$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8244de1e-7a6b-3478-bfbd-7a686572aa10.roa File: 8244de1e-7a6b-3478-bfbd-7a686572aa10.roa (raw, json) Hash identifier: PjMKJMeGuKqjTjsjso3xCqSHIpVpIDuP9XNwub3kgZw= Subject key identifier: 87:6A:14:F1:DC:D2:1C:66:07:CF:BC:2F:8D:C0:5E:05:11:16:A1:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71105251BEA28190E442A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8244de1e-7a6b-3478-bfbd-7a686572aa10.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:05:25:1b:ea:28:19:0e:44:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=b6a4db2b-8ce1-4d7f-838e-f90b5f12226b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d8:a9:f6:f7:a7:7f:6d:50:ad:30:64:0e:37: fd:97:51:1a:ac:e1:aa:72:9a:1d:a8:b5:15:7b:b8: c1:c7:aa:bd:27:f8:e0:b1:d0:fd:20:71:10:51:89: c7:7a:08:e5:14:a5:37:39:38:90:ac:4a:07:10:19: 28:c3:c0:bd:c5:b1:e5:27:de:d6:7a:a4:7f:2a:22: 18:f8:3c:50:7d:85:e7:db:d1:23:18:50:9c:2b:6c: 91:62:b7:19:14:91:21:fb:d4:7b:28:25:d2:85:20: bd:a7:1c:2c:41:4e:0a:1f:68:51:11:57:1f:de:88: be:82:99:1c:fd:2e:4b:70:65:c6:47:87:fe:ce:fe: c3:da:8b:70:c3:a5:62:6e:a0:b0:f3:81:94:40:6f: 99:19:2a:be:48:cd:b9:c1:f3:84:ce:da:a4:84:47: aa:90:fa:20:12:c7:9a:c7:1a:ed:1c:d6:cf:b1:ed: 90:e8:73:75:fe:d6:73:6d:29:33:94:5c:e4:0c:17: fa:78:4f:97:f8:a4:9e:57:4e:31:80:05:12:96:f3: 57:f1:58:c8:00:66:fd:3d:f1:7c:c3:d2:48:a6:ee: ef:d4:4a:55:fb:dc:a6:e9:81:30:5d:31:ec:8a:3c: 00:01:85:e8:ab:78:d7:59:4e:3d:b8:2f:b7:ba:01: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6A:14:F1:DC:D2:1C:66:07:CF:BC:2F:8D:C0:5E:05:11:16:A1:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8244de1e-7a6b-3478-bfbd-7a686572aa10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a1:42:95:07:47:03:5d:d4:46:62:fc:cb:96:bc:a8:82:1d: f3:3e:f1:5e:de:88:e2:27:38:0a:51:12:1f:37:c3:a1:83:07: 38:40:2e:74:59:d9:4c:fc:05:be:10:b1:05:75:24:b8:6f:65: fb:08:ce:03:ba:25:75:8f:9c:ea:34:55:25:ce:1a:f4:d1:88: b1:ee:17:92:79:d9:38:1b:f9:9b:09:2e:38:90:ea:ed:98:72: 43:67:48:ea:ac:ae:27:d1:cd:73:b8:3d:fa:16:67:39:0c:7f: b3:8d:7d:74:08:79:e8:e0:b1:1f:b9:54:f5:a3:48:55:3f:99: 2a:a5:50:8a:da:f8:d0:43:b8:63:3d:e2:0a:8c:c2:03:54:8a: 35:30:f6:4f:19:01:13:51:a7:fb:95:2e:c4:c6:05:d3:d4:6f: 7d:7e:34:00:1d:6a:52:9e:ca:a2:89:d5:1a:8c:81:b7:4b:1f: 11:f6:b2:8d:2a:b7:ab:6a:fb:a3:8a:5f:10:0f:c3:3d:2d:d4: 2d:17:40:73:63:9a:50:30:9d:e9:3e:da:39:6c:22:39:3e:f7: db:06:52:fc:a5:56:1a:7d:c4:65:5d:df:55:4c:d3:fe:b8:39: 1d:5b:c8:88:59:14:80:57:ad:81:04:8f:a4:1c:8c:56:cc:bd: 0c:7d:0c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQUlG+ooGQ5EKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YjZhNGRiMmItOGNlMS00ZDdmLTgzOGUtZjkwYjVmMTIyMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidip9venf21QrTBkDjf9l1EarOGqcpodqLUV e7jBx6q9J/jgsdD9IHEQUYnHegjlFKU3OTiQrEoHEBkow8C9xbHlJ97WeqR/KiIY +DxQfYXn29EjGFCcK2yRYrcZFJEh+9R7KCXShSC9pxwsQU4KH2hREVcf3oi+gpkc /S5LcGXGR4f+zv7D2otww6VibqCw84GUQG+ZGSq+SM25wfOEztqkhEeqkPogEsea xxrtHNbPse2Q6HN1/tZzbSkzlFzkDBf6eE+X+KSeV04xgAUSlvNX8VjIAGb9PfF8 w9JIpu7v1EpV+9ym6YEwXTHsijwAAYXoq3jXWU49uC+3ugE4IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdqFPHc0hxmB8+8L43AXgURFqGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODI0NGRlMWUtN2E2Yi0z NDc4LWJmYmQtN2E2ODY1NzJhYTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIChQpUHRwNd1EZi/MuWvKiCHfM+8V7eiOInOApREh83w6GDBzhALnRZ 2Uz8Bb4QsQV1JLhvZfsIzgO6JXWPnOo0VSXOGvTRiLHuF5J52Tgb+ZsJLjiQ6u2Y ckNnSOqsrifRzXO4PfoWZzkMf7ONfXQIeejgsR+5VPWjSFU/mSqlUIra+NBDuGM9 4gqMwgNUijUw9k8ZARNRp/uVLsTGBdPUb31+NAAdalKeyqKJ1RqMgbdLHxH2so0q t6tq+6OKXxAPwz0t1C0XQHNjmlAwnek+2jlsIjk+99sGUvylVhp9xGVd31VM0/64 OR1byIhZFIBXrYEEj6QcjFbMvQx9DGY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:33 2025 by rpki-client