$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa File: b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa (raw, json) Hash identifier: uPo5fjP2cYvS2N7KYdIakPfsy6HgrYvCpXn+Ue1fBJ4= Subject key identifier: 12:13:E1:0A:FA:EF:83:51:CC:D9:2B:3B:AD:E6:EC:77:49:4B:5A:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71104C523D641E153B32800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.29.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:04:c5:23:d6:41:e1:53:b3:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=dbd3c58a-7bd1-4957-9c59-64539baa93d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ec:c0:86:9d:2d:64:47:07:2a:92:30:f2:a9: 13:2e:74:c6:0a:dd:20:7f:93:de:2e:51:47:4c:cc: 80:d1:df:98:46:70:ac:70:e1:af:57:1d:fd:38:06: c6:6d:64:7e:ac:e6:3d:98:b6:2b:c4:5c:c1:89:89: ea:19:72:29:7f:d8:5f:32:b7:79:0d:1d:33:83:af: 0e:b4:05:94:57:20:69:e3:e9:65:28:80:83:26:99: 3e:3a:92:6a:a7:fe:3e:4f:f1:98:4e:f5:01:e5:d5: 21:04:f5:0c:58:7c:81:60:1d:13:0e:a6:20:5d:0d: 42:52:d2:06:6c:e9:48:98:38:9b:1f:9f:21:4b:5a: 53:2f:f7:78:c8:49:a8:83:d7:8b:87:51:f7:ca:c7: e6:10:d0:46:63:e1:c3:47:2f:d8:f5:81:13:9e:3f: e7:1e:c3:42:8e:23:60:01:6b:7a:a2:67:da:f4:0c: 07:fb:69:a4:ea:1a:dc:3c:a6:70:a8:2b:ad:b6:ee: 48:42:b2:9f:cc:71:29:ab:80:0e:52:87:a6:08:48: 11:f7:07:2a:30:09:0e:14:19:75:1f:d6:fd:f1:10: 43:f1:56:c0:05:89:14:d3:f2:c6:e6:6e:e8:ba:c2: 10:bf:93:e0:c6:62:9c:12:12:43:ab:3a:d9:5b:ce: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:E1:0A:FA:EF:83:51:CC:D9:2B:3B:AD:E6:EC:77:49:4B:5A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:0d:e0:e9:5e:5c:d0:4f:12:f0:7d:d9:11:35:58:e7:4a:37: c3:00:cc:14:01:b0:af:07:25:66:f5:cc:07:d4:52:3b:ff:9b: 50:1c:57:77:56:ca:62:d9:1a:a8:4a:f7:93:a0:55:11:f7:17: 74:a5:b5:bf:89:5b:26:13:f9:bb:62:10:8f:d9:09:06:2a:7f: 5e:05:fe:f2:16:d9:8b:15:34:3d:b8:10:40:3a:86:b5:d1:3f: dc:7a:53:ad:45:c4:ec:0f:b9:22:c0:7f:9c:39:3c:fa:f5:40: 23:d0:8e:ea:b0:8e:50:ca:05:4b:e8:65:2b:40:84:8f:8d:25: 5a:93:15:01:e5:f6:21:ef:4f:60:5f:67:f9:50:85:67:81:45: 6e:40:55:43:81:15:11:a3:41:eb:3d:c6:e4:9b:c8:91:46:13: c5:99:59:fd:eb:4b:49:d3:a6:a0:7a:0e:66:de:8e:57:66:45: 8c:a4:be:c5:66:5e:92:e6:d0:96:66:c2:dd:8f:04:d0:5a:12: 0d:35:4e:c1:96:b7:6a:fc:00:ea:04:f5:a5:27:c4:2c:04:a4: f3:69:cf:1f:7a:c3:be:72:63:e6:eb:b4:f9:8c:3c:40:46:cd: 82:f6:e0:c5:ea:e7:f3:b6:60:97:f1:6d:4d:94:e8:93:b6:f8: 10:0a:88:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQTFI9ZB4VOzKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZGJkM2M1OGEtN2JkMS00OTU3LTljNTktNjQ1MzliYWE5M2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguzAhp0tZEcHKpIw8qkTLnTGCt0gf5PeLlFH TMyA0d+YRnCscOGvVx39OAbGbWR+rOY9mLYrxFzBiYnqGXIpf9hfMrd5DR0zg68O tAWUVyBp4+llKICDJpk+OpJqp/4+T/GYTvUB5dUhBPUMWHyBYB0TDqYgXQ1CUtIG bOlImDibH58hS1pTL/d4yEmog9eLh1H3ysfmENBGY+HDRy/Y9YETnj/nHsNCjiNg AWt6omfa9AwH+2mk6hrcPKZwqCuttu5IQrKfzHEpq4AOUoemCEgR9wcqMAkOFBl1 H9b98RBD8VbABYkU0/LG5m7ousIQv5PgxmKcEhJDqzrZW84q2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIT4Qr674NRzNkrO63m7HdJS1pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjdiYmQ1YzYtZDg3MS0z Mjg5LTgyZjQtNmFhMmQwNzJjZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYN4OleXNBPEvB92RE1WOdKN8MAzBQBsK8HJWb1zAfUUjv/m1AcV3dW ymLZGqhK95OgVRH3F3Sltb+JWyYT+btiEI/ZCQYqf14F/vIW2YsVND24EEA6hrXR P9x6U61FxOwPuSLAf5w5PPr1QCPQjuqwjlDKBUvoZStAhI+NJVqTFQHl9iHvT2Bf Z/lQhWeBRW5AVUOBFRGjQes9xuSbyJFGE8WZWf3rS0nTpqB6DmbejldmRYykvsVm XpLm0JZmwt2PBNBaEg01TsGWt2r8AOoE9aUnxCwEpPNpzx96w75yY+brtPmMPEBG zYL24MXq5/O2YJfxbU2U6JO2+BAKiFM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:58 2025 by rpki-client