$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa File: aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa (raw, json) Hash identifier: mWc2JzUGoiQBTyuV+HIe0xo2qQQuuviCR4Lda0U6hgw= Subject key identifier: 42:A6:8D:C9:C6:0F:9B:05:69:57:D1:71:05:83:8C:94:B3:8A:3A:F2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA9F476B55A35459DEF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.24.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a9:f4:76:b5:5a:35:45:9d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=78c879be-43a9-44ce-9e12-a2eabfec9175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:0f:2d:9d:96:93:f8:ea:9e:10:42:25:ad: e7:89:e5:d3:e1:2e:2e:b9:1a:0c:b0:eb:c8:22:36: 56:eb:3e:fd:f9:f7:e4:0f:b1:9c:24:78:2d:f1:f4: 6f:d9:31:72:04:3b:4c:13:0e:f0:15:1a:ee:92:fc: fe:18:89:0e:57:51:69:23:31:2a:7b:41:ac:6d:4a: 83:0a:01:1f:97:01:a4:62:33:a9:2f:77:37:d5:81: ce:dd:c4:d8:8b:92:67:a4:f6:a1:1c:66:37:aa:a8: a1:68:49:ad:88:80:0a:ff:1a:3c:27:e6:59:f3:14: 95:fc:97:0b:e3:d9:01:98:91:92:38:7a:11:64:f4: b6:54:d4:6b:24:7f:c1:21:7a:19:16:90:09:e9:18: 82:37:4a:37:28:a3:cf:a2:60:77:8c:15:41:87:89: d3:eb:20:7e:85:75:f0:b7:0c:7c:bd:27:89:9e:14: 78:20:b1:0f:81:64:7a:24:34:f0:c3:72:e2:7a:03: bb:b9:0b:7b:45:38:08:50:8c:d0:a9:5c:b8:ad:77: 8a:14:4a:b0:fd:2f:59:71:99:ee:d7:43:89:ce:f5: 15:8a:5c:2b:ff:76:07:3c:29:94:14:a5:0d:dc:d0: 7b:32:7b:44:d7:36:57:a1:6e:c5:30:c0:bc:82:4a: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:8D:C9:C6:0F:9B:05:69:57:D1:71:05:83:8C:94:B3:8A:3A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b4:27:65:1b:18:08:c5:bf:eb:13:62:02:c0:28:83:6f:47: 40:27:cc:df:b8:bd:da:ed:16:55:0b:f0:98:af:df:6e:d3:29: 95:be:6e:f7:43:e8:be:b5:10:d3:61:72:de:05:39:e3:00:6d: 85:95:46:4b:1c:25:e3:fb:7c:2a:f8:f9:b2:6d:f0:06:9c:c0: 28:00:b2:f4:d3:57:17:ca:a4:d4:f6:f4:a8:60:e1:b8:73:9d: 39:9d:59:7d:0a:e8:11:21:79:bf:be:d0:73:ad:87:63:8c:0a: ce:f7:df:9d:f7:f4:0b:a7:92:e6:12:e3:27:d5:ee:2e:ab:e5: 70:d7:29:7e:49:97:df:cd:2b:a4:69:d3:fc:62:48:5b:15:64: 2e:da:5f:a3:17:b0:de:27:33:05:7c:35:5f:e0:fa:5d:e0:37: 42:58:5c:74:36:e0:4a:8c:33:33:52:11:23:d5:85:eb:a9:9a: 18:a8:84:06:5d:14:59:78:00:19:07:28:70:95:d3:b4:e9:50: e2:7c:a8:38:89:68:0c:bf:fd:ae:fb:07:d1:c9:f8:1d:14:d9: 60:c2:a1:ae:62:de:33:c6:92:61:eb:b3:4e:2f:d4:1f:4c:ae: cd:cd:e6:12:03:bc:01:59:88:65:91:01:b2:66:d4:a4:b0:e2: ec:59:b4:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6n0drVaNUWd74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzhjODc5YmUtNDNhOS00NGNlLTllMTItYTJlYWJmZWM5MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3sPLZ2Wk/jqnhBCJa3nieXT4S4uuRoMsOvI IjZW6z79+ffkD7GcJHgt8fRv2TFyBDtMEw7wFRrukvz+GIkOV1FpIzEqe0GsbUqD CgEflwGkYjOpL3c31YHO3cTYi5JnpPahHGY3qqihaEmtiIAK/xo8J+ZZ8xSV/JcL 49kBmJGSOHoRZPS2VNRrJH/BIXoZFpAJ6RiCN0o3KKPPomB3jBVBh4nT6yB+hXXw twx8vSeJnhR4ILEPgWR6JDTww3LiegO7uQt7RTgIUIzQqVy4rXeKFEqw/S9ZcZnu 10OJzvUVilwr/3YHPCmUFKUN3NB7MntE1zZXoW7FMMC8gkpASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKmjcnGD5sFaVfRcQWDjJSzijryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFiYmRhYzAtOWE3Mi0z MzNkLThjNTItYWUzOGExNWEzZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy0J2UbGAjFv+sTYgLAKINvR0AnzN+4vdrtFlUL8Jiv327TKZW+bvdD 6L61ENNhct4FOeMAbYWVRkscJeP7fCr4+bJt8AacwCgAsvTTVxfKpNT29Khg4bhz nTmdWX0K6BEheb++0HOth2OMCs7335339AunkuYS4yfV7i6r5XDXKX5Jl9/NK6Rp 0/xiSFsVZC7aX6MXsN4nMwV8NV/g+l3gN0JYXHQ24EqMMzNSESPVheupmhiohAZd FFl4ABkHKHCV07TpUOJ8qDiJaAy//a77B9HJ+B0U2WDCoa5i3jPGkmHrs04v1B9M rs3N5hIDvAFZiGWRAbJm1KSw4uxZtL0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:09:02 2025 by rpki-client