$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d5f925d-ac62-32aa-b6c2-254104032d13.roa File: 7d5f925d-ac62-32aa-b6c2-254104032d13.roa (raw, json) Hash identifier: qRf3/NpUAVopkU564/mEWt+FQF5BXY/HqHvPrYJ45Ow= Subject key identifier: 01:5C:65:D6:4B:CA:34:A5:40:61:1B:40:21:54:34:FD:D5:1E:2A:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAC7BBA1F05A0657C2740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d5f925d-ac62-32aa-b6c2-254104032d13.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ac:7b:ba:1f:05:a0:65:7c:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=fc0e2824-1256-45d4-813f-7573cfce96c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:ea:32:a6:93:96:5a:16:19:8f:8e:d4:27: 49:45:34:e8:d9:26:d7:6f:9d:7d:17:47:6d:eb:3f: a8:96:c5:b3:5f:86:d9:84:7a:f9:af:cb:cd:c7:28: 92:01:9f:e3:e1:cc:e7:40:63:a0:f3:bf:5c:29:b6: 85:15:d2:a6:d4:17:58:7e:b1:38:4b:08:2d:6f:3e: 49:b1:f9:b6:a9:49:04:ad:ce:5e:ed:b7:a2:b2:e7: 07:ac:ca:db:6f:1b:3d:75:ce:6f:c1:53:ab:cb:04: 47:c9:c0:03:c1:fd:10:bf:5d:ee:cb:02:8d:e1:d4: ef:3c:2f:f0:cc:20:92:30:be:2c:5c:81:28:4f:69: 62:a5:21:03:fe:a3:9e:14:46:4a:cb:7a:06:44:e0: 27:4e:30:b3:0f:76:2b:4a:f2:15:0f:2a:bd:70:0b: c9:78:93:75:62:93:1c:45:b0:bd:f0:c2:08:09:9c: 86:c8:7b:af:8f:f5:25:52:70:31:0c:93:06:37:3b: c0:f8:18:07:a7:d3:25:73:d9:a7:93:7d:df:6e:8f: 1f:af:95:aa:c2:29:39:18:c1:1a:44:75:a2:94:55: 21:70:67:65:d3:ef:b3:ad:e7:47:c2:23:75:bc:3e: 0b:98:a3:3a:52:bb:8e:36:12:d8:aa:26:b3:a1:ca: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:65:D6:4B:CA:34:A5:40:61:1B:40:21:54:34:FD:D5:1E:2A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d5f925d-ac62-32aa-b6c2-254104032d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bf:4f:a1:14:63:e5:40:a0:7a:28:56:bc:33:27:11:90:71: 39:7a:78:2a:ba:c2:70:82:ab:67:53:e0:4a:80:87:5c:d2:5d: 94:84:fe:d1:7e:be:69:d2:cd:bc:a1:c7:49:1d:7e:18:08:63: a4:25:b3:a9:1e:de:ad:a0:a4:cf:87:9a:25:fd:2e:8c:ac:06: bc:32:54:8a:74:65:8d:fb:92:d1:1e:0b:55:86:57:0b:43:67: f9:ff:d6:0c:f9:67:ff:2b:02:86:ab:cd:d7:18:42:1c:20:b8: f7:24:7b:db:b1:a5:86:18:36:0d:cb:82:c3:78:31:a3:d1:6a: 4a:d1:87:47:ae:aa:20:28:b6:6e:b9:12:ff:ca:dd:1e:d7:da: 35:e0:20:68:bf:5f:c9:aa:fe:1a:c0:a5:40:49:fd:d5:92:47: f9:0b:23:3c:1b:44:40:59:3b:90:b6:6a:a1:47:3c:18:78:1c: a7:c1:9e:1b:f7:cf:0a:e3:90:56:52:94:02:97:12:88:98:d2: 1c:b3:64:e9:82:e8:02:1a:57:f7:f8:0f:05:02:d8:5c:09:32: 17:42:ec:ce:e4:43:c3:7b:fd:ec:a8:77:63:2a:f1:82:df:65: 23:ab:00:fe:f0:a0:5f:ed:33:53:5b:cc:91:9c:64:8c:34:2c: 26:9e:67:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6x7uh8FoGV8J0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZmMwZTI4MjQtMTI1Ni00NWQ0LTgxM2YtNzU3M2NmY2U5NmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHTqMqaTlloWGY+O1CdJRTTo2SbXb519F0dt 6z+olsWzX4bZhHr5r8vNxyiSAZ/j4cznQGOg879cKbaFFdKm1BdYfrE4Swgtbz5J sfm2qUkErc5e7beisucHrMrbbxs9dc5vwVOrywRHycADwf0Qv13uywKN4dTvPC/w zCCSML4sXIEoT2lipSED/qOeFEZKy3oGROAnTjCzD3YrSvIVDyq9cAvJeJN1YpMc RbC98MIICZyGyHuvj/UlUnAxDJMGNzvA+BgHp9Mlc9mnk33fbo8fr5Wqwik5GMEa RHWilFUhcGdl0++zredHwiN1vD4LmKM6UruONhLYqiazocq4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFcZdZLyjSlQGEbQCFUNP3VHirEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2Q1ZjkyNWQtYWM2Mi0z MmFhLWI2YzItMjU0MTA0MDMyZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC/T6EUY+VAoHooVrwzJxGQcTl6eCq6wnCCq2dT4EqAh1zSXZSE/tF+ vmnSzbyhx0kdfhgIY6Qls6ke3q2gpM+HmiX9LoysBrwyVIp0ZY37ktEeC1WGVwtD Z/n/1gz5Z/8rAoarzdcYQhwguPcke9uxpYYYNg3LgsN4MaPRakrRh0euqiAotm65 Ev/K3R7X2jXgIGi/X8mq/hrApUBJ/dWSR/kLIzwbREBZO5C2aqFHPBh4HKfBnhv3 zwrjkFZSlAKXEoiY0hyzZOmC6AIaV/f4DwUC2FwJMhdC7M7kQ8N7/eyod2Mq8YLf ZSOrAP7woF/tM1NbzJGcZIw0LCaeZ+c= -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:27 2025 by rpki-client