$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa File: af12d4d2-eba1-3225-9761-d1d0bcd90937.roa (raw, json) Hash identifier: urTBPNmmszypxXSbGxLDA9EnIz4IbYxXkTq9K1tzrM8= Subject key identifier: D0:B3:90:F0:9E:F7:D7:ED:E0:EE:73:84:BB:96:B4:6B:A6:69:A7:63 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9C8700A93EF500680300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.20.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9c:87:00:a9:3e:f5:00:68:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=1137ae92-30e8-4bdd-b095-3c2315d3c8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c6:fc:0e:5b:15:df:75:b5:7b:85:0e:1a:fe: c6:de:42:63:5e:7c:23:b8:73:95:ff:08:c3:2b:52: 02:59:67:e3:de:94:2b:10:5c:0a:dd:78:b3:ad:0a: 17:a2:58:7f:a1:8f:a7:5d:2d:63:24:19:ee:ec:49: 40:2c:51:0b:dd:fa:b2:67:42:fb:1f:c5:fe:54:7d: eb:35:8c:6c:86:98:65:34:19:4e:fc:99:59:30:80: cc:8e:e8:67:23:91:06:66:5a:4f:14:3d:95:0e:7c: 5d:98:8b:0f:0f:4e:0b:76:6a:e2:69:7a:55:f1:37: 03:9e:cf:33:62:67:98:8c:e0:44:28:9e:bb:b3:01: 72:b7:8e:67:7b:33:29:b5:89:53:3c:25:3a:ed:ce: ee:2f:94:82:2a:c7:a8:3c:80:dd:54:e6:95:f2:ec: 52:f9:06:93:3c:5c:f6:76:6a:79:fb:c4:b6:ea:a8: d0:36:f6:e7:3e:46:f6:7c:a6:61:ac:41:ab:64:53: 20:67:90:f5:fb:9b:ed:f3:d4:64:7b:d8:fb:37:2b: 2a:72:3c:44:b9:1f:50:e2:6f:c2:b0:a8:bb:4b:85: 40:ca:19:9e:0e:8f:06:ea:b3:ed:0f:32:7e:20:4e: 2e:01:bd:4e:a7:70:e6:8c:f0:d1:0d:fb:40:16:3d: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B3:90:F0:9E:F7:D7:ED:E0:EE:73:84:BB:96:B4:6B:A6:69:A7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:21:0a:5b:9c:fc:c6:0d:81:6a:02:17:b9:f5:83:d0:db:01: af:2b:ba:88:1c:3c:6f:58:07:7e:58:d9:15:00:45:b1:21:41: 42:f3:34:53:83:0a:70:dc:64:95:0d:90:3b:a3:a2:fe:9a:5a: d5:5c:2b:b8:b7:20:80:4b:c3:c9:ad:e7:60:9b:2e:ac:ad:33: 7e:57:cc:48:a7:87:79:bd:93:a8:96:5e:59:58:b9:f9:e3:ac: 6d:51:be:b5:08:50:92:38:42:50:07:3e:5c:97:90:b6:2c:52: 6b:5e:93:18:9f:0e:76:b8:83:db:fe:6d:b9:ec:88:e5:fc:7a: 36:21:e1:25:8c:79:bf:fc:88:1f:31:2d:88:1b:90:7b:90:02: 83:05:65:a5:dc:3f:14:84:d8:51:53:79:53:68:dc:ca:b8:e7: e4:2f:ba:39:7c:1e:28:57:9b:b6:a0:b7:b2:e7:1c:06:06:fa: 7e:92:cb:5e:50:23:2a:cb:2c:e7:ff:ef:ce:fd:d4:f3:2f:13: ec:f4:96:45:ad:7d:82:0d:49:13:f7:2c:56:7e:ea:c2:4c:44: 0f:81:ce:aa:2d:e3:84:0f:f5:38:3b:c7:4d:5c:3a:81:3a:4f: 16:b3:42:a4:fd:77:e3:5c:08:c9:c2:e4:af:8f:cd:6b:24:50: 06:b7:a4:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5yHAKk+9QBoAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTEzN2FlOTItMzBlOC00YmRkLWIwOTUtM2MyMzE1ZDNjOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8b8DlsV33W1e4UOGv7G3kJjXnwjuHOV/wjD K1ICWWfj3pQrEFwK3XizrQoXolh/oY+nXS1jJBnu7ElALFEL3fqyZ0L7H8X+VH3r NYxshphlNBlO/JlZMIDMjuhnI5EGZlpPFD2VDnxdmIsPD04LdmriaXpV8TcDns8z YmeYjOBEKJ67swFyt45nezMptYlTPCU67c7uL5SCKseoPIDdVOaV8uxS+QaTPFz2 dmp5+8S26qjQNvbnPkb2fKZhrEGrZFMgZ5D1+5vt89Rke9j7NysqcjxEuR9Q4m/C sKi7S4VAyhmeDo8G6rPtDzJ+IE4uAb1Op3DmjPDRDftAFj1qKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCzkPCe99ft4O5zhLuWtGumaadjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWYxMmQ0ZDItZWJhMS0z MjI1LTk3NjEtZDFkMGJjZDkwOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHghCluc/MYNgWoCF7n1g9DbAa8ruogcPG9YB35Y2RUARbEhQULzNFOD CnDcZJUNkDujov6aWtVcK7i3IIBLw8mt52CbLqytM35XzEinh3m9k6iWXllYufnj rG1RvrUIUJI4QlAHPlyXkLYsUmtekxifDna4g9v+bbnsiOX8ejYh4SWMeb/8iB8x LYgbkHuQAoMFZaXcPxSE2FFTeVNo3Mq45+Qvujl8HihXm7agt7LnHAYG+n6Sy15Q IyrLLOf/78791PMvE+z0lkWtfYINSRP3LFZ+6sJMRA+Bzqot44QP9Tg7x01cOoE6 TxazQqT9d+NcCMnC5K+PzWskUAa3pO4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:01 2025 by rpki-client