$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa File: 8a7366dd-e22b-3889-8006-d4eb02fd6707.roa (raw, json) Hash identifier: WNqc8Mir8p1lk8rftAFjOw2tqJQPUG83Lkwq6dtdEik= Subject key identifier: FA:BC:DD:F0:7A:77:92:F8:A3:A0:00:45:72:C2:21:5E:BF:C1:B8:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71106D8F55A35CCA44D2980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.31.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:06:d8:f5:5a:35:cc:a4:4d:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=ca4f9e28-3a3b-4010-9a3f-0e35e0fa4b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:cf:7e:7e:22:10:71:05:35:b7:67:18:99: ff:97:35:da:5e:43:b2:e4:61:12:3f:47:a2:6c:96: cb:39:97:a4:51:9f:9e:2d:fe:39:fe:dd:76:7b:00: 92:21:4a:45:ab:a2:e6:e2:b3:31:2e:fc:e1:60:d9: 4b:37:a2:c5:b7:b6:88:f4:e6:3a:14:d8:91:9b:01: bc:c4:45:af:d1:6e:8f:ce:26:1a:2f:65:60:4f:27: 46:3a:6f:40:5b:ac:e1:17:ad:0b:b6:b1:6e:88:7d: f7:20:f9:25:b1:ab:8c:f7:3e:2e:b5:09:78:d3:cb: 0a:b2:34:00:1a:11:09:09:76:da:cd:da:a1:75:15: 3a:7c:fb:f8:69:06:fa:38:5e:dc:93:b8:dd:7b:e2: de:b8:86:92:e5:8c:0a:96:99:be:a2:a7:21:e5:f4: 4e:da:90:c4:e9:0f:b8:6a:9f:33:cc:27:dc:51:75: 90:ee:d6:0e:05:32:ac:65:a9:8a:06:22:4c:66:58: b1:65:47:04:7d:61:fc:c4:82:bc:06:16:78:c1:71: 8f:0b:e9:71:e3:f2:21:b4:0c:55:d0:6e:7d:5d:ef: 32:51:d9:01:45:fa:2f:d9:80:a0:d8:dc:4c:30:04: 25:93:6d:30:98:31:22:15:ee:7b:f9:8a:96:0f:d2: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:DD:F0:7A:77:92:F8:A3:A0:00:45:72:C2:21:5E:BF:C1:B8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:38:80:bb:9c:1c:9a:12:2c:18:06:58:a7:99:a2:3a:d8:eb: 46:eb:e5:a8:59:6e:67:d3:5d:97:41:79:37:31:4e:fd:53:27: 8b:aa:e6:1a:e8:ff:8d:70:7c:df:d2:2e:e5:e2:ee:45:25:54: e9:36:3a:bb:98:b3:d7:a0:da:11:6e:8a:c1:8f:a5:2a:8b:99: ce:8a:37:7f:53:22:4f:40:00:2f:1c:85:b1:0a:e7:27:c7:6a: 8b:50:a4:69:86:28:c1:50:91:0a:22:33:ae:d9:85:db:5a:8c: 0c:af:e1:7c:1d:1a:a6:c7:06:f1:94:34:28:db:80:a1:82:ef: 2d:df:3e:0c:25:84:d0:5d:31:c4:82:aa:16:a8:87:94:5b:81: 38:85:6e:d7:1a:c4:53:cf:39:6d:5d:f1:72:6c:de:9c:bd:61: 1a:3f:e6:4a:11:25:7b:fd:23:ed:9c:cf:33:9d:ed:f5:4d:7f: 54:62:39:a2:14:43:26:64:85:ab:19:ab:5f:ac:b1:b1:12:1e: 24:f0:09:dc:ef:14:56:cc:b7:f9:a1:93:24:09:d4:cf:e4:26: eb:27:21:49:e7:9b:4c:3a:ca:9a:b4:65:6f:81:f3:62:a8:80: fb:eb:7d:ae:62:01:86:0f:ac:be:f5:39:4a:4b:a1:57:8e:f9: 14:1e:b2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQbY9Vo1zKRNKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk Y2E0ZjllMjgtM2EzYi00MDEwLTlhM2YtMGUzNWUwZmE0YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoarPfn4iEHEFNbdnGJn/lzXaXkOy5GESP0ei bJbLOZekUZ+eLf45/t12ewCSIUpFq6Lm4rMxLvzhYNlLN6LFt7aI9OY6FNiRmwG8 xEWv0W6PziYaL2VgTydGOm9AW6zhF60LtrFuiH33IPklsauM9z4utQl408sKsjQA GhEJCXbazdqhdRU6fPv4aQb6OF7ck7jde+LeuIaS5YwKlpm+oqch5fRO2pDE6Q+4 ap8zzCfcUXWQ7tYOBTKsZamKBiJMZlixZUcEfWH8xIK8BhZ4wXGPC+lx4/IhtAxV 0G59Xe8yUdkBRfov2YCg2NxMMAQlk20wmDEiFe57+YqWD9IG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq83fB6d5L4o6AARXLCIV6/wbi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGE3MzY2ZGQtZTIyYi0z ODg5LTgwMDYtZDRlYjAyZmQ2NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII4gLucHJoSLBgGWKeZojrY60br5ahZbmfTXZdBeTcxTv1TJ4uq5hro /41wfN/SLuXi7kUlVOk2OruYs9eg2hFuisGPpSqLmc6KN39TIk9AAC8chbEK5yfH aotQpGmGKMFQkQoiM67ZhdtajAyv4XwdGqbHBvGUNCjbgKGC7y3fPgwlhNBdMcSC qhaoh5RbgTiFbtcaxFPPOW1d8XJs3py9YRo/5koRJXv9I+2czzOd7fVNf1RiOaIU QyZkhasZq1+ssbESHiTwCdzvFFbMt/mhkyQJ1M/kJusnIUnnm0w6ypq0ZW+B82Ko gPvrfa5iAYYPrL71OUpLoVeO+RQeslw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:23 2025 by rpki-client