$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa File: 99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa (raw, json) Hash identifier: 4YWpZf5LGkkYjXxdA0zlX4WbqoWIdo0dFtMnEpDU/ps= Subject key identifier: 5C:06:E7:D9:63:22:19:19:51:C1:1B:5B:46:38:2D:32:ED:68:6B:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA7DC500E24EAB0023EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.20.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a7:dc:50:0e:24:ea:b0:02:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=25ca084b-f70d-44f3-ba8b-6efa8197e7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:66:1a:6a:4e:2c:d4:7b:43:f0:5d:7f:40: 2b:74:cc:26:af:1d:54:56:31:9c:c9:41:c1:86:d6: 41:02:46:85:56:e7:8d:d4:04:84:7a:ce:9d:7b:0c: f5:7c:88:18:fd:f5:e5:06:33:60:b4:0a:69:1d:ae: c9:a0:41:5c:0f:dc:3f:ce:f9:8b:c3:bf:3e:d8:c4: 5c:4f:d4:69:09:48:b3:2c:8c:a2:59:6c:a6:a8:ec: ea:0a:0b:f5:3a:ca:8d:67:72:d3:8d:27:ca:2b:5d: 30:9a:49:1b:01:19:1f:9d:95:5e:32:18:76:48:62: 55:f4:9b:85:00:e0:65:77:6a:31:e8:7c:89:2b:fb: b0:10:88:46:bf:87:6c:96:7a:1e:0c:0b:5d:be:37: 38:5b:48:d1:7a:cc:f1:34:9a:cd:86:ab:87:fb:9b: 94:4d:4b:e7:38:cc:ca:2e:24:6b:da:a6:22:63:16: bb:ea:fa:1a:aa:18:4d:26:56:03:00:7f:f8:a1:2e: d7:5a:f2:f5:b0:e5:0d:dd:d9:5f:c5:56:2f:51:1e: 1e:9d:93:8a:06:bd:73:6c:61:89:40:a2:dc:44:20: a6:22:3b:6c:6d:c6:a1:13:06:4a:47:6d:01:f6:36: 27:1f:88:84:27:5c:3d:77:51:5e:19:df:7c:bc:9d: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:E7:D9:63:22:19:19:51:C1:1B:5B:46:38:2D:32:ED:68:6B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0a:d7:46:6f:1e:10:05:25:d4:37:a3:8d:7c:87:8d:6c:73: 34:4f:e2:c7:c1:dc:0c:ff:1f:98:a7:6f:05:da:4f:57:3b:9d: 0e:cd:dc:c0:fe:6a:c2:e1:40:40:68:ac:e2:9c:e7:d2:29:6a: 12:19:c3:17:65:fc:b4:e3:ab:a5:88:03:59:e2:39:86:8f:53: 05:0f:79:1d:88:e9:19:74:f6:3d:40:38:c5:04:1b:a4:86:da: 90:29:1b:93:6b:e8:f3:07:db:2d:6e:d7:c1:87:9c:15:49:41: d2:9c:91:3c:0b:82:b8:0a:21:1b:1e:53:cb:fd:24:02:52:46: 8e:30:df:7a:98:87:21:5c:3f:45:76:8d:23:0e:81:df:77:56: d9:eb:12:5a:93:51:04:b2:d1:d3:97:19:93:7f:3a:f8:45:61: 59:8d:2c:86:73:91:dd:17:76:71:04:21:ff:e3:ed:31:ee:77: 0e:50:b6:34:43:86:fc:90:72:1b:86:d6:42:17:b1:c1:bf:2b: 74:1f:a8:d4:f5:dc:f4:78:d7:f2:d7:cd:5e:49:de:07:4c:bb: 39:62:53:cc:41:83:62:89:d7:f7:8b:ab:c9:59:5a:85:90:47: 16:df:e4:aa:ca:e1:cd:33:d2:ff:80:af:c9:1d:35:ab:9b:fe: 42:05:f9:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6fcUA4k6rACPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MjVjYTA4NGItZjcwZC00NGYzLWJhOGItNmVmYTgxOTdlN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3VmGmpOLNR7Q/Bdf0ArdMwmrx1UVjGcyUHB htZBAkaFVueN1ASEes6dewz1fIgY/fXlBjNgtAppHa7JoEFcD9w/zvmLw78+2MRc T9RpCUizLIyiWWymqOzqCgv1OsqNZ3LTjSfKK10wmkkbARkfnZVeMhh2SGJV9JuF AOBld2ox6HyJK/uwEIhGv4dslnoeDAtdvjc4W0jReszxNJrNhquH+5uUTUvnOMzK LiRr2qYiYxa76voaqhhNJlYDAH/4oS7XWvL1sOUN3dlfxVYvUR4enZOKBr1zbGGJ QKLcRCCmIjtsbcahEwZKR20B9jYnH4iEJ1w9d1FeGd98vJ1+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwG59ljIhkZUcEbW0Y4LTLtaGuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTljMzRhMWMtYzNhZi0z MDgwLTllOTgtZGYyZjFiZjFiNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgK10ZvHhAFJdQ3o418h41sczRP4sfB3Az/H5inbwXaT1c7nQ7N3MD+ asLhQEBorOKc59IpahIZwxdl/LTjq6WIA1niOYaPUwUPeR2I6Rl09j1AOMUEG6SG 2pApG5Nr6PMH2y1u18GHnBVJQdKckTwLgrgKIRseU8v9JAJSRo4w33qYhyFcP0V2 jSMOgd93VtnrElqTUQSy0dOXGZN/OvhFYVmNLIZzkd0XdnEEIf/j7THudw5QtjRD hvyQchuG1kIXscG/K3QfqNT13PR41/LXzV5J3gdMuzliU8xBg2KJ1/eLq8lZWoWQ Rxbf5KrK4c0z0v+Ar8kdNaub/kIF+a0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:59 2025 by rpki-client