$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa File: cdff553a-7cbe-3262-a645-67dfb5f6f569.roa (raw, json) Hash identifier: AYcOOIrZWUEiaKn6+Apv7xD5Glkdq6Oi/ljsHet5/BA= Subject key identifier: 2A:FD:BE:4E:3C:1D:C3:AF:93:09:C1:AC:25:C3:D1:EA:4C:41:A0:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA476C9CF8D7D6CCD4580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.18.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a4:76:c9:cf:8d:7d:6c:cd:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=19f06c8c-9489-4895-ac0b-6b5bd3270832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:94:16:6a:12:be:03:67:bc:36:0c:49:9f: 3c:83:5a:db:cc:5c:63:e6:67:8e:2b:0a:12:e1:c7: 63:13:20:ca:8c:ca:b7:fa:03:08:e1:01:9f:3e:5b: 32:2c:7e:9e:8a:30:c7:50:47:72:9f:2a:5e:e2:5e: 96:66:6b:5a:ac:93:14:1d:f0:51:42:63:25:39:80: 61:a5:63:ef:cc:23:69:f5:31:97:a7:d3:75:7a:a1: f4:0b:fa:39:85:ef:af:cf:5c:e2:08:1a:ef:5c:11: 48:6c:e8:3f:5f:c0:22:2b:f9:a1:8c:50:dd:d3:54: 0e:91:fa:33:f1:a1:ef:99:6f:3a:c9:db:f3:89:7d: d7:e1:32:25:44:44:e0:97:07:fe:b9:09:45:b2:dd: 41:2f:c7:b4:6f:05:f4:b3:65:81:52:e0:a7:79:10: d8:f6:02:d4:9c:8a:80:11:03:4e:b2:e0:6a:70:f3: 1c:6e:b0:2b:c4:52:0f:51:6b:57:9d:db:e9:18:c1: 9b:c6:78:a0:ab:ea:c6:1f:1b:c1:6e:4c:2b:ff:48: 8a:f1:46:bf:f1:c5:26:75:eb:e1:82:5e:1d:a4:38: 1b:cd:49:51:34:0f:31:d6:8d:d7:7f:ef:15:08:65: 38:4b:51:4e:56:80:f2:07:9a:3e:41:87:8c:52:23: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:BE:4E:3C:1D:C3:AF:93:09:C1:AC:25:C3:D1:EA:4C:41:A0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:2c:72:22:27:5c:0e:52:6f:1d:c7:74:d3:16:57:02:7d:9b: 51:fd:51:ca:01:49:c2:b1:4d:23:5b:f5:1b:7c:70:02:e3:f3: 23:8d:2b:cc:9c:49:6b:ac:c1:40:87:c4:64:da:c1:f0:ea:fe: c4:c2:a8:81:4d:03:76:aa:13:94:8a:89:90:a7:65:3e:2b:30: 33:cd:30:65:5e:72:1e:f6:52:d5:6c:97:ee:66:32:d5:d1:96: 63:19:78:17:c7:f9:c3:3d:e6:30:9c:69:2f:9e:be:34:94:77: a3:56:6f:54:b8:8a:33:53:20:ce:fb:37:ee:a5:bc:22:ac:19: 4b:f3:19:ca:b4:09:c5:40:27:26:be:d6:ad:9f:f6:96:15:7f: 89:64:0d:9d:99:d5:86:7b:5d:10:ac:66:b1:ed:34:9e:cc:3d: 36:4e:5d:ae:bf:4f:d1:39:34:17:8f:0a:84:92:30:05:b4:d4: c4:bb:47:65:cd:da:0b:a8:40:25:86:60:a5:f4:a1:e5:13:63: 0c:7d:96:e7:ab:b4:4c:6a:e4:26:79:4e:66:76:d9:82:76:0d: 92:79:47:b2:73:7e:ad:2d:37:2a:4a:21:94:a3:b2:a4:de:a9: 49:41:4e:cd:5d:65:f2:ee:d7:67:58:1d:e5:9e:e2:2c:32:04: 7a:25:16:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6R2yc+NfWzNRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTlmMDZjOGMtOTQ4OS00ODk1LWFjMGItNmI1YmQzMjcwODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOmUFmoSvgNnvDYMSZ88g1rbzFxj5meOKwoS 4cdjEyDKjMq3+gMI4QGfPlsyLH6eijDHUEdynype4l6WZmtarJMUHfBRQmMlOYBh pWPvzCNp9TGXp9N1eqH0C/o5he+vz1ziCBrvXBFIbOg/X8AiK/mhjFDd01QOkfoz 8aHvmW86ydvziX3X4TIlRETglwf+uQlFst1BL8e0bwX0s2WBUuCneRDY9gLUnIqA EQNOsuBqcPMcbrArxFIPUWtXndvpGMGbxnigq+rGHxvBbkwr/0iK8Ua/8cUmdevh gl4dpDgbzUlRNA8x1o3Xf+8VCGU4S1FOVoDyB5o+QYeMUiO7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr9vk48HcOvkwnBrCXD0epMQaDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2RmZjU1M2EtN2NiZS0z MjYyLWE2NDUtNjdkZmI1ZjZmNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwsciInXA5Sbx3HdNMWVwJ9m1H9UcoBScKxTSNb9Rt8cALj8yONK8yc SWuswUCHxGTawfDq/sTCqIFNA3aqE5SKiZCnZT4rMDPNMGVech72UtVsl+5mMtXR lmMZeBfH+cM95jCcaS+evjSUd6NWb1S4ijNTIM77N+6lvCKsGUvzGcq0CcVAJya+ 1q2f9pYVf4lkDZ2Z1YZ7XRCsZrHtNJ7MPTZOXa6/T9E5NBePCoSSMAW01MS7R2XN 2guoQCWGYKX0oeUTYwx9luertExq5CZ5TmZ22YJ2DZJ5R7Jzfq0tNypKIZSjsqTe qUlBTs1dZfLu12dYHeWe4iwyBHolFpg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:10:42 2025 by rpki-client