$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa File: 8689f776-5658-3cb8-aff0-a810a2806f8b.roa (raw, json) Hash identifier: 986+r0ODJfjDajS0GLdbTcSlVmAj/wq4/BVaE1NPlJI= Subject key identifier: E4:A1:09:33:2B:9F:57:25:56:D0:2B:9D:0F:01:BC:91:DB:36:71:78 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA896CAFEF3926EB85570 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a8:96:ca:fe:f3:92:6e:b8:55:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=1eac464c-79e1-44f6-85a5-ffe4e5b6ced9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:8a:b6:9c:31:a3:ff:b7:ca:c6:9c:cb:93: 55:cb:54:5c:da:5c:8f:48:72:6e:54:39:8c:ed:db: 83:6c:7d:36:05:a8:6d:c6:78:ec:06:85:a0:57:56: 67:40:a8:6b:dd:41:4c:8c:68:87:0a:95:1b:27:55: e0:f6:07:c3:1e:09:cf:32:ed:83:5a:a9:4e:5f:9d: a6:6c:40:cf:65:ee:6d:4a:3c:5d:46:83:8f:6b:8d: ee:85:07:f3:fe:0a:41:45:fa:10:5b:cc:36:94:c1: 53:b5:ae:ea:83:e8:27:d4:d6:c6:40:d0:87:d3:2b: d4:3c:e8:b4:e4:1c:62:04:41:1c:80:a0:68:95:9d: c8:2c:43:d6:67:40:4a:a0:3b:aa:b5:f1:0a:60:70: 38:c6:91:06:19:8e:0d:7f:e6:fc:64:2b:7e:a8:8b: 61:51:fa:cc:b4:d5:45:dc:b9:9f:76:04:cf:8a:e7: 16:1f:fc:35:5b:f7:95:43:fc:f8:8b:6e:c7:b7:09: a1:f2:a2:8b:cb:07:9c:1c:d6:e3:1e:ec:e3:7c:b0: d7:64:fd:10:e7:f6:05:32:a5:90:bf:67:d3:45:1a: 93:5e:5b:b3:2a:fa:11:c9:c1:54:59:e9:94:86:2b: f9:a1:b2:60:3f:6d:83:07:1e:cf:49:60:41:24:45: 37:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A1:09:33:2B:9F:57:25:56:D0:2B:9D:0F:01:BC:91:DB:36:71:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:46:5e:f5:60:13:72:fe:f6:c8:ec:ee:e0:6a:09:0d:94:6e: 96:cf:5b:37:5c:aa:dd:06:c5:69:99:07:5b:31:e1:ce:5e:bc: 85:04:4b:7b:77:fd:82:8a:49:07:61:2f:a4:5c:87:bf:07:00: 18:ca:96:b6:9d:05:f4:d9:61:69:1a:f4:d4:c9:ef:b9:6d:c0: 8c:47:82:dc:b6:2c:e9:29:85:c3:a4:1c:7b:13:b8:9d:c3:b3: 02:6e:46:2e:b6:85:59:de:03:37:e6:d8:07:e6:17:9e:51:b8: b3:06:52:c2:9e:87:96:f7:74:67:ec:23:ec:72:09:02:5a:f5: 38:5c:94:04:27:bb:04:a2:17:19:24:65:a2:3c:fe:f0:d4:f4: 55:49:a0:b9:9e:9e:b7:86:fd:81:1a:f4:02:07:2a:34:ab:c0: e3:1e:08:0a:75:b8:dc:4c:68:42:2b:2d:b2:5c:e2:f2:5f:65: ba:d1:e7:ca:1d:ce:ba:ec:ba:a2:a6:03:e7:ee:34:be:49:ea: 10:5c:fd:8c:f6:6c:ab:2b:b3:f8:b1:14:2c:9e:9b:0e:3b:fb: dc:7b:4a:10:94:c7:71:1d:a8:b9:e2:2c:4f:1c:ef:51:c8:28: 82:a3:d2:83:b6:67:04:38:36:f7:d1:74:90:27:66:68:28:0e: 7a:f1:bd:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6iWyv7zkm64VXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MWVhYzQ2NGMtNzllMS00NGY2LTg1YTUtZmZlNGU1YjZjZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DyKtpwxo/+3ysacy5NVy1Rc2lyPSHJuVDmM 7duDbH02BahtxnjsBoWgV1ZnQKhr3UFMjGiHCpUbJ1Xg9gfDHgnPMu2DWqlOX52m bEDPZe5tSjxdRoOPa43uhQfz/gpBRfoQW8w2lMFTta7qg+gn1NbGQNCH0yvUPOi0 5BxiBEEcgKBolZ3ILEPWZ0BKoDuqtfEKYHA4xpEGGY4Nf+b8ZCt+qIthUfrMtNVF 3LmfdgTPiucWH/w1W/eVQ/z4i27Htwmh8qKLywecHNbjHuzjfLDXZP0Q5/YFMqWQ v2fTRRqTXluzKvoRycFUWemUhiv5obJgP22DBx7PSWBBJEU3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOShCTMrn1clVtArnQ8BvJHbNnF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODY4OWY3NzYtNTY1OC0z Y2I4LWFmZjAtYTgxMGEyODA2ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhGXvVgE3L+9sjs7uBqCQ2UbpbPWzdcqt0GxWmZB1sx4c5evIUES3t3 /YKKSQdhL6Rch78HABjKlradBfTZYWka9NTJ77ltwIxHgty2LOkphcOkHHsTuJ3D swJuRi62hVneAzfm2AfmF55RuLMGUsKeh5b3dGfsI+xyCQJa9ThclAQnuwSiFxkk ZaI8/vDU9FVJoLmenreG/YEa9AIHKjSrwOMeCAp1uNxMaEIrLbJc4vJfZbrR58od zrrsuqKmA+fuNL5J6hBc/Yz2bKsrs/ixFCyemw47+9x7ShCUx3EdqLniLE8c71HI KIKj0oO2ZwQ4NvfRdJAnZmgoDnrxvec= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:44 2025 by rpki-client