$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa File: da9a4408-8b68-391a-8e54-a150697293fa.roa (raw, json) Hash identifier: v7U02iX4yYIKISSVkV2iZZAQidNpYrnRJILxwf2iI70= Subject key identifier: 0E:E5:50:09:E1:C1:A1:9D:A3:51:58:29:A8:51:59:C7:8E:F0:A6:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71106C4E0D2B09AE24DD500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.31.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:06:c4:e0:d2:b0:9a:e2:4d:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=44423c94-3009-436d-96c5-6d051def3be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:42:65:88:dc:e7:73:a9:8d:d7:e6:1b:85: 55:2d:99:fa:31:54:9f:33:74:05:97:1d:8f:62:96: 02:df:f2:53:a0:1e:ee:e9:50:89:2c:df:08:5c:e1: d0:a4:44:08:17:85:51:71:1a:08:ac:4e:a4:93:17: 21:01:18:5e:af:ec:47:a8:22:f4:a1:29:65:03:12: 88:a7:a3:7d:21:49:60:66:94:ad:72:0f:f8:97:89: 52:26:76:71:5c:ce:f6:8b:2d:e1:d0:62:e5:39:84: 21:bf:10:a9:1b:cd:6c:91:44:85:97:3b:94:19:b8: d2:3b:56:2a:5b:12:e5:ec:fa:cd:4d:b9:95:1c:ab: 38:fa:53:a2:33:da:32:bb:60:ba:bf:3e:8f:b2:ad: 90:48:dc:14:d3:5f:f4:3c:c4:d8:a4:50:0d:18:eb: 6f:6e:ba:a1:60:47:5c:05:e5:8a:6c:66:72:98:c9: 2b:84:32:19:67:05:bb:6c:ca:67:f3:00:a5:72:47: d1:4f:f9:e0:2d:0f:6e:1a:4f:d0:97:24:4b:38:09: 66:cf:2f:3e:80:e4:a1:ad:7e:a7:13:30:8d:ef:10: d8:45:92:4c:80:d9:ee:d2:ea:e8:db:b4:d3:06:2a: 30:ba:bc:b3:fa:e5:06:5e:ad:71:a8:e0:7b:46:84: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E5:50:09:E1:C1:A1:9D:A3:51:58:29:A8:51:59:C7:8E:F0:A6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5d:2a:50:0c:c6:ff:6e:ed:cb:a0:e4:f7:ea:af:77:17:6a: 53:ac:e4:d6:18:29:90:38:b5:eb:0e:97:54:7a:d9:68:16:25: c5:b2:b7:5c:d5:da:ad:9d:5b:e5:39:51:1f:78:58:36:7c:32: 8e:c4:da:f6:fc:00:a3:18:58:76:89:a5:52:61:e1:33:5e:f5: fb:98:57:cb:dc:a0:71:0d:4e:35:9c:b2:1f:64:72:71:7f:b9: 94:89:23:8a:d0:23:7e:b4:cf:db:d8:04:71:84:55:4c:82:2b: 33:c8:30:a7:7b:cb:7d:40:53:7f:ee:f5:b8:80:63:2f:be:a7: 99:c8:82:7f:86:87:93:b7:c3:30:6b:e4:23:d3:e8:a9:cf:8a: df:58:09:a3:9c:e5:0e:a8:31:3e:7b:11:5e:86:37:23:4b:8b: 63:2d:c2:59:af:bf:63:92:6f:9a:8d:6a:2c:83:dd:58:3f:81: 71:2d:b5:84:55:38:21:c1:7a:56:6a:fd:1a:b6:d0:16:2f:ff: d4:42:47:3d:d9:62:0c:7c:99:43:67:1a:e2:d1:32:04:96:fe: ca:d8:b2:e7:60:28:b9:92:e1:36:f6:34:8f:a4:80:84:40:50: 01:2d:ff:54:74:00:27:73:c6:38:d5:a7:03:39:8a:a2:50:fb: b4:89:bb:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQbE4NKwmuJN1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NDQ0MjNjOTQtMzAwOS00MzZkLTk2YzUtNmQwNTFkZWYzYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF1CZYjc53OpjdfmG4VVLZn6MVSfM3QFlx2P YpYC3/JToB7u6VCJLN8IXOHQpEQIF4VRcRoIrE6kkxchARher+xHqCL0oSllAxKI p6N9IUlgZpStcg/4l4lSJnZxXM72iy3h0GLlOYQhvxCpG81skUSFlzuUGbjSO1Yq WxLl7PrNTbmVHKs4+lOiM9oyu2C6vz6Psq2QSNwU01/0PMTYpFANGOtvbrqhYEdc BeWKbGZymMkrhDIZZwW7bMpn8wClckfRT/ngLQ9uGk/QlyRLOAlmzy8+gOShrX6n EzCN7xDYRZJMgNnu0uro27TTBiowuryz+uUGXq1xqOB7RoToeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7lUAnhwaGdo1FYKahRWceO8KYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE5YTQ0MDgtOGI2OC0z OTFhLThlNTQtYTE1MDY5NzI5M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBdKlAMxv9u7cug5Pfqr3cXalOs5NYYKZA4tesOl1R62WgWJcWyt1zV 2q2dW+U5UR94WDZ8Mo7E2vb8AKMYWHaJpVJh4TNe9fuYV8vcoHENTjWcsh9kcnF/ uZSJI4rQI360z9vYBHGEVUyCKzPIMKd7y31AU3/u9biAYy++p5nIgn+Gh5O3wzBr 5CPT6KnPit9YCaOc5Q6oMT57EV6GNyNLi2Mtwlmvv2OSb5qNaiyD3Vg/gXEttYRV OCHBelZq/Rq20BYv/9RCRz3ZYgx8mUNnGuLRMgSW/srYsudgKLmS4Tb2NI+kgIRA UAEt/1R0ACdzxjjVpwM5iqJQ+7SJuzo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:30 2025 by rpki-client