$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa File: aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa (raw, json) Hash identifier: hoY24ZFxYEgGJr3Ibj2dg3fMYlJSNOA6nzUT38uKIGY= Subject key identifier: 8E:94:9B:0E:DB:54:F2:9F:A0:0C:7D:65:7C:86:06:AE:C3:08:62:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9CD2E82A2F45E9158380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.21.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9c:d2:e8:2a:2f:45:e9:15:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=4f6c1593-7c4c-430f-85db-ccfbfa7db8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:a2:99:28:a1:34:4c:79:1d:77:b8:dc:12: eb:9e:52:6d:55:4c:57:cd:9c:ad:52:d4:f2:63:f1: eb:8e:3f:a2:f8:e0:62:62:df:35:1d:27:4d:bc:5f: 65:f7:2f:81:c0:31:64:50:ab:52:c6:c0:db:3f:a2: cb:2b:1b:54:88:33:a6:68:1a:d5:6b:38:86:91:65: 93:05:12:5c:91:36:f3:b9:47:0d:75:ba:b0:d4:85: 99:4a:7c:88:a4:2f:42:47:58:b5:cb:f0:fe:d8:0f: 16:41:45:a1:16:dd:47:74:60:7e:45:4c:19:2b:ac: b9:87:4e:b2:72:ba:4b:84:73:9b:97:87:3e:fb:cf: db:77:9d:19:e4:8e:ef:62:81:16:a8:23:80:c7:cc: 38:0e:91:99:7a:6f:9d:ed:93:d1:a5:35:75:30:41: da:61:48:03:e1:aa:6d:20:1f:ce:d8:07:33:43:44: 20:ec:b6:c3:80:2c:b4:b7:e1:b4:ed:d8:0c:d7:af: 48:b4:55:a3:da:60:d7:4d:0f:7d:77:5e:ad:dc:12: 27:b3:79:75:a6:c9:64:ec:7e:b1:f8:12:b0:2d:b3: 8a:90:90:00:91:16:e8:be:92:6a:79:26:b5:85:b5: 13:77:14:40:28:3c:ce:93:8e:fa:3d:b4:e1:31:33: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:94:9B:0E:DB:54:F2:9F:A0:0C:7D:65:7C:86:06:AE:C3:08:62:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:22:a4:23:4b:2d:85:aa:ad:97:ac:cd:9b:a6:b4:a6:75:06: ee:6b:20:95:08:39:a1:85:11:8f:17:ff:32:2c:3e:7c:9b:f7: 74:46:55:b1:ca:d0:cb:86:2c:fd:b7:70:19:42:ab:46:a4:e2: 71:d6:06:d5:7d:02:24:59:c4:91:12:e0:d1:36:35:7b:ca:76: 9c:38:d3:2f:15:0e:1f:9d:f1:79:75:e1:6e:41:61:b9:a5:6c: ba:e2:5e:64:f7:da:9e:67:f2:0f:02:12:f5:54:28:c0:3f:31: b1:78:a3:8d:3a:56:43:33:5a:33:11:29:25:43:fa:f3:48:29: cc:2c:e4:c8:a0:b0:71:43:ab:a4:27:25:49:73:7b:d2:40:44: f4:ac:31:9e:bf:fb:74:70:9e:a2:16:ce:0a:b1:54:33:1a:d8: 5c:16:65:c4:c0:c8:96:11:71:0b:7f:2b:f3:a0:82:90:56:28: 99:57:23:8e:e3:72:01:f9:7a:16:7d:6e:e4:7e:b7:82:ff:74: 67:6d:1d:15:81:c2:ce:e6:8e:16:35:02:95:f5:b2:92:69:a1: 8d:1d:42:76:ed:d7:8a:da:62:ec:9a:ea:fb:58:55:45:36:74: 0d:12:9b:20:d5:86:fd:65:39:ed:fd:6c:3c:42:59:54:f3:6a: da:84:92:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5zS6CovRekVg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NGY2YzE1OTMtN2M0Yy00MzBmLTg1ZGItY2NmYmZhN2RiOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBaimSihNEx5HXe43BLrnlJtVUxXzZytUtTy Y/Hrjj+i+OBiYt81HSdNvF9l9y+BwDFkUKtSxsDbP6LLKxtUiDOmaBrVaziGkWWT BRJckTbzuUcNdbqw1IWZSnyIpC9CR1i1y/D+2A8WQUWhFt1HdGB+RUwZK6y5h06y crpLhHObl4c++8/bd50Z5I7vYoEWqCOAx8w4DpGZem+d7ZPRpTV1MEHaYUgD4apt IB/O2AczQ0Qg7LbDgCy0t+G07dgM169ItFWj2mDXTQ99d16t3BIns3l1pslk7H6x +BKwLbOKkJAAkRbovpJqeSa1hbUTdxRAKDzOk476PbThMTNkYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6Umw7bVPKfoAx9ZXyGBq7DCGKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWE2M2Y0YzctYzFhMC0z ZDVmLWIyNGEtNGM4ZjFiOGU4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4ipCNLLYWqrZeszZumtKZ1Bu5rIJUIOaGFEY8X/zIsPnyb93RGVbHK 0MuGLP23cBlCq0ak4nHWBtV9AiRZxJES4NE2NXvKdpw40y8VDh+d8Xl14W5BYbml bLriXmT32p5n8g8CEvVUKMA/MbF4o406VkMzWjMRKSVD+vNIKcws5MigsHFDq6Qn JUlze9JARPSsMZ6/+3RwnqIWzgqxVDMa2FwWZcTAyJYRcQt/K/OggpBWKJlXI47j cgH5ehZ9buR+t4L/dGdtHRWBws7mjhY1ApX1spJpoY0dQnbt14raYuya6vtYVUU2 dA0SmyDVhv1lOe39bDxCWVTzatqEksA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:18 2025 by rpki-client