$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa File: aabba271-a15d-3720-a297-6d87452eee21.roa (raw, json) Hash identifier: 3r02ZoWxAvurdWMjRMTAKgFlNm3K5EWpeevPphq2YeY= Subject key identifier: 58:13:CD:F5:88:00:65:F6:11:C3:2C:5F:32:C7:0E:61:94:3E:1C:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAA9EB5F9EDE5A9C6BB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.25.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:aa:9e:b5:f9:ed:e5:a9:c6:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=c1a9f286-26a9-4cc7-b095-d35794363127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:ac:8c:71:d0:e4:65:d1:1e:e4:2c:d0:75: 1a:3a:99:37:48:2b:ee:5e:4b:6f:7d:53:fd:f6:1a: 30:b2:fe:c0:72:e7:45:be:ea:c6:65:a7:d9:de:7e: 29:e3:9f:3d:14:4e:6d:b3:9d:c2:5f:e0:d4:78:7d: e0:49:a9:70:a1:2a:12:22:70:b8:44:b9:8b:e9:50: 60:51:a9:bd:34:70:83:88:ec:97:e6:63:aa:70:f3: 4b:82:52:3f:c3:3e:8a:78:a1:ac:4f:f1:1b:6c:4d: ea:e2:8d:6e:ae:aa:0e:7f:26:48:0d:b9:78:58:c0: 4d:7a:93:eb:2e:29:34:2d:5d:6a:b3:86:02:36:68: d9:32:71:13:59:0d:cb:7a:2e:02:18:13:50:85:32: 30:18:6f:3a:94:a9:55:52:67:b5:89:97:0f:e5:60: 33:32:79:7d:d8:3f:8c:dd:23:25:f7:fe:25:4b:93: 77:45:fc:15:62:19:bf:7d:3a:ff:5a:87:39:ce:99: c5:ad:8c:31:1c:1c:c6:5d:9a:08:4d:e6:17:97:80: 8c:7b:1c:be:dd:c2:ae:a2:25:ab:e2:a3:28:13:72: b3:6b:32:d6:26:51:72:fa:85:39:46:01:f5:73:7a: 38:ae:f3:7c:56:70:25:ea:11:43:ac:62:f3:33:e5: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:CD:F5:88:00:65:F6:11:C3:2C:5F:32:C7:0E:61:94:3E:1C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:45:66:39:14:0c:9b:1f:3a:99:fb:21:34:f3:45:0c:7a:04: 74:9c:69:2d:37:4a:53:d4:70:a8:0f:2b:76:b6:04:e5:17:d1: 0a:18:1c:46:28:02:79:5d:bb:b7:db:a0:86:75:ff:cc:8e:8e: 32:70:40:cb:c3:8f:8d:35:fe:77:20:21:76:58:23:da:77:6e: 2d:a6:11:96:7f:1f:8d:f9:76:4f:53:21:4a:33:f9:0d:1a:d9: ac:55:80:c7:8c:cf:9e:6e:26:f3:4d:79:ce:db:f3:2a:4c:4d: 32:4f:4c:fa:b0:86:c1:4a:00:60:a5:31:9c:5f:e9:7b:bc:11: a5:04:20:b6:f1:e8:2e:6a:4b:6f:97:62:5b:a4:48:ae:e0:0a: af:61:a9:b6:65:39:a3:d0:48:e1:37:13:ac:1b:7c:61:0b:ac: e2:97:13:ad:49:60:05:20:16:cd:b7:da:e4:dc:1f:18:3f:ad: 97:d0:7e:9c:28:2d:3c:81:7c:17:62:69:78:d2:1b:bf:54:fd: c4:b3:40:81:e6:19:ce:d7:7c:bf:ba:73:44:fc:2c:04:b5:fe: ec:bf:21:32:4e:2b:7c:5d:80:63:55:59:31:8c:3f:81:e5:d6: 33:49:66:74:65:d2:cd:66:1e:c2:6f:4f:f0:ef:9d:e0:3a:cc: 4a:e2:ab:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6qetfnt5anGu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YzFhOWYyODYtMjZhOS00Y2M3LWIwOTUtZDM1Nzk0MzYzMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyOsjHHQ5GXRHuQs0HUaOpk3SCvuXktvfVP9 9howsv7AcudFvurGZafZ3n4p4589FE5ts53CX+DUeH3gSalwoSoSInC4RLmL6VBg Uam9NHCDiOyX5mOqcPNLglI/wz6KeKGsT/EbbE3q4o1urqoOfyZIDbl4WMBNepPr Lik0LV1qs4YCNmjZMnETWQ3Lei4CGBNQhTIwGG86lKlVUme1iZcP5WAzMnl92D+M 3SMl9/4lS5N3RfwVYhm/fTr/Woc5zpnFrYwxHBzGXZoITeYXl4CMexy+3cKuoiWr 4qMoE3KzazLWJlFy+oU5RgH1c3o4rvN8VnAl6hFDrGLzM+UP6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgTzfWIAGX2EcMsXzLHDmGUPhyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFiYmEyNzEtYTE1ZC0z NzIwLWEyOTctNmQ4NzQ1MmVlZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRFZjkUDJsfOpn7ITTzRQx6BHScaS03SlPUcKgPK3a2BOUX0QoYHEYo Anldu7fboIZ1/8yOjjJwQMvDj401/ncgIXZYI9p3bi2mEZZ/H435dk9TIUoz+Q0a 2axVgMeMz55uJvNNec7b8ypMTTJPTPqwhsFKAGClMZxf6Xu8EaUEILbx6C5qS2+X YlukSK7gCq9hqbZlOaPQSOE3E6wbfGELrOKXE61JYAUgFs232uTcHxg/rZfQfpwo LTyBfBdiaXjSG79U/cSzQIHmGc7XfL+6c0T8LAS1/uy/ITJOK3xdgGNVWTGMP4Hl 1jNJZnRl0s1mHsJvT/DvneA6zEriq8I= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:10 2025 by rpki-client