$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa File: 95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa (raw, json) Hash identifier: CG18vS8oPndWx/4piTcf/dbJcgrNcmJgHYrE2carmS4= Subject key identifier: 02:63:49:6E:FB:5F:AB:88:75:DF:62:BD:02:94:0C:9E:80:53:7C:2E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9E41EA430550660C8800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.25.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9e:41:ea:43:05:50:66:0c:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=04cff412-d86b-4727-b6bf-75046e2897d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:7d:af:dd:30:3c:1b:84:16:f3:0c:c2:f2: a5:c5:d4:a8:6d:ca:5a:72:b7:27:50:c1:9f:3e:d2: ae:ce:d0:bb:04:5e:74:d2:3a:21:f5:c5:3d:ec:0d: fd:58:0d:68:63:98:51:c5:10:4b:83:be:1e:7e:cb: 6a:1f:79:89:3c:75:2e:89:24:54:52:b6:4f:61:f0: ef:c4:16:fa:20:89:1d:34:6e:a0:23:ea:43:eb:8d: f3:2e:87:63:6c:4e:f8:0b:cf:cb:f6:0b:8b:0b:8b: 90:58:65:df:85:76:18:df:d9:5c:ff:c8:c3:7a:9c: 67:0c:18:3a:46:12:6c:aa:ee:3b:01:2c:93:39:66: 54:5d:78:ad:cb:61:c4:2b:62:d8:a4:91:c3:9b:2c: b4:d8:92:3c:17:04:09:ab:f4:17:f7:72:e1:7d:51: e7:97:7f:eb:28:3b:c0:63:62:d4:10:7c:6d:98:c1: 4a:18:b0:00:f5:58:5d:ba:fc:dc:c8:17:2a:e0:9a: 5b:d8:e5:10:3d:d8:be:e7:91:7c:4a:2a:14:f0:24: 54:f0:5d:56:60:99:64:f6:c9:fc:6d:65:a3:6e:a3: 3e:4c:7e:6c:e2:de:fd:7d:2e:60:cd:26:02:66:bf: 4c:41:7f:37:25:5a:54:e3:ae:ec:71:f2:df:f2:a2: 2c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:63:49:6E:FB:5F:AB:88:75:DF:62:BD:02:94:0C:9E:80:53:7C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:28:80:ae:b3:79:4d:5e:18:e3:c9:cb:11:13:b1:9f:1c:ff: b6:a5:74:a7:0d:af:43:ec:b9:0a:79:5a:48:d6:1c:10:74:51: 6e:63:f6:41:f3:1a:92:d8:ee:93:06:06:76:52:bc:20:60:66: 8f:60:4e:3a:ab:8c:af:4b:c3:b2:de:55:84:c9:a4:3d:39:8e: 67:fc:3f:46:d3:9f:32:1c:49:4b:f5:ce:ae:67:6b:79:00:a2: b1:e6:2c:58:ac:7b:18:49:92:b9:74:fa:1a:3a:85:48:24:c3: 2e:76:cd:3b:20:5c:68:fa:f8:a2:65:ef:2d:2a:66:00:8e:db: 0f:e0:c7:7e:d9:8f:15:d0:69:b2:64:7d:44:65:1d:c8:1d:b5: 22:38:4a:f5:7b:ff:02:d0:90:1e:f2:62:33:60:19:05:dd:4d: c1:b4:87:4a:b8:88:81:85:cd:75:a6:62:a6:f0:a4:fc:ab:be: af:94:b7:f9:99:85:bb:15:0e:37:de:64:50:79:bc:2a:38:2a: f3:f5:c1:ac:f0:93:5b:5b:4c:b5:4d:d5:fb:d1:cb:98:62:b4: 69:8d:dd:43:b6:75:d5:d8:fd:c3:c3:8d:30:fd:d5:0a:4c:4c: 31:eb:e2:68:e4:cf:da:82:d5:70:f0:da:bd:ec:f8:48:cd:b2: 7c:ca:f4:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq55B6kMFUGYMiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MDRjZmY0MTItZDg2Yi00NzI3LWI2YmYtNzUwNDZlMjg5N2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9p9r90wPBuEFvMMwvKlxdSobcpacrcnUMGf PtKuztC7BF500joh9cU97A39WA1oY5hRxRBLg74efstqH3mJPHUuiSRUUrZPYfDv xBb6IIkdNG6gI+pD643zLodjbE74C8/L9guLC4uQWGXfhXYY39lc/8jDepxnDBg6 RhJsqu47ASyTOWZUXXity2HEK2LYpJHDmyy02JI8FwQJq/QX93LhfVHnl3/rKDvA Y2LUEHxtmMFKGLAA9VhduvzcyBcq4Jpb2OUQPdi+55F8SioU8CRU8F1WYJlk9sn8 bWWjbqM+TH5s4t79fS5gzSYCZr9MQX83JVpU467scfLf8qIsJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJjSW77X6uIdd9ivQKUDJ6AU3wuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTViNGRiMjAtYmYyYi0z N2JhLTk1NWItMTc3MDlhOWRiZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoogK6zeU1eGOPJyxETsZ8c/7aldKcNr0PsuQp5WkjWHBB0UW5j9kHz GpLY7pMGBnZSvCBgZo9gTjqrjK9Lw7LeVYTJpD05jmf8P0bTnzIcSUv1zq5na3kA orHmLFisexhJkrl0+ho6hUgkwy52zTsgXGj6+KJl7y0qZgCO2w/gx37ZjxXQabJk fURlHcgdtSI4SvV7/wLQkB7yYjNgGQXdTcG0h0q4iIGFzXWmYqbwpPyrvq+Ut/mZ hbsVDjfeZFB5vCo4KvP1wazwk1tbTLVN1fvRy5hitGmN3UO2ddXY/cPDjTD91QpM TDHr4mjkz9qC1XDw2r3s+EjNsnzK9K0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:57 2025 by rpki-client