$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa File: afe83c0a-1cc3-335f-877d-d278e5800174.roa (raw, json) Hash identifier: bxQEgZvjSJqV2lR3P3oxPSSgGWsEm/spCBBXqMMB2/s= Subject key identifier: BB:EF:D5:1A:E5:DD:C2:BA:C8:F6:60:6C:35:96:CE:5B:5C:28:50:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAC6A5FB4A5BA8C5B2120 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.29.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ac:6a:5f:b4:a5:ba:8c:5b:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=8ec7ade9-72f7-47f6-b2e1-663ca64ed395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:6a:3e:4e:05:dd:60:3a:a5:f2:09:10:4b: cc:ea:c8:f6:99:6d:ed:b3:cb:c2:91:37:0a:7b:77: ce:17:67:d9:91:2a:02:ca:45:d6:22:45:fc:5a:98: 05:20:bb:5d:5a:b4:1e:d2:21:3e:82:3e:53:12:17: 1d:24:2b:13:b4:e7:b4:8e:08:51:f2:c0:f1:55:7e: 80:5d:46:a2:f5:e7:f1:f3:d4:aa:b1:32:76:66:bb: c2:64:00:ee:98:95:a4:28:79:51:83:22:7a:c1:62: 13:6e:6f:6b:43:ce:c8:c8:e6:a2:73:4d:dd:18:f0: 48:62:15:9f:55:a1:08:59:62:56:8f:50:2c:eb:07: b4:42:67:78:8f:e9:f3:3e:35:af:a3:0d:da:fb:98: 58:a7:96:dc:d8:95:97:82:9a:e9:5c:f2:99:7c:bf: b6:65:10:21:0f:58:c3:93:61:f2:54:ac:dd:aa:44: 4a:9b:10:39:47:f7:ba:58:ed:f3:2e:d1:b8:ab:6c: 66:fd:4c:ed:78:86:dc:ee:36:78:fe:d0:83:33:25: f9:46:b3:04:4b:20:44:b3:52:0d:67:1e:d4:40:75: 2f:23:e1:08:39:e1:41:e3:5c:db:20:f2:9f:02:13: 96:4f:6c:cc:d3:1b:f3:9d:55:a4:91:07:e0:b8:0e: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EF:D5:1A:E5:DD:C2:BA:C8:F6:60:6C:35:96:CE:5B:5C:28:50:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a6:ab:af:66:21:ce:c2:9b:69:f5:21:57:a3:ac:58:bc:20: 58:16:2d:d2:c6:aa:70:5f:f5:8a:58:33:51:d2:c2:2a:71:3f: 92:af:b8:e8:e6:b3:0b:96:ae:5b:78:ad:d1:ad:5a:8e:73:7e: 9f:c4:6c:db:76:7d:d0:00:92:e8:a2:21:af:bd:3e:e2:59:ef: 9a:b5:05:af:f8:a9:9c:fa:71:a1:f1:ad:dc:c2:9a:b1:f1:ed: d8:a8:6a:35:47:1c:7c:37:31:fe:de:30:14:ec:cb:2d:e9:62: 36:2c:04:77:16:3a:7c:9a:7b:23:19:11:3a:74:b1:89:33:33: bd:d8:14:d1:d0:db:89:56:6e:c8:b8:3c:61:a3:a4:dd:ee:f9: 23:82:b1:3b:6f:9c:f9:46:d2:4a:20:0a:7d:b7:ba:45:f0:aa: 29:4b:fc:94:37:00:af:68:ff:a5:a9:93:49:4e:8d:4a:87:97: 91:d3:48:f8:63:06:1b:a3:13:fe:5a:66:f3:f9:05:3f:be:05: e6:6a:01:b8:39:3b:cb:54:ce:3c:a6:d7:de:25:d5:a8:db:f9: 11:5c:95:17:ba:6e:56:bf:bc:d3:1b:a2:c5:4a:14:b3:fe:79: d0:47:4d:0b:8a:fd:82:0f:11:0f:e1:cd:fb:a9:14:f1:2a:84: 3a:bd:3e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6xqX7SluoxbISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OGVjN2FkZTktNzJmNy00N2Y2LWIyZTEtNjYzY2E2NGVkMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFlqPk4F3WA6pfIJEEvM6sj2mW3ts8vCkTcK e3fOF2fZkSoCykXWIkX8WpgFILtdWrQe0iE+gj5TEhcdJCsTtOe0jghR8sDxVX6A XUai9efx89SqsTJ2ZrvCZADumJWkKHlRgyJ6wWITbm9rQ87IyOaic03dGPBIYhWf VaEIWWJWj1As6we0Qmd4j+nzPjWvow3a+5hYp5bc2JWXgprpXPKZfL+2ZRAhD1jD k2HyVKzdqkRKmxA5R/e6WO3zLtG4q2xm/UzteIbc7jZ4/tCDMyX5RrMESyBEs1IN Zx7UQHUvI+EIOeFB41zbIPKfAhOWT2zM0xvznVWkkQfguA6W5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvv1Rrl3cK6yPZgbDWWzltcKFCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZlODNjMGEtMWNjMy0z MzVmLTg3N2QtZDI3OGU1ODAwMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKimq69mIc7Cm2n1IVejrFi8IFgWLdLGqnBf9YpYM1HSwipxP5KvuOjm swuWrlt4rdGtWo5zfp/EbNt2fdAAkuiiIa+9PuJZ75q1Ba/4qZz6caHxrdzCmrHx 7dioajVHHHw3Mf7eMBTsyy3pYjYsBHcWOnyaeyMZETp0sYkzM73YFNHQ24lWbsi4 PGGjpN3u+SOCsTtvnPlG0kogCn23ukXwqilL/JQ3AK9o/6Wpk0lOjUqHl5HTSPhj BhujE/5aZvP5BT++BeZqAbg5O8tUzjym194l1ajb+RFclRe6bla/vNMbosVKFLP+ edBHTQuK/YIPEQ/hzfupFPEqhDq9PuI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:19 2025 by rpki-client