$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa File: b1b9a4af-067f-3d2e-8910-c15ad31de484.roa (raw, json) Hash identifier: TFJgWkdJsXd7WOCANqa0HxVbhlX1GilBtxgf4Ipixd0= Subject key identifier: AC:07:F3:68:A2:52:EE:34:7D:7B:73:6F:C5:CA:84:20:0C:77:4C:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9841125883EA11549A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.17.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:98:41:12:58:83:ea:11:54:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=9c6b3f65-ac94-4e12-8f3b-842ca37c359b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:41:3d:3e:0a:b5:9d:0c:45:1b:3f:1c:10:27: 84:a7:f9:e7:a8:c4:f3:a0:ba:07:73:97:1b:68:84: 19:74:f3:86:f3:63:87:a2:8b:e8:a2:7b:13:d3:c5: 70:78:88:f7:20:82:ac:93:28:da:9f:5b:1c:1d:2c: 81:fa:3d:46:80:39:f5:cb:ce:03:c1:32:d2:ff:43: f3:f4:12:e1:ca:52:a5:bb:55:ba:cb:4d:30:ef:d4: 8b:36:7a:e5:49:0a:cc:6a:31:28:17:6a:90:d7:d9: 82:f6:9b:ce:64:9b:84:7b:83:58:74:70:9c:de:59: a1:86:a6:4f:66:45:98:d8:45:e4:b3:6a:f7:db:22: c3:e5:3c:ed:87:23:94:55:8b:0a:5b:f4:93:ea:3e: e1:f6:1a:99:ea:4a:7d:ea:3e:09:fc:b1:c5:72:83: 58:37:08:49:06:0e:8a:cb:df:b6:21:3d:92:9e:a4: 23:9f:59:78:93:27:c5:ea:44:b2:ab:68:9b:4b:dd: f0:bc:c3:81:d1:cf:a3:a4:13:50:70:d5:dd:c2:0e: b0:bd:1e:a8:bd:93:fc:f9:f6:e5:03:eb:b2:28:e1: 31:99:08:a9:b0:4d:28:a5:4f:93:cc:f3:67:52:2d: d1:8e:7f:df:79:ca:41:0f:9f:f7:43:26:9a:69:7b: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:07:F3:68:A2:52:EE:34:7D:7B:73:6F:C5:CA:84:20:0C:77:4C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:19:0c:6b:f7:bb:c1:fa:4b:5c:0f:d0:b5:9f:a5:2a:6a:dd: e9:0c:e1:b5:80:bb:d0:54:d9:30:55:30:73:91:90:eb:3b:c1: e6:85:cd:e0:19:8e:5b:60:96:3c:e9:ba:30:83:2e:4a:f5:36: b7:6d:5b:c2:3f:3a:57:49:7c:f7:74:3c:32:e0:32:cb:43:51: fc:ce:92:95:30:c6:19:de:08:db:45:7d:1e:67:0d:74:a1:33: f1:9e:f0:c4:2b:8c:8e:91:9a:19:ac:b0:44:8e:2e:8d:1a:58: e3:93:03:23:02:53:18:4f:77:ea:e8:d8:2f:2c:1c:7a:63:66: 11:b4:8e:e6:27:75:27:de:7f:ee:4a:e7:98:d5:a7:27:d3:19: ac:f9:4f:b0:62:c5:4b:27:86:ac:fc:eb:35:90:f0:7f:1c:68: d2:d3:ce:ea:93:9d:b7:0e:37:df:57:0e:40:ef:98:e2:9d:1c: 6c:e2:4d:fd:cf:77:dd:5f:94:b6:81:cf:68:6b:8d:ef:40:a9: 98:73:07:96:c4:4e:e9:5e:d4:f9:68:6a:f8:77:78:d8:aa:9a: 65:cc:01:04:04:a9:32:fd:41:ee:82:ee:7f:a1:bd:e8:84:be: 38:0d:f2:2f:7c:83:cd:66:33:ce:85:54:78:fb:e0:19:41:e0: 59:e5:10:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5hBEliD6hFUmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OWM2YjNmNjUtYWM5NC00ZTEyLThmM2ItODQyY2EzN2MzNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0E9Pgq1nQxFGz8cECeEp/nnqMTzoLoHc5cb aIQZdPOG82OHoovoonsT08VweIj3IIKskyjan1scHSyB+j1GgDn1y84DwTLS/0Pz 9BLhylKlu1W6y00w79SLNnrlSQrMajEoF2qQ19mC9pvOZJuEe4NYdHCc3lmhhqZP ZkWY2EXks2r32yLD5TzthyOUVYsKW/ST6j7h9hqZ6kp96j4J/LHFcoNYNwhJBg6K y9+2IT2SnqQjn1l4kyfF6kSyq2ibS93wvMOB0c+jpBNQcNXdwg6wvR6ovZP8+fbl A+uyKOExmQipsE0opU+TzPNnUi3Rjn/fecpBD5/3QyaaaXtWrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwH82iiUu40fXtzb8XKhCAMd0xPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjFiOWE0YWYtMDY3Zi0z ZDJlLTg5MTAtYzE1YWQzMWRlNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQZDGv3u8H6S1wP0LWfpSpq3ekM4bWAu9BU2TBVMHORkOs7weaFzeAZ jltgljzpujCDLkr1NrdtW8I/OldJfPd0PDLgMstDUfzOkpUwxhneCNtFfR5nDXSh M/Ge8MQrjI6RmhmssESOLo0aWOOTAyMCUxhPd+ro2C8sHHpjZhG0juYndSfef+5K 55jVpyfTGaz5T7BixUsnhqz86zWQ8H8caNLTzuqTnbcON99XDkDvmOKdHGziTf3P d91flLaBz2hrje9AqZhzB5bETule1Ploavh3eNiqmmXMAQQEqTL9Qe6C7n+hveiE vjgN8i98g81mM86FVHj74BlB4FnlELQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:07 2025 by rpki-client