$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a843cab0-eb02-3426-91b6-fafa18ae266d.roa File: a843cab0-eb02-3426-91b6-fafa18ae266d.roa (raw, json) Hash identifier: u6OTroIJ6vmf6+OT1xGMN91TlA9zFjaBscYdeANN6n4= Subject key identifier: 49:B3:E1:E4:7E:BA:DF:CA:74:79:30:0C:40:23:8E:CA:1B:72:E2:0C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA3B54592679C86788DC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a843cab0-eb02-3426-91b6-fafa18ae266d.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.17.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a3:b5:45:92:67:9c:86:78:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=137a4a02-bf98-43ef-9500-c7e265bba833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:1b:06:b4:c9:ae:29:fd:b7:d9:3c:d9:13: 58:b0:f8:c2:ff:a1:30:23:2f:9d:13:cb:fc:19:4c: ac:60:37:aa:73:c8:c4:77:ed:cc:c2:d4:33:a9:6f: 69:46:ae:b7:3f:5b:c8:91:c2:28:4d:de:44:50:bf: fa:91:b0:92:91:01:64:38:c5:f5:a4:8a:1d:10:b3: a6:68:48:05:26:59:f4:14:b1:9d:4e:ec:6f:b4:be: ad:f9:4c:d7:ca:ed:aa:ff:ff:7b:91:a9:9a:89:35: 01:b5:a7:61:c6:20:de:3b:64:bb:f1:27:de:42:28: 3f:c9:61:4d:1d:24:4d:26:ba:fd:bc:1b:2f:e2:e4: 6d:a4:f4:3a:8e:4f:ca:03:8b:d8:dc:1f:23:25:de: 6b:5c:16:b8:20:dd:89:a4:97:be:f6:7e:aa:1c:e7: 7b:16:18:2b:ee:c5:4a:39:fd:84:fe:65:cf:3f:79: 1b:27:12:ea:0b:8b:13:d0:1f:73:35:0e:ef:83:f0: db:3b:02:18:0d:20:7e:60:88:41:76:49:56:c6:65: 1d:ed:13:45:b5:44:f4:14:93:ec:5b:fc:43:e8:d2: a5:0f:ed:df:3c:86:96:50:b6:31:37:2b:5d:85:98: 57:a3:4c:d7:9a:ca:ca:0b:44:ec:aa:d6:77:88:83: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:E1:E4:7E:BA:DF:CA:74:79:30:0C:40:23:8E:CA:1B:72:E2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a843cab0-eb02-3426-91b6-fafa18ae266d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:8e:c1:48:66:32:89:0c:42:05:72:02:42:1f:7b:15:1e:b0: f7:18:81:3e:4b:e1:04:aa:77:01:b2:87:9d:db:6e:89:bc:4d: 5f:11:c7:b2:72:70:6d:a1:41:fd:e0:99:e7:7f:92:e6:99:f2: 82:a2:dc:04:04:be:e2:0b:38:ce:cf:2f:1c:9f:45:8a:30:9b: a2:77:95:d6:e2:fa:f1:b1:56:ff:4c:82:59:a6:ff:6f:d0:e6: 43:21:33:40:fd:c0:34:d7:f1:11:f2:56:47:8b:6d:51:1d:3e: da:09:96:6c:9e:74:34:16:c6:4b:75:f2:58:99:21:e4:e4:52: 7e:24:34:c0:37:79:68:ae:b5:42:de:b8:7d:2d:a0:b1:79:6e: be:42:51:91:7e:46:4f:01:ca:89:e5:a4:a5:5e:e4:75:9a:26: ca:1c:91:8a:8c:bb:20:a7:dd:53:4b:2e:98:ca:fc:4c:38:cf: 92:46:3d:f5:19:cf:a7:a5:3f:dc:98:f0:cd:78:95:34:d4:40: 47:7c:a6:95:b8:c1:34:aa:b6:14:f6:9b:59:30:96:6c:a3:79: 14:81:a0:e3:e1:46:3a:dd:84:da:b8:7e:15:69:b3:b7:87:b4: 83:6e:1a:59:32:da:0d:07:88:28:f1:fd:37:55:c2:52:51:e1: 08:dc:3c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6O1RZJnnIZ4jcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTM3YTRhMDItYmY5OC00M2VmLTk1MDAtYzdlMjY1YmJhODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo8bBrTJrin9t9k82RNYsPjC/6EwIy+dE8v8 GUysYDeqc8jEd+3MwtQzqW9pRq63P1vIkcIoTd5EUL/6kbCSkQFkOMX1pIodELOm aEgFJln0FLGdTuxvtL6t+UzXyu2q//97kamaiTUBtadhxiDeO2S78SfeQig/yWFN HSRNJrr9vBsv4uRtpPQ6jk/KA4vY3B8jJd5rXBa4IN2JpJe+9n6qHOd7Fhgr7sVK Of2E/mXPP3kbJxLqC4sT0B9zNQ7vg/DbOwIYDSB+YIhBdklWxmUd7RNFtUT0FJPs W/xD6NKlD+3fPIaWULYxNytdhZhXo0zXmsrKC0TsqtZ3iIPL/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmz4eR+ut/KdHkwDEAjjsobcuIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg0M2NhYjAtZWIwMi0z NDI2LTkxYjYtZmFmYTE4YWUyNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGOwUhmMokMQgVyAkIfexUesPcYgT5L4QSqdwGyh53bbom8TV8Rx7Jy cG2hQf3gmed/kuaZ8oKi3AQEvuILOM7PLxyfRYowm6J3ldbi+vGxVv9Mglmm/2/Q 5kMhM0D9wDTX8RHyVkeLbVEdPtoJlmyedDQWxkt18liZIeTkUn4kNMA3eWiutULe uH0toLF5br5CUZF+Rk8ByonlpKVe5HWaJsockYqMuyCn3VNLLpjK/Ew4z5JGPfUZ z6elP9yY8M14lTTUQEd8ppW4wTSqthT2m1kwlmyjeRSBoOPhRjrdhNq4fhVps7eH tINuGlky2g0HiCjx/TdVwlJR4QjcPNU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:08 2025 by rpki-client