$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa File: c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa (raw, json) Hash identifier: IgoUS3QZ6pmBdtRDUpeNtQUPnIY5QGYkAw82uJXLgWg= Subject key identifier: 9F:3E:D8:5F:72:B0:3B:2B:38:28:BF:3F:56:C2:AB:71:9E:57:2A:03 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA7C95AE6AAA5586ECC40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.20.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a7:c9:5a:e6:aa:a5:58:6e:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=59d45af1-252b-458e-8395-893fc165deba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:25:45:fd:fa:19:91:1a:08:0a:37:5e:cd: cd:d8:d3:36:f6:88:d3:7e:ea:b2:aa:d9:d1:1f:90: 0a:ff:03:2d:7b:07:eb:82:2d:79:c8:dd:aa:78:bd: dd:9c:f2:b4:53:bb:0a:5b:22:97:1c:3b:c8:3f:2a: 28:7e:2a:b3:9e:6b:90:eb:de:e3:22:c7:fe:88:2e: 5a:e9:be:1d:b0:3a:9a:40:22:cc:af:58:9c:86:8b: 23:90:fc:2b:d7:dc:fe:7b:e4:09:1c:15:91:58:4c: c6:9d:4c:51:be:42:e5:67:1b:80:92:8a:b9:9f:56: 91:39:d4:0c:15:8d:65:29:d8:74:2a:e5:ad:03:1f: 3d:1a:ed:f7:97:f6:fa:a6:ac:1a:d8:4a:75:2f:36: 50:2e:65:f5:e8:87:97:8b:94:b5:be:92:bb:58:78: c1:56:f8:ab:f4:a8:cc:26:fe:29:f2:8d:2a:86:52: 0d:e6:7c:af:fa:40:f6:f7:ae:70:26:a1:32:9c:01: 40:5d:c4:16:25:63:82:b3:25:2f:c6:7e:05:fb:2b: 76:5a:68:b0:63:8a:0d:61:1e:5f:db:86:de:71:5f: fb:a6:e3:79:3a:4e:19:d1:0e:0f:eb:ef:f6:b3:43: 38:49:7b:66:32:d7:76:1c:da:d8:6b:39:84:e9:2c: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3E:D8:5F:72:B0:3B:2B:38:28:BF:3F:56:C2:AB:71:9E:57:2A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ef:0f:45:f0:ab:1b:11:b0:81:0d:24:8d:dd:46:83:95:97: d5:37:53:aa:ce:6b:d6:8b:fa:e7:13:d0:e3:3a:39:b4:15:a7: 61:d0:6c:3e:9f:82:6e:58:ef:bb:8d:12:7d:d5:8c:75:1d:b7: 0b:2f:5e:06:04:a0:89:e1:95:06:78:dc:09:da:7f:fe:f9:03: e7:4b:3b:ef:80:39:56:5d:0b:c7:ed:02:e9:a6:99:6c:c5:90: da:9e:8c:63:b7:dd:ae:74:47:c9:7d:a2:cf:f3:9b:62:49:c6: 94:68:8e:69:ca:d1:ed:2a:ce:9d:ee:08:ce:c4:aa:8d:d7:8a: 6a:c4:4d:8f:67:4f:9c:5c:93:85:b3:28:5d:b5:c6:47:bd:e5: d5:9d:12:9e:6d:e7:76:70:33:d9:83:57:32:a9:35:06:b3:24: 19:c0:2f:40:ec:65:05:86:5e:0e:1d:8d:ce:40:08:b0:2d:aa: ed:47:15:d1:59:6a:a7:70:37:01:f9:b2:ab:f5:cf:3a:53:fe: 92:15:58:d9:6b:f8:d4:45:66:84:7d:73:33:e2:3e:d5:bc:49: 4c:ca:1b:4d:ab:c7:a2:5b:f8:7a:9a:6f:d0:5d:7a:14:ce:db: 3d:d1:63:95:8e:3f:6e:2e:b6:5a:e5:d8:02:ca:d5:bc:eb:6d: 56:ef:b1:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6fJWuaqpVhuzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NTlkNDVhZjEtMjUyYi00NThlLTgzOTUtODkzZmMxNjVkZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloUlRf36GZEaCAo3Xs3N2NM29ojTfuqyqtnR H5AK/wMtewfrgi15yN2qeL3dnPK0U7sKWyKXHDvIPyoofiqznmuQ697jIsf+iC5a 6b4dsDqaQCLMr1ichosjkPwr19z+e+QJHBWRWEzGnUxRvkLlZxuAkoq5n1aROdQM FY1lKdh0KuWtAx89Gu33l/b6pqwa2Ep1LzZQLmX16IeXi5S1vpK7WHjBVvir9KjM Jv4p8o0qhlIN5nyv+kD2965wJqEynAFAXcQWJWOCsyUvxn4F+yt2WmiwY4oNYR5f 24becV/7puN5Ok4Z0Q4P6+/2s0M4SXtmMtd2HNrYazmE6SwEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8+2F9ysDsrOCi/P1bCq3GeVyoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzI0Y2Y4OTctMzIyMS0z NTgzLWE2ZjgtOTdkNmEyYTZlYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPvD0XwqxsRsIENJI3dRoOVl9U3U6rOa9aL+ucT0OM6ObQVp2HQbD6f gm5Y77uNEn3VjHUdtwsvXgYEoInhlQZ43Anaf/75A+dLO++AOVZdC8ftAummmWzF kNqejGO33a50R8l9os/zm2JJxpRojmnK0e0qzp3uCM7Eqo3XimrETY9nT5xck4Wz KF21xke95dWdEp5t53ZwM9mDVzKpNQazJBnAL0DsZQWGXg4djc5ACLAtqu1HFdFZ aqdwNwH5sqv1zzpT/pIVWNlr+NRFZoR9czPiPtW8SUzKG02rx6Jb+Hqab9BdehTO 2z3RY5WOP24utlrl2ALK1bzrbVbvsek= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:09 2025 by rpki-client