$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa File: a3832569-34d4-3472-aaf7-cb8a683640de.roa (raw, json) Hash identifier: E9VgTOJeSZSeZYvnje6a/BqUAirr58/N5JRP+IGlgsw= Subject key identifier: 00:D4:9D:EF:DF:5C:85:C8:7C:B2:D6:F7:E5:18:59:DB:E3:82:AD:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAC0EC188BEEEDA2E1480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ac:0e:c1:88:be:ee:da:2e:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=e4a8d0a4-b490-46fa-83a9-7eae79fe538a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:fd:c8:15:1a:23:1a:8f:b7:fc:d9:21:1a: 16:f8:df:16:7b:20:b2:3f:f3:26:a2:82:f3:e2:4b: 98:c6:fa:fd:4b:de:20:75:98:0c:e7:9c:a5:c4:e0: 5c:7b:0e:f4:23:51:d9:40:e5:23:82:a6:92:66:af: 5a:4a:50:fe:e9:64:61:94:33:40:9b:88:ef:a7:0c: 58:a6:c3:51:1a:d1:91:41:c1:dd:e5:15:3e:f2:fd: cd:96:bc:79:9f:0d:67:f6:fa:e7:32:d3:14:6e:c2: a1:af:71:98:36:31:32:12:43:24:88:38:2c:d1:4b: 99:fa:54:65:58:4c:8b:57:d1:e7:af:bf:bb:e0:e4: 3d:7c:bf:39:12:25:3a:da:dc:3b:e6:b5:f2:f2:3a: e3:77:f7:47:cd:17:a3:20:06:7b:8c:de:06:2c:88: b6:58:da:f4:d0:6c:15:87:20:c5:a5:b3:a1:c6:2b: 16:d5:76:7a:96:99:b1:01:a9:0c:7b:e7:b3:d2:37: 66:7d:c1:da:41:4d:ec:78:71:45:80:ec:8d:d8:b2: ac:59:26:da:5f:5f:dc:47:7d:84:35:75:08:2b:71: 51:dc:5f:a6:fe:1c:57:ee:10:ca:79:b0:e8:98:d4: c6:e5:ae:8e:0b:52:17:97:29:6d:42:0f:ca:0a:42: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D4:9D:EF:DF:5C:85:C8:7C:B2:D6:F7:E5:18:59:DB:E3:82:AD:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3832569-34d4-3472-aaf7-cb8a683640de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:41:1d:90:9c:5c:e2:a0:dd:3a:1a:3d:c0:36:d5:ca:c0:71: 78:b0:06:4e:21:95:e6:60:42:c9:3f:74:97:f4:99:6b:0c:f9: 27:85:b9:6c:a7:bc:81:97:d9:70:97:07:fb:06:b3:0d:6a:90: fe:27:c6:c3:b8:3c:3d:80:c1:1b:36:da:d3:ab:50:e0:69:a1: f8:cc:3d:9f:5b:6f:c0:fe:13:f0:92:10:20:3f:78:58:de:7d: d9:7a:52:76:91:26:dd:51:be:84:52:3d:11:01:f0:d9:31:d5: 4a:7f:01:3c:8e:3b:c0:f2:83:f2:8f:39:db:b0:70:c3:58:32: 7c:c9:fc:74:ec:58:8b:35:e5:3e:a1:4a:3e:e3:43:8b:5c:ad: 30:4d:db:6a:c3:7f:2c:c9:3c:b1:01:7e:86:37:26:e2:e3:62: 5f:bb:ba:a3:1c:25:14:77:dc:a4:df:1a:2e:10:d4:8a:16:a4: 0c:57:7c:56:ba:7b:7b:cf:c6:38:ed:e4:0f:dd:f0:38:e0:72: 2a:cd:ff:b8:92:71:7f:c8:cd:27:7f:61:ca:95:b5:3f:83:61: c9:23:53:f2:58:d4:07:b0:ef:35:95:1b:84:ec:c4:c8:09:d1: d2:89:47:97:2f:2c:ec:17:f8:30:84:c0:e3:59:03:f8:fe:a9: 46:46:8c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6wOwYi+7touFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTRhOGQwYTQtYjQ5MC00NmZhLTgzYTktN2VhZTc5ZmU1MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qn9yBUaIxqPt/zZIRoW+N8WeyCyP/MmooLz 4kuYxvr9S94gdZgM55ylxOBcew70I1HZQOUjgqaSZq9aSlD+6WRhlDNAm4jvpwxY psNRGtGRQcHd5RU+8v3Nlrx5nw1n9vrnMtMUbsKhr3GYNjEyEkMkiDgs0UuZ+lRl WEyLV9Hnr7+74OQ9fL85EiU62tw75rXy8jrjd/dHzRejIAZ7jN4GLIi2WNr00GwV hyDFpbOhxisW1XZ6lpmxAakMe+ez0jdmfcHaQU3seHFFgOyN2LKsWSbaX1/cR32E NXUIK3FR3F+m/hxX7hDKebDomNTG5a6OC1IXlyltQg/KCkJlwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADUne/fXIXIfLLW9+UYWdvjgq2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTM4MzI1NjktMzRkNC0z NDcyLWFhZjctY2I4YTY4MzY0MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZBHZCcXOKg3ToaPcA21crAcXiwBk4hleZgQsk/dJf0mWsM+SeFuWyn vIGX2XCXB/sGsw1qkP4nxsO4PD2AwRs22tOrUOBpofjMPZ9bb8D+E/CSECA/eFje fdl6UnaRJt1RvoRSPREB8Nkx1Up/ATyOO8Dyg/KPOduwcMNYMnzJ/HTsWIs15T6h Sj7jQ4tcrTBN22rDfyzJPLEBfoY3JuLjYl+7uqMcJRR33KTfGi4Q1IoWpAxXfFa6 e3vPxjjt5A/d8DjgcirN/7iScX/IzSd/YcqVtT+DYckjU/JY1Aew7zWVG4TsxMgJ 0dKJR5cvLOwX+DCEwONZA/j+qUZGjBA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:26 2025 by rpki-client