$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa File: 811e6a88-0d78-38d1-8165-7cff3dcc8978.roa (raw, json) Hash identifier: KlgEoYDDD3v8awLrSV3RAvKMrBoM8E3KaHxJ63cQIW4= Subject key identifier: DF:DC:B7:C3:FD:00:DE:DA:2A:EA:9C:1F:4B:4E:A6:74:45:15:EE:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA8739358FA358178E000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.21.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a8:73:93:58:fa:35:81:78:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=15afb056-e566-4db5-8fb7-0f94c1eebcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:b1:e3:a9:e1:da:4b:fe:14:8c:e9:01:7a: 2b:aa:2c:74:b6:65:50:a3:b2:20:e5:1d:a1:e6:b6: 72:df:ac:d1:d4:d6:91:c9:3c:25:61:e8:87:0e:cb: 57:50:30:f4:82:03:94:bb:18:00:89:2e:a5:c8:80: 14:56:fe:c1:ae:1f:fa:a2:63:00:e2:9a:f5:d9:b5: 66:cc:27:49:64:42:39:23:81:45:9b:4e:ea:32:21: c8:4b:e9:b5:04:1a:8e:fd:9d:84:86:f5:47:d6:f2: 5a:d8:14:91:10:2a:b4:cc:88:2c:4b:fc:a2:33:8a: 80:bd:13:68:e8:88:78:47:d5:d2:20:45:27:60:8c: 9b:8b:bb:0c:8d:3d:75:80:c3:73:0f:39:52:3d:68: 64:4d:50:2d:88:9c:73:f0:d3:dc:bc:7d:93:09:c8: 13:b8:ed:74:19:f2:85:1b:e4:de:fc:4a:8d:96:a3: e8:6a:04:41:61:90:0c:3a:46:e1:c4:7f:41:98:89: 2f:c2:b2:9c:52:a9:8a:34:0a:e1:d3:57:3c:fe:61: d3:ec:c1:7d:2e:f7:45:0b:74:3c:30:9b:af:c4:57: a5:65:f5:80:28:24:3e:11:31:64:27:11:1a:ff:40: b0:84:a8:3b:7e:f2:12:56:55:15:2e:40:31:7e:5c: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:B7:C3:FD:00:DE:DA:2A:EA:9C:1F:4B:4E:A6:74:45:15:EE:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:40:19:e9:02:0b:4c:c7:99:75:fc:e0:64:23:dd:09:42:65: 5a:78:52:dd:b6:91:f9:28:9d:9c:b2:ac:f1:be:c2:f7:2f:f9: d7:35:a7:6c:da:2e:91:c0:22:0b:af:37:10:eb:b1:6a:e0:23: fd:a8:1f:4e:c1:87:2e:e8:02:f7:2e:a8:6b:b1:79:df:67:33: a6:b4:89:e2:80:05:44:be:3c:55:54:50:3a:43:e6:8d:49:f0: 8c:46:e0:f8:30:3d:75:d1:b5:e1:10:84:3b:d7:95:3d:fc:84: 66:08:61:7b:ef:cc:89:df:5b:0e:42:cb:ca:a7:d5:22:cd:46: db:86:d5:b8:57:36:45:ee:7a:67:51:20:6f:d6:34:26:2a:20: c0:ed:08:82:df:1b:b9:d2:87:87:b9:5f:37:29:27:6b:26:7a: 76:4f:d0:71:12:a3:58:e3:f9:61:d8:b8:c7:3c:97:58:61:f1: ca:a9:aa:18:39:e0:5c:ed:16:0d:b3:bb:ca:a6:03:04:45:1e: 2b:11:23:0a:55:0a:d8:9a:89:ed:b9:1f:24:b0:64:6f:d5:07: 9b:94:2e:f1:e5:3b:ab:ac:b4:53:f6:36:b2:b0:53:94:7b:e3: 0b:ea:9e:32:e0:e8:ee:35:e5:d9:18:c0:63:e4:a1:b0:88:d3: 09:41:52:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6hzk1j6NYF44AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTVhZmIwNTYtZTU2Ni00ZGI1LThmYjctMGY5NGMxZWViY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGux46nh2kv+FIzpAXorqix0tmVQo7Ig5R2h 5rZy36zR1NaRyTwlYeiHDstXUDD0ggOUuxgAiS6lyIAUVv7Brh/6omMA4pr12bVm zCdJZEI5I4FFm07qMiHIS+m1BBqO/Z2EhvVH1vJa2BSRECq0zIgsS/yiM4qAvRNo 6Ih4R9XSIEUnYIybi7sMjT11gMNzDzlSPWhkTVAtiJxz8NPcvH2TCcgTuO10GfKF G+Te/EqNlqPoagRBYZAMOkbhxH9BmIkvwrKcUqmKNArh01c8/mHT7MF9LvdFC3Q8 MJuvxFelZfWAKCQ+ETFkJxEa/0CwhKg7fvISVlUVLkAxflyxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/ct8P9AN7aKuqcH0tOpnRFFe5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODExZTZhODgtMGQ3OC0z OGQxLTgxNjUtN2NmZjNkY2M4OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdAGekCC0zHmXX84GQj3QlCZVp4Ut22kfkonZyyrPG+wvcv+dc1p2za LpHAIguvNxDrsWrgI/2oH07Bhy7oAvcuqGuxed9nM6a0ieKABUS+PFVUUDpD5o1J 8IxG4PgwPXXRteEQhDvXlT38hGYIYXvvzInfWw5Cy8qn1SLNRtuG1bhXNkXuemdR IG/WNCYqIMDtCILfG7nSh4e5XzcpJ2smenZP0HESo1jj+WHYuMc8l1hh8cqpqhg5 4FztFg2zu8qmAwRFHisRIwpVCtiaie25HySwZG/VB5uULvHlO6ustFP2NrKwU5R7 4wvqnjLg6O415dkYwGPkobCI0wlBUpU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:44 2025 by rpki-client