$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88439b8d-bc3f-340c-be64-6396842c5ea8.roa File: 88439b8d-bc3f-340c-be64-6396842c5ea8.roa (raw, json) Hash identifier: QlnjZjwtP+hH4uwg9XlF4XnVuumVYBaSyDXxWdPl56o= Subject key identifier: E5:25:41:0E:F8:21:5A:2C:7C:6F:7D:9E:3B:AA:F6:EB:F8:A9:2B:54 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAD51D82A10E7A8C580C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88439b8d-bc3f-340c-be64-6396842c5ea8.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ad:51:d8:2a:10:e7:a8:c5:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=9aed6850-0f34-4e93-9518-f52f36d1e22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:41:f4:02:f3:80:83:cb:b3:6f:a5:92:eb: 41:21:db:fc:07:a9:c7:42:e3:a8:20:c7:1d:d6:2a: a7:92:1c:cc:06:8d:b9:70:f0:ae:05:42:cc:bf:91: 98:07:54:ae:c0:96:f6:ef:80:f2:22:35:31:f6:f7: 9f:bf:2e:6e:a1:31:0d:5e:b9:4d:bc:ad:fc:77:3a: 16:1b:9b:e1:5f:c0:97:54:aa:3f:f0:50:9b:e8:96: 65:c8:a1:97:a1:e9:d7:26:6e:de:62:cc:43:85:dd: 81:49:c0:f3:fc:9d:70:57:a2:23:e7:f8:64:47:f9: ed:f8:d6:d2:b3:74:80:c5:f3:4d:e4:cc:77:5e:4e: a2:1a:1d:ce:74:e1:b8:41:24:03:78:6c:f0:b6:b2: cb:7a:85:68:75:b1:a5:c6:a3:44:36:40:27:6f:d3: f5:98:70:7f:5e:f9:10:35:fd:f7:af:91:75:f3:2d: cc:11:7b:56:da:6a:10:5c:44:56:93:a2:03:1e:f1: 72:a9:8c:69:cc:25:e0:81:65:0c:2c:7d:35:64:52: 80:9e:83:bb:c0:bb:8d:c7:72:9e:8e:af:69:dd:f2: 85:ba:06:6c:eb:8f:db:ff:e3:db:74:56:3f:05:d2: 43:13:fd:89:34:cb:e8:5b:3f:2f:12:fb:53:ac:01: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:41:0E:F8:21:5A:2C:7C:6F:7D:9E:3B:AA:F6:EB:F8:A9:2B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88439b8d-bc3f-340c-be64-6396842c5ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5b:f5:5a:88:e8:5a:53:b9:60:9a:f3:54:79:f0:5e:a0:c8: 99:db:b7:4f:9d:4d:d5:05:2b:cc:a2:73:04:9c:16:a9:22:45: 43:3c:ed:4b:a8:a1:4c:6c:35:ba:76:63:c0:95:16:ae:5d:f7: 75:12:c3:a8:de:ca:81:58:8e:b4:75:3c:00:40:12:09:03:59: 51:fc:f0:5b:d2:02:73:aa:44:9c:23:5a:ef:90:3a:c1:cb:9f: 09:3a:17:db:43:ef:0c:6a:9d:90:c0:b1:ac:9b:9f:14:e5:64: d0:94:af:23:93:85:a8:2b:32:12:8f:76:33:67:cc:d9:45:a5: e8:a1:30:54:90:dc:4f:46:7e:00:ba:d8:a8:28:bf:97:8c:67: 8d:2c:29:25:93:45:da:01:d5:7a:c6:e5:37:1b:66:ca:2a:78: 3a:e0:47:48:e8:dd:01:26:72:3b:ca:71:63:45:29:e1:c3:30: 0d:e2:c4:fd:91:87:93:a8:4d:7e:0f:17:06:13:4e:aa:46:86: b4:6c:62:d0:39:94:7d:da:20:ec:ea:b9:fd:26:9e:ac:4d:39: b7:45:df:13:76:39:f7:63:27:ba:b2:c2:b4:e8:22:20:18:3a: 3b:38:aa:66:62:76:db:f4:f4:9f:5d:50:f2:95:f2:ce:02:b2: 25:e5:76:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq61R2CoQ56jFgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OWFlZDY4NTAtMGYzNC00ZTkzLTk1MTgtZjUyZjM2ZDFlMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyNB9ALzgIPLs2+lkutBIdv8B6nHQuOoIMcd 1iqnkhzMBo25cPCuBULMv5GYB1SuwJb274DyIjUx9vefvy5uoTENXrlNvK38dzoW G5vhX8CXVKo/8FCb6JZlyKGXoenXJm7eYsxDhd2BScDz/J1wV6Ij5/hkR/nt+NbS s3SAxfNN5Mx3Xk6iGh3OdOG4QSQDeGzwtrLLeoVodbGlxqNENkAnb9P1mHB/XvkQ Nf33r5F18y3MEXtW2moQXERWk6IDHvFyqYxpzCXggWUMLH01ZFKAnoO7wLuNx3Ke jq9p3fKFugZs64/b/+PbdFY/BdJDE/2JNMvoWz8vEvtTrAEJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUlQQ74IVosfG99njuq9uv4qStUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODg0MzliOGQtYmMzZi0z NDBjLWJlNjQtNjM5Njg0MmM1ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBb9VqI6FpTuWCa81R58F6gyJnbt0+dTdUFK8yicwScFqkiRUM87Uuo oUxsNbp2Y8CVFq5d93USw6jeyoFYjrR1PABAEgkDWVH88FvSAnOqRJwjWu+QOsHL nwk6F9tD7wxqnZDAsaybnxTlZNCUryOThagrMhKPdjNnzNlFpeihMFSQ3E9GfgC6 2Kgov5eMZ40sKSWTRdoB1XrG5TcbZsoqeDrgR0jo3QEmcjvKcWNFKeHDMA3ixP2R h5OoTX4PFwYTTqpGhrRsYtA5lH3aIOzquf0mnqxNObdF3xN2OfdjJ7qywrToIiAY Ojs4qmZidtv09J9dUPKV8s4CsiXldhY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:33 2025 by rpki-client