$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5350e94-931b-3aff-806e-50b9bf8483f6.roa File: d5350e94-931b-3aff-806e-50b9bf8483f6.roa (raw, json) Hash identifier: gfQrf2oeugcPAl6Q4AA4AMcmMNLdwunNR2Ob+jBD2u0= Subject key identifier: 63:BC:1B:4D:D7:1D:44:6C:9A:54:6C:43:B1:75:D6:38:81:25:F9:0D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9D314010FD291BD96E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5350e94-931b-3aff-806e-50b9bf8483f6.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.22.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9d:31:40:10:fd:29:1b:d9:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=5d2dfe88-b663-4ea4-bb3c-823b01d80ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:54:79:35:52:88:19:e7:c4:25:a6:e5:af: 67:34:4b:66:98:28:12:74:5b:a9:ad:77:9c:f1:76: 75:13:a0:9a:17:70:22:f2:a9:30:dc:d6:52:9b:0e: 24:4c:a1:c9:02:de:dd:2e:0c:18:ae:6e:68:1d:57: fb:5f:ff:c4:01:f7:be:7e:f3:a8:52:de:25:05:32: 51:87:d1:27:2b:30:a2:d5:37:e6:70:eb:35:f9:96: 8d:98:20:7e:12:19:b0:21:29:6e:e7:ad:59:7c:89: fc:2c:7d:df:03:6d:40:f7:db:5d:10:65:e2:8f:4f: 88:bb:98:17:5c:1f:19:23:06:ed:9a:e6:97:43:d3: d5:4a:f8:ec:d1:87:bf:8a:8c:7f:2d:ae:29:17:68: e7:89:62:cc:f6:15:cf:cf:5e:23:0e:91:5b:ca:e3: b9:a3:07:0a:b1:c5:42:06:5d:a9:1e:a0:6e:6a:6b: 8d:75:bb:2f:66:29:d3:b1:14:af:ee:a3:30:0d:89: 43:25:1e:8a:5d:cf:bd:90:05:59:06:fc:0e:7f:45: c0:95:36:60:e5:fd:8b:9c:69:d2:8b:93:31:14:f7: 80:80:29:31:6f:70:c7:09:4a:9c:e3:4c:ab:ec:de: be:97:26:45:08:cd:2e:e1:fc:6a:56:17:7e:a9:cc: a8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:1B:4D:D7:1D:44:6C:9A:54:6C:43:B1:75:D6:38:81:25:F9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5350e94-931b-3aff-806e-50b9bf8483f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a8:aa:72:d5:05:6b:8a:99:94:be:fe:41:93:f3:1c:32:49: 41:de:15:97:18:58:33:0d:c5:09:37:02:90:04:66:de:f4:66: 40:15:84:74:61:00:8c:25:a2:f3:88:56:f6:5b:b4:86:4b:74: 33:32:e1:70:72:5f:69:d3:53:29:72:0e:a2:9b:01:40:83:f0: 9b:b3:a7:85:ac:ef:b6:c2:24:58:24:92:9a:df:84:50:a9:a7: f5:4c:a6:36:f4:7d:29:83:10:2e:c7:3c:a7:7b:14:71:58:e7: 14:91:f4:ff:63:00:dc:5e:99:37:5d:4e:d1:f6:50:b7:25:88: 1c:57:2e:4d:87:02:18:44:1d:1e:fd:08:3b:dd:a3:58:c4:f0: fe:b2:92:52:9b:c9:b1:30:96:b5:63:93:50:76:0a:d4:32:78: 88:62:b1:09:b9:00:46:57:f4:cf:ef:f9:2b:9e:89:5a:d6:54: a4:8b:fb:de:9d:c7:3e:47:98:2a:ca:f3:9a:f8:f1:85:2e:af: f8:ff:bb:06:80:0e:d8:7f:ee:7a:43:17:76:61:1c:96:5c:47: fd:8d:8b:6d:f7:8f:e4:53:5e:22:26:e1:19:bb:e8:c3:c0:31: 52:fd:36:69:b5:72:35:c4:4c:8b:7a:d5:0a:b5:83:b9:3b:7d: f1:8e:57:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq50xQBD9KRvZbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NWQyZGZlODgtYjY2My00ZWE0LWJiM2MtODIzYjAxZDgwY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMJUeTVSiBnnxCWm5a9nNEtmmCgSdFuprXec 8XZ1E6CaF3Ai8qkw3NZSmw4kTKHJAt7dLgwYrm5oHVf7X//EAfe+fvOoUt4lBTJR h9EnKzCi1TfmcOs1+ZaNmCB+EhmwISlu561ZfIn8LH3fA21A99tdEGXij0+Iu5gX XB8ZIwbtmuaXQ9PVSvjs0Ye/iox/La4pF2jniWLM9hXPz14jDpFbyuO5owcKscVC Bl2pHqBuamuNdbsvZinTsRSv7qMwDYlDJR6KXc+9kAVZBvwOf0XAlTZg5f2LnGnS i5MxFPeAgCkxb3DHCUqc40yr7N6+lyZFCM0u4fxqVhd+qcyoUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO8G03XHURsmlRsQ7F11jiBJfkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDUzNTBlOTQtOTMxYi0z YWZmLTgwNmUtNTBiOWJmODQ4M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmoqnLVBWuKmZS+/kGT8xwySUHeFZcYWDMNxQk3ApAEZt70ZkAVhHRh AIwlovOIVvZbtIZLdDMy4XByX2nTUylyDqKbAUCD8Juzp4Ws77bCJFgkkprfhFCp p/VMpjb0fSmDEC7HPKd7FHFY5xSR9P9jANxemTddTtH2ULcliBxXLk2HAhhEHR79 CDvdo1jE8P6yklKbybEwlrVjk1B2CtQyeIhisQm5AEZX9M/v+SueiVrWVKSL+96d xz5HmCrK85r48YUur/j/uwaADth/7npDF3ZhHJZcR/2Ni233j+RTXiIm4Rm76MPA MVL9Nmm1cjXETIt61Qq1g7k7ffGOVwU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:30 2025 by rpki-client