$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa File: c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa (raw, json) Hash identifier: cyZf6fAvtlx+NA0ti1HwuEZgnTPZNEVSwWNUx3pUrEI= Subject key identifier: 30:F5:B8:5F:21:DD:8E:5E:23:73:A9:14:7B:CD:DC:57:ED:DC:D1:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9AECA21415CAFCAA3300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.18.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9a:ec:a2:14:15:ca:fc:aa:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=91877b3e-cbff-4354-80df-19c42a0456fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:59:83:cc:16:f7:3f:45:48:9e:83:d4:c6: b3:8d:d0:69:43:fe:80:12:07:ad:ec:b3:46:96:92: 54:1c:e3:32:d1:68:ad:00:1f:7a:6a:cb:03:be:ef: a0:dc:c5:e8:2e:83:be:b3:00:58:de:80:11:6a:be: 24:af:20:cc:05:16:aa:5e:5f:b2:13:1a:c2:9f:f7: 4c:3f:98:ce:1f:e5:75:18:a1:8d:5a:b0:53:32:e1: 28:02:a3:ce:bc:38:a3:43:66:07:bf:f7:90:5c:9b: de:16:d2:88:de:e6:fc:9c:12:9b:47:99:a1:f0:35: de:26:10:93:58:cd:ef:ba:f0:ac:ad:7d:56:bc:3f: b6:4c:e5:c7:73:2b:d0:51:4a:1b:bd:cd:e1:30:e9: 5b:95:da:d5:c5:f3:65:ed:fb:0c:e0:4e:80:60:90: d2:c5:fd:ce:c5:cf:30:cc:70:31:ad:5d:8c:25:84: 15:63:60:6a:29:84:25:61:37:83:4a:53:3b:39:fd: 20:72:7a:de:43:0d:5b:6e:09:ef:a1:89:21:56:b0: 1b:75:21:9a:c8:46:74:f8:da:00:60:e3:b8:54:9e: 6f:64:5e:10:51:75:27:30:9b:df:73:b5:89:ad:eb: 73:66:8e:e5:24:52:67:2f:49:27:58:5b:15:9d:fe: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F5:B8:5F:21:DD:8E:5E:23:73:A9:14:7B:CD:DC:57:ED:DC:D1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:54:fc:22:e7:ac:c0:d2:95:89:de:28:43:4f:58:7b:67:7e: 86:5e:e4:c1:c8:97:e3:26:84:c0:58:80:6b:b4:d5:15:cb:1a: f4:2e:df:9f:0e:59:c1:ea:d6:fb:51:81:ad:4d:55:78:2a:61: 3b:9c:9c:85:a2:11:9e:8e:f0:2b:df:72:c0:d5:1b:fc:83:74: 86:d1:18:b9:79:8f:6c:95:73:56:e8:0a:62:3a:7d:ac:3b:c6: e5:2c:b0:54:90:61:ee:fd:f2:49:4b:c1:8f:26:58:c9:23:69: 3e:5e:c1:bf:7d:e8:a5:80:c6:dd:0b:f9:e3:73:e6:7b:29:33: b5:80:d5:22:99:af:a7:2c:19:26:5e:57:58:37:87:4c:57:96: 7a:ac:8b:da:8e:88:23:a7:79:01:43:61:dd:5b:34:0d:2b:10: 91:85:17:87:7e:08:b9:0f:0a:a4:1d:9f:80:f7:77:0e:cc:51: 87:d5:e6:61:ec:d3:df:d3:8f:d9:4e:e4:c6:fb:1a:f2:5e:8a: 07:2d:3d:7e:1b:e8:47:b9:48:96:59:7b:20:69:a4:5e:64:fc: 02:4f:75:9e:dc:17:af:61:d6:1a:03:de:59:3a:2e:a8:09:67: d8:36:e3:f1:de:66:cf:62:fe:ef:ac:d7:f2:56:dc:4e:17:92: 49:42:36:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5rsohQVyvyqMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OTE4NzdiM2UtY2JmZi00MzU0LTgwZGYtMTljNDJhMDQ1NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIlZg8wW9z9FSJ6D1MazjdBpQ/6AEget7LNG lpJUHOMy0WitAB96assDvu+g3MXoLoO+swBY3oARar4kryDMBRaqXl+yExrCn/dM P5jOH+V1GKGNWrBTMuEoAqPOvDijQ2YHv/eQXJveFtKI3ub8nBKbR5mh8DXeJhCT WM3vuvCsrX1WvD+2TOXHcyvQUUobvc3hMOlbldrVxfNl7fsM4E6AYJDSxf3Oxc8w zHAxrV2MJYQVY2BqKYQlYTeDSlM7Of0gcnreQw1bbgnvoYkhVrAbdSGayEZ0+NoA YOO4VJ5vZF4QUXUnMJvfc7WJretzZo7lJFJnL0knWFsVnf7pqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD1uF8h3Y5eI3OpFHvN3Fft3NGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzk2NThkZTEtYWJlMi0z NDcyLThkOGUtYTgwZTc3YjUwYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1U/CLnrMDSlYneKENPWHtnfoZe5MHIl+MmhMBYgGu01RXLGvQu358O WcHq1vtRga1NVXgqYTucnIWiEZ6O8CvfcsDVG/yDdIbRGLl5j2yVc1boCmI6faw7 xuUssFSQYe798klLwY8mWMkjaT5ewb996KWAxt0L+eNz5nspM7WA1SKZr6csGSZe V1g3h0xXlnqsi9qOiCOneQFDYd1bNA0rEJGFF4d+CLkPCqQdn4D3dw7MUYfV5mHs 09/Tj9lO5Mb7GvJeigctPX4b6Ee5SJZZeyBppF5k/AJPdZ7cF69h1hoD3lk6LqgJ Z9g24/HeZs9i/u+s1/JW3E4XkklCNi0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:12 2025 by rpki-client