$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc92c051-6c0e-36c2-89f6-32a5d4e79352.roa File: dc92c051-6c0e-36c2-89f6-32a5d4e79352.roa (raw, json) Hash identifier: +mLDVo27JaNX9r+5AgVwp9Y3PxiN/ZzuLL6IMBmUm0s= Subject key identifier: AF:25:C8:9C:73:6D:AC:B8:83:46:BC:23:40:66:8C:43:0D:93:98:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71115BA4F38E6962C984280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc92c051-6c0e-36c2-89f6-32a5d4e79352.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.30.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:15:ba:4f:38:e6:96:2c:98:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=7cdadfea-c212-43de-924f-0d54c1b94c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:38:c5:7e:3c:f7:98:94:90:6a:2a:b8:b2: 85:ff:5d:ba:49:cb:3b:13:a8:59:79:27:4a:2f:d1: 6f:71:6e:2e:6f:41:eb:7d:66:45:ff:9b:00:86:0a: a8:58:96:b3:92:db:40:93:46:b7:fa:8e:9f:87:1f: 26:9d:02:43:10:51:88:e9:15:86:b6:c3:83:df:66: 98:c7:a3:e4:c8:a1:45:b3:5a:0d:4d:b5:4e:4b:cb: 21:64:2e:ba:a8:58:83:ec:d1:e8:2d:48:a1:dd:a0: 98:26:28:78:5e:25:f7:f0:e3:83:a8:9c:a6:90:cf: af:73:ce:26:6c:ea:58:a3:ca:93:32:d1:f9:85:27: f5:13:bf:a7:42:4d:36:b9:1b:d3:6c:cc:96:3c:f2: 96:3d:4a:ca:f5:44:04:af:da:bf:3a:c2:1b:15:ea: 26:df:b1:15:ad:9e:28:79:4e:e1:5d:36:48:c7:5f: 95:2b:58:e6:50:60:27:56:e1:f0:2c:36:1a:3b:09: b8:dd:cc:41:65:0c:19:b9:9b:80:2b:20:10:fc:d5: ac:f6:35:8a:9f:aa:3e:26:1b:83:31:a7:62:68:9e: e5:41:5b:0e:fe:d4:c8:f0:69:b8:ce:27:bf:36:d6: 81:2c:77:ea:de:f9:8e:fb:58:76:72:3a:e0:77:c2: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:25:C8:9C:73:6D:AC:B8:83:46:BC:23:40:66:8C:43:0D:93:98:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc92c051-6c0e-36c2-89f6-32a5d4e79352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.30.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:26:64:57:fc:5b:1c:71:fc:6f:12:0b:12:3b:f1:7a:26:72: 7c:a5:6a:ec:ae:e2:c2:85:61:76:2b:8e:94:60:8c:48:a6:8c: 52:98:cf:f9:23:4c:89:a0:96:7e:33:c4:eb:94:fa:70:e0:f9: 4c:8f:67:48:f4:96:bd:7b:18:c7:c5:46:a6:7a:ba:dc:00:c6: e5:17:bd:b9:53:8f:fc:34:98:d9:39:75:54:b5:11:26:6a:92: 86:ef:20:c9:4f:6d:8f:1a:b2:1a:31:ee:b5:8d:10:8e:cb:78: cf:52:ac:bc:11:b8:8a:f8:d1:57:4a:5f:cb:97:b6:cb:4c:d5: 35:55:65:40:96:4b:b1:26:71:e1:29:55:ae:2c:51:6a:9e:ae: 0d:bc:f5:70:56:92:f9:5d:21:d4:d2:15:18:8e:3a:24:24:49: 55:aa:76:90:4b:fc:60:ed:fe:3b:01:a0:50:63:f1:2e:6a:13: ba:a0:2d:61:7f:f2:c8:7c:73:e5:c9:40:86:97:27:13:f0:4c: c4:9d:65:e3:45:63:cb:49:d9:5f:0e:66:c9:93:87:de:f1:a2: 5d:5e:03:79:42:93:8a:b3:da:4e:8a:86:60:3c:61:be:40:d6: c4:aa:fc:19:8a:36:e6:73:d0:4a:76:5e:f1:8a:10:ff:8f:cc: 27:cc:e4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERW6TzjmliyYQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk N2NkYWRmZWEtYzIxMi00M2RlLTkyNGYtMGQ1NGMxYjk0YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7Q4xX4895iUkGoquLKF/126Scs7E6hZeSdK L9FvcW4ub0HrfWZF/5sAhgqoWJazkttAk0a3+o6fhx8mnQJDEFGI6RWGtsOD32aY x6PkyKFFs1oNTbVOS8shZC66qFiD7NHoLUih3aCYJih4XiX38OODqJymkM+vc84m bOpYo8qTMtH5hSf1E7+nQk02uRvTbMyWPPKWPUrK9UQEr9q/OsIbFeom37EVrZ4o eU7hXTZIx1+VK1jmUGAnVuHwLDYaOwm43cxBZQwZuZuAKyAQ/NWs9jWKn6o+JhuD MadiaJ7lQVsO/tTI8Gm4zie/NtaBLHfq3vmO+1h2cjrgd8JVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8lyJxzbay4g0a8I0BmjEMNk5g0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGM5MmMwNTEtNmMwZS0z NmMyLTg5ZjYtMzJhNWQ0ZTc5MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQmZFf8Wxxx/G8SCxI78Xomcnylauyu4sKFYXYrjpRgjEimjFKYz/kj TImgln4zxOuU+nDg+UyPZ0j0lr17GMfFRqZ6utwAxuUXvblTj/w0mNk5dVS1ESZq kobvIMlPbY8ashox7rWNEI7LeM9SrLwRuIr40VdKX8uXtstM1TVVZUCWS7EmceEp Va4sUWqerg289XBWkvldIdTSFRiOOiQkSVWqdpBL/GDt/jsBoFBj8S5qE7qgLWF/ 8sh8c+XJQIaXJxPwTMSdZeNFY8tJ2V8OZsmTh97xol1eA3lCk4qz2k6KhmA8Yb5A 1sSq/BmKNuZz0Ep2XvGKEP+PzCfM5Fo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:15 2025 by rpki-client