$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa File: a967e86a-5d5a-3f72-8e57-9298211b0802.roa (raw, json) Hash identifier: PwwnZOvcBWOLYSTuaBgG12bZBLOhOIRy6fsAnqWF+KU= Subject key identifier: D6:21:43:68:88:77:53:8D:1B:6B:C7:21:1C:FC:9F:9A:65:CC:0E:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9E7C73244973C13EF100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.27.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9e:7c:73:24:49:73:c1:3e:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=52a4fc80-e6dc-4fdc-8dfb-a077bf9b786f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:10:d4:85:1e:9d:b7:9b:20:d1:11:5f:85: e4:73:7d:66:e1:7d:35:63:9b:49:0e:dc:5b:d8:ce: 8b:be:f8:51:a8:d2:81:76:b9:b1:a7:9a:34:46:1f: 07:a0:04:1a:63:8e:6e:ed:4b:fd:20:b5:b4:d6:91: b9:9f:24:bd:fd:13:f6:cb:51:63:34:84:a1:66:43: b2:44:e6:a7:81:c0:7c:02:f2:21:7d:23:db:64:f9: b4:2a:5c:c9:8f:21:ae:76:45:d8:33:e3:d0:f5:76: 77:e8:12:68:ec:44:37:34:3a:2a:e6:24:b3:7a:22: 84:5d:5d:20:af:fe:29:b4:a5:9b:44:cf:f7:34:19: db:df:44:f3:1c:83:71:ec:55:59:f8:d3:40:03:9e: f9:7c:60:9a:ed:85:22:e0:56:91:5a:9f:33:e2:36: bd:a4:ce:02:6b:51:6b:20:9c:ee:b8:9a:51:19:ab: 98:3a:4d:eb:0e:4b:93:62:40:ee:5a:85:3f:3a:8d: c9:de:4d:8a:a4:e9:34:63:bb:bd:7e:67:9e:bb:83: d3:c0:1b:66:0d:92:84:62:82:41:d3:2b:e6:2f:89: fd:3e:b1:b9:a8:85:9b:d2:91:b0:b1:4e:7d:bf:aa: 1f:34:91:ad:b8:f1:c2:54:31:22:b5:5b:c7:55:30: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:43:68:88:77:53:8D:1B:6B:C7:21:1C:FC:9F:9A:65:CC:0E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b3:3a:9f:25:61:36:06:f4:3c:78:fc:79:73:db:17:88:ce: ff:f0:27:85:3a:29:f0:9e:5d:78:8f:56:1f:3b:57:6a:15:fe: 5e:02:b1:58:0a:e0:5d:a8:09:f5:fb:75:68:3c:03:3a:93:cc: c5:9f:5b:ca:a3:12:7f:54:9e:b6:6e:6d:3c:88:86:7a:77:27: c9:e2:5a:2b:0f:18:15:97:f6:7f:48:e6:f0:b4:3b:bd:d5:53: f1:a4:44:ad:37:ec:6e:4b:40:59:11:c7:a6:ce:22:fc:6b:86: b2:ff:4c:5d:23:b4:7c:89:5e:33:a8:1f:5b:5c:aa:75:05:dc: 43:71:ed:84:65:49:ac:ec:94:e8:82:47:3b:2f:9d:46:98:a6: 5f:77:e3:54:9d:bb:09:76:fc:81:86:d9:f1:c1:c2:03:77:29: 17:27:69:c2:19:72:22:a3:2d:3f:bf:25:03:ba:6c:d3:82:35: 98:bd:f4:1e:9a:01:8f:66:b7:22:9e:ad:5b:f6:d1:f5:aa:de: 65:be:5b:15:91:08:fd:5d:d8:d3:2a:ea:ad:5f:3b:e2:93:5b: c6:57:b6:4d:c9:3a:e7:18:2c:fe:75:bb:c9:6f:ed:b2:a1:f4: b8:4b:44:47:6d:fa:e9:68:80:43:bf:7d:e1:f7:48:f7:a9:3f: d3:f9:8a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq558cyRJc8E+8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NTJhNGZjODAtZTZkYy00ZmRjLThkZmItYTA3N2JmOWI3ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog8Q1IUenbebINERX4Xkc31m4X01Y5tJDtxb 2M6LvvhRqNKBdrmxp5o0Rh8HoAQaY45u7Uv9ILW01pG5nyS9/RP2y1FjNIShZkOy ROangcB8AvIhfSPbZPm0KlzJjyGudkXYM+PQ9XZ36BJo7EQ3NDoq5iSzeiKEXV0g r/4ptKWbRM/3NBnb30TzHINx7FVZ+NNAA575fGCa7YUi4FaRWp8z4ja9pM4Ca1Fr IJzuuJpRGauYOk3rDkuTYkDuWoU/Oo3J3k2KpOk0Y7u9fmeeu4PTwBtmDZKEYoJB 0yvmL4n9PrG5qIWb0pGwsU59v6ofNJGtuPHCVDEitVvHVTDx2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYhQ2iId1ONG2vHIRz8n5plzA6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTk2N2U4NmEtNWQ1YS0z ZjcyLThlNTctOTI5ODIxMWIwODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6zOp8lYTYG9Dx4/Hlz2xeIzv/wJ4U6KfCeXXiPVh87V2oV/l4CsVgK 4F2oCfX7dWg8AzqTzMWfW8qjEn9UnrZubTyIhnp3J8niWisPGBWX9n9I5vC0O73V U/GkRK037G5LQFkRx6bOIvxrhrL/TF0jtHyJXjOoH1tcqnUF3ENx7YRlSazslOiC RzsvnUaYpl9341Sduwl2/IGG2fHBwgN3KRcnacIZciKjLT+/JQO6bNOCNZi99B6a AY9mtyKerVv20fWq3mW+WxWRCP1d2NMq6q1fO+KTW8ZXtk3JOucYLP51u8lv7bKh 9LhLREdt+ulogEO/feH3SPepP9P5ivM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:50 2025 by rpki-client