$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa File: 723328e6-b34f-355a-9bf5-becd6010b5ea.roa (raw, json) Hash identifier: jtSSWgSCPHMoPea7qPvl0H0hF+0tIjY6yJzd36gUY9Q= Subject key identifier: C7:7C:F9:AF:22:79:95:71:83:57:B6:A5:58:4C:0E:26:FE:A0:E1:12 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71105A0AF0C5314B54BFB40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:05:a0:af:0c:53:14:b5:4b:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=243ba3ef-fdde-427b-b404-cfff8b3f9a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:9d:67:17:47:67:ed:50:76:8a:78:bb:80: 68:8a:0e:a2:6d:cd:23:cf:b4:b3:f8:f8:17:ed:4f: e5:7a:97:b2:04:2a:e9:9d:cd:2a:d1:23:b8:3d:6c: c1:a5:fe:b1:e9:43:ce:09:27:be:0b:d5:5a:3f:21: 2d:87:b8:1a:a8:25:92:78:07:99:07:d9:17:93:22: 62:27:ff:f3:fe:e2:4c:71:4d:b9:65:0b:14:86:92: 65:d2:5b:49:ac:a4:d3:ce:b6:5f:5f:e9:b2:69:65: f2:b8:ff:30:c2:07:6c:67:b1:40:83:18:90:63:d2: 23:f5:2b:5b:e5:c9:cd:6f:3a:c0:de:aa:ad:b8:a8: 21:04:d0:2c:9a:60:20:da:4b:4a:b1:94:ed:61:1e: 79:e2:69:ab:74:d7:bf:2d:57:d6:c9:40:16:9a:b8: 25:ca:0c:ad:ba:1b:06:04:77:c2:25:d2:0d:d3:0b: 66:54:b4:34:c9:dd:1c:25:5b:54:a5:d6:f6:84:fb: d4:ec:d9:fa:d2:a0:13:c3:f9:de:dd:00:e0:8f:65: 3b:7a:21:33:5a:10:d6:bc:b6:e6:f1:bf:ef:ca:c1: c2:64:b3:79:b8:10:51:72:36:43:1e:44:f5:8e:c4: 53:1b:cc:4a:6e:cd:89:7b:db:0a:52:31:6e:41:8f: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7C:F9:AF:22:79:95:71:83:57:B6:A5:58:4C:0E:26:FE:A0:E1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:78:64:d4:46:d2:38:57:97:3e:3e:b8:6f:f8:7b:ba:b1:89: 44:7e:20:3b:29:52:c9:81:15:1a:f3:38:c8:8c:90:8f:db:41: 91:b0:bb:9c:b9:09:0a:66:61:77:a7:61:1c:e5:2b:b3:6f:a0: fb:72:bf:5b:7a:b8:07:bd:f8:3f:c7:fa:fe:d9:36:ce:14:29: 66:a8:aa:2e:58:81:d3:e7:9d:5c:26:c9:bb:89:3c:aa:35:c1: 85:62:5b:80:98:42:e8:4a:0d:61:d8:4d:30:93:7b:7e:1a:d7: 15:0a:bc:2d:59:e7:e2:5e:16:80:d8:7d:d9:af:5e:c6:1c:8c: 49:18:72:31:88:84:bf:8e:7d:8f:fa:ba:60:65:4a:1b:a1:76: 52:e4:ba:20:7d:4b:55:61:0b:d6:c8:7c:61:94:4a:4b:ad:a7: 6f:ca:a5:2f:ac:06:9f:20:f8:b0:b1:4f:fa:de:97:c0:a9:6b: 00:7b:82:5a:d5:cf:f2:95:59:64:53:64:07:e0:b5:93:37:19: 1b:a3:1f:79:83:13:f4:0f:88:f1:a1:a6:a2:89:3c:ce:0b:6b: 48:66:81:6d:05:e9:3b:35:0b:0d:c5:a3:8b:47:51:ea:66:67: 92:12:a7:58:dd:a4:e7:bd:45:37:c3:99:19:c0:b3:47:2e:9f: c9:ff:2c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQWgrwxTFLVL+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjQzYmEzZWYtZmRkZS00MjdiLWI0MDQtY2ZmZjhiM2Y5YTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOydZxdHZ+1Qdop4u4Boig6ibc0jz7Sz+PgX 7U/lepeyBCrpnc0q0SO4PWzBpf6x6UPOCSe+C9VaPyEth7gaqCWSeAeZB9kXkyJi J//z/uJMcU25ZQsUhpJl0ltJrKTTzrZfX+myaWXyuP8wwgdsZ7FAgxiQY9Ij9Stb 5cnNbzrA3qqtuKghBNAsmmAg2ktKsZTtYR554mmrdNe/LVfWyUAWmrglygytuhsG BHfCJdIN0wtmVLQ0yd0cJVtUpdb2hPvU7Nn60qATw/ne3QDgj2U7eiEzWhDWvLbm 8b/vysHCZLN5uBBRcjZDHkT1jsRTG8xKbs2Je9sKUjFuQY+2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd8+a8ieZVxg1e2pVhMDib+oOESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzIzMzI4ZTYtYjM0Zi0z NTVhLTliZjUtYmVjZDYwMTBiNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt4ZNRG0jhXlz4+uG/4e7qxiUR+IDspUsmBFRrzOMiMkI/bQZGwu5y5 CQpmYXenYRzlK7NvoPtyv1t6uAe9+D/H+v7ZNs4UKWaoqi5YgdPnnVwmybuJPKo1 wYViW4CYQuhKDWHYTTCTe34a1xUKvC1Z5+JeFoDYfdmvXsYcjEkYcjGIhL+OfY/6 umBlShuhdlLkuiB9S1VhC9bIfGGUSkutp2/KpS+sBp8g+LCxT/rel8CpawB7glrV z/KVWWRTZAfgtZM3GRujH3mDE/QPiPGhpqKJPM4La0hmgW0F6Ts1Cw3Fo4tHUepm Z5ISp1jdpOe9RTfDmRnAs0cun8n/LAc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:56 2025 by rpki-client