:9d:df:12:88:f2:49:62:4e:06:e0:5d:28:19:ce:64:5f: 4f:8d:ce:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERV2huGRuzu5XUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NjMzZWU3NzMtM2YxMi00YzM2LTkwZWUtYmY4YTQ3NWIyNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLECqLK02vUJLTa8vv/p8TtMiUeHuAkGhslC wLbVEEaQsgHlZpFWK9B2m0mg0y9SysCCvQ9IM7Ox/eg6eK6zKHR0iftH+nAO09Uq 1rYnct9jrFWKEjzCOC5cpnEsd7FuqiTL2lIRv5IJxw+LFZfTATV3nxLWMD/aIPAu 5eAAFaeBzhSndHdxD+deM+olZ/lQRow8LxYHTeA8dMMtLlC7vWGuSeBCOIkzOd8A wLDHztf7yV8428xb2hkaxwMTZ32Y1fKmSHkk4+7fs9dayIL7chC+g3kpfnJNoiEa w86ZCiVQuOL/CF2Cf3PGeNaZMrnoU/lGvgozlezW/URfG0kvfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSTW7L/ht3VFt3URtFXqL3REAGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjgxNzJjMjEtZmMwYi0z NjBmLTkyMjItNWZkOTViZmY1NjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKTCzYFFLPy//uYoMTdSLmOgexRdNgHVa2OumY066EWHtN6o6dRuFkz q1s5mWwfU/pqmHL8VoQPSBJfdz9CEIe/1QhC9kQJ6oNT4EpVOxBv6NBCeo+Q4QCY /hLrQvLRW0KBPrgqcSShZlfXpIBHpjtAP8XxujhXC0vcyJxD401OSEvecrZYAGyr 9NBGGRNVL/ALScSe6Niyes/SX/SL13dxj25t4IVun71q1QkSFCA+Gl2o2ohk9B7I xXHC96uqFlx5qm9USnANpJk+kq8WTAOzvG9sn+fn2moF2WquwN9k+zYWw6/XybXX lVrynd8SiPJJYk4G4F0oGc5kX0+NzrA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:32 2025 by rpki-client