$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cf38da14-dd39-3d25-97cc-d4e24f613034.roa File: cf38da14-dd39-3d25-97cc-d4e24f613034.roa (raw, json) Hash identifier: w/MPkoyZX79/YZKby39jX4BAK3eV2zDWdO18DFFhLDA= Subject key identifier: 66:34:BF:14:86:D4:BC:B9:75:5F:BD:52:C2:6F:93:53:7F:FB:FD:CE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA5525CE2649CB195C780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cf38da14-dd39-3d25-97cc-d4e24f613034.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.18.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a5:52:5c:e2:64:9c:b1:95:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=b37220aa-575c-4016-8379-ddedec144e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:06:5b:27:70:ff:a2:a6:f9:18:77:ff:54:88: 86:f9:f9:ab:92:5c:50:76:ff:df:0f:9f:0d:11:8b: d7:93:7e:25:14:6d:09:61:6b:ad:5a:bc:5b:e9:de: 3d:ac:0f:7c:6b:bc:6c:a7:23:e4:47:b9:fa:d0:ee: 94:85:a3:6c:98:96:16:49:ba:7d:a9:8f:fe:83:51: fe:f3:24:4d:95:1b:db:18:c1:0b:1f:94:e9:0d:36: a8:bb:7f:09:cd:e2:7c:54:c1:2f:23:2d:d8:63:9b: 88:41:56:a1:cb:3e:b6:70:28:d6:26:2d:a8:75:0d: e4:74:03:f3:44:0f:5e:43:cb:fd:0f:d8:e9:2d:f2: ec:fe:69:4c:cf:ce:39:a6:5c:43:14:d2:60:c7:33: 19:04:80:35:02:ee:b7:ae:24:7c:99:3e:ec:36:25: 62:e6:6c:1e:bb:8e:42:a1:db:9f:b0:03:7c:32:95: 88:d4:ee:6c:57:65:63:19:5b:79:7c:c1:ff:75:0b: c8:09:00:99:bb:71:be:fb:71:d2:4a:94:e1:e4:4c: ab:cc:43:04:2e:17:7e:a4:8a:b6:1a:5b:d0:34:1e: 97:4b:52:b8:a6:1d:35:51:b0:15:ca:6e:11:76:5c: b4:41:d6:d4:07:71:3c:97:4a:f1:36:45:49:21:e8: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:34:BF:14:86:D4:BC:B9:75:5F:BD:52:C2:6F:93:53:7F:FB:FD:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cf38da14-dd39-3d25-97cc-d4e24f613034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:84:9e:a7:c0:31:1d:03:46:dd:d1:c1:49:a6:cc:61:a7:d9: 26:21:98:49:62:a5:ed:91:cb:e5:54:58:e2:37:6f:c0:2b:1e: 23:46:63:4d:17:ea:51:e3:54:f4:35:2b:85:8f:7f:c5:dc:c2: 2e:ad:01:2a:7d:50:8c:72:0e:0b:e0:64:42:62:27:f1:24:9b: 64:34:32:57:7c:1f:da:4b:b8:48:85:ea:af:6a:94:15:d4:dc: fd:13:6a:d1:28:64:09:68:ba:98:28:32:8b:fb:4d:b7:e9:4b: 90:e2:f7:4f:72:6f:f8:ef:e3:44:a7:05:cc:c4:2e:79:ca:f1: 2c:60:65:4e:cd:8b:83:ea:1f:0b:a8:85:e9:5d:69:0c:98:76: cf:43:61:1a:1b:28:8c:e4:81:58:ed:83:39:d1:cd:ff:95:13: cf:ef:a3:4d:94:bb:dd:ec:e8:95:6f:a7:ee:96:66:c6:c6:53: 74:bb:be:3c:35:dc:dd:87:65:f4:d0:bd:67:64:bc:93:32:d4: 32:f2:a7:77:1f:53:cb:09:e5:f0:91:e8:09:ea:48:42:16:92: 9c:c5:5a:4d:f3:48:6a:9c:c5:a9:6a:b8:06:62:07:07:7c:ef: ac:6c:15:11:8a:b7:cb:c6:29:0a:0b:f9:f1:6d:1d:5c:19:09: af:e9:97:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6VSXOJknLGVx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YjM3MjIwYWEtNTc1Yy00MDE2LTgzNzktZGRlZGVjMTQ0ZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AZbJ3D/oqb5GHf/VIiG+fmrklxQdv/fD58N EYvXk34lFG0JYWutWrxb6d49rA98a7xspyPkR7n60O6UhaNsmJYWSbp9qY/+g1H+ 8yRNlRvbGMELH5TpDTaou38JzeJ8VMEvIy3YY5uIQVahyz62cCjWJi2odQ3kdAPz RA9eQ8v9D9jpLfLs/mlMz845plxDFNJgxzMZBIA1Au63riR8mT7sNiVi5mweu45C odufsAN8MpWI1O5sV2VjGVt5fMH/dQvICQCZu3G++3HSSpTh5EyrzEMELhd+pIq2 GlvQNB6XS1K4ph01UbAVym4Rdly0QdbUB3E8l0rxNkVJIejsVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY0vxSG1Ly5dV+9UsJvk1N/+/3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2YzOGRhMTQtZGQzOS0z ZDI1LTk3Y2MtZDRlMjRmNjEzMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSEnqfAMR0DRt3RwUmmzGGn2SYhmElipe2Ry+VUWOI3b8ArHiNGY00X 6lHjVPQ1K4WPf8Xcwi6tASp9UIxyDgvgZEJiJ/Ekm2Q0Mld8H9pLuEiF6q9qlBXU 3P0TatEoZAloupgoMov7TbfpS5Di909yb/jv40SnBczELnnK8SxgZU7Ni4PqHwuo heldaQyYds9DYRobKIzkgVjtgznRzf+VE8/vo02Uu93s6JVvp+6WZsbGU3S7vjw1 3N2HZfTQvWdkvJMy1DLyp3cfU8sJ5fCR6AnqSEIWkpzFWk3zSGqcxalquAZiBwd8 76xsFRGKt8vGKQoL+fFtHVwZCa/pl5c= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:47 2025 by rpki-client