$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de540c15-ffec-35e2-bc0c-2341a2da11c9.roa File: de540c15-ffec-35e2-bc0c-2341a2da11c9.roa (raw, json) Hash identifier: fEvYHN1WUMtinTTH+FY8wCLaOVR4ONCCaq84qwAgHGo= Subject key identifier: F6:53:17:1E:AC:37:2D:42:39:BA:C7:A3:DD:33:F6:27:D0:D2:15:CC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9BC57947FB857B30D000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de540c15-ffec-35e2-bc0c-2341a2da11c9.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.19.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9b:c5:79:47:fb:85:7b:30:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=7bfba95d-ed43-4ba0-8272-89ca15981ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:95:f0:4c:3a:37:94:a8:cb:43:4c:28:a6: 1a:f6:1b:41:2c:28:c2:9d:42:8b:85:15:9c:39:07: 72:5e:72:f6:0b:87:e3:8b:5e:02:79:bc:01:f4:90: 40:b0:c8:32:25:2b:4a:d4:17:53:c2:2a:38:0a:ca: 8a:c4:44:35:ec:95:01:da:04:69:d6:96:b3:6f:da: d3:a2:50:b8:aa:9e:2d:c9:da:53:ab:74:e1:e6:c0: e7:1f:4d:87:ff:d0:eb:d7:ee:86:8c:48:4c:f6:74: 62:1c:78:e7:ad:55:ed:cc:a0:4f:4f:ca:29:0f:61: 27:12:f2:d8:17:54:47:10:1e:0c:bc:ea:af:26:af: f4:7e:f7:a3:d7:e6:80:7b:5e:cb:ea:0f:2c:c4:a4: 5a:20:1c:67:81:85:00:e8:ea:58:45:23:54:40:fa: 3c:eb:eb:e4:f9:0c:0f:aa:9b:38:d8:21:a2:40:bd: 7f:2e:10:bc:99:a8:65:83:95:2b:84:f0:ad:86:9d: c5:d0:a0:ae:91:2a:e6:65:69:4e:60:00:0e:8f:c3: b8:ca:39:b9:f7:72:5d:b5:f4:bc:62:3a:b3:50:d4: de:2f:dd:7c:41:e3:84:0d:b6:6e:f6:7c:57:ed:63: d0:eb:51:cf:e6:6c:34:c2:ab:b8:45:3a:d5:3c:fe: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:53:17:1E:AC:37:2D:42:39:BA:C7:A3:DD:33:F6:27:D0:D2:15:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de540c15-ffec-35e2-bc0c-2341a2da11c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:97:1e:1e:c7:a9:6e:69:5c:fb:6d:bd:53:1f:a3:e6:2c:ab: 5a:76:c8:2f:af:76:56:52:f3:81:47:30:9c:fb:47:e9:3c:0a: 92:2b:ef:e2:9a:57:f0:14:33:5a:21:34:b5:d0:2b:77:b2:51: 07:cc:d8:ad:36:4b:7a:08:58:16:d4:84:e8:85:35:24:c3:0c: e0:07:61:f2:8a:0f:eb:ab:8c:19:62:7f:7c:b6:2b:8a:8f:89: 70:29:ce:7a:ab:e9:9a:ce:19:45:3d:03:f4:f5:46:bc:f0:1c: 66:e4:12:1d:1d:44:5c:12:a8:aa:1d:12:ec:da:9d:57:c5:84: d8:3e:d4:54:2d:50:79:bc:34:1d:1b:e3:c0:83:66:dd:34:1c: a8:d1:9e:9d:16:b5:d2:f7:4c:77:53:d5:61:ab:62:08:60:89: 3d:ed:29:68:e9:bf:7d:85:f1:fb:bc:2d:a9:85:69:9f:75:76: 13:da:42:b4:8d:7e:fb:06:72:fd:2c:0b:1f:56:2f:4b:03:48: fe:fc:c7:0d:2c:4a:1d:87:28:7c:de:17:10:b0:5c:34:14:1c: 74:87:0a:5b:34:a5:d3:a8:ca:1a:2c:3c:f8:e1:ad:01:9a:1d: 4b:2d:3a:c6:34:84:9a:a3:b2:42:b4:2c:69:7e:a2:4d:a4:42: 5b:5e:55:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5vFeUf7hXsw0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk N2JmYmE5NWQtZWQ0My00YmEwLTgyNzItODljYTE1OTgxYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY+V8Ew6N5Soy0NMKKYa9htBLCjCnUKLhRWc OQdyXnL2C4fji14CebwB9JBAsMgyJStK1BdTwio4CsqKxEQ17JUB2gRp1pazb9rT olC4qp4tydpTq3Th5sDnH02H/9Dr1+6GjEhM9nRiHHjnrVXtzKBPT8opD2EnEvLY F1RHEB4MvOqvJq/0fvej1+aAe17L6g8sxKRaIBxngYUA6OpYRSNUQPo86+vk+QwP qps42CGiQL1/LhC8mahlg5UrhPCthp3F0KCukSrmZWlOYAAOj8O4yjm593JdtfS8 YjqzUNTeL918QeOEDbZu9nxX7WPQ61HP5mw0wqu4RTrVPP6WIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZTFx6sNy1CObrHo90z9ifQ0hXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU1NDBjMTUtZmZlYy0z NWUyLWJjMGMtMjM0MWEyZGExMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWXHh7HqW5pXPttvVMfo+Ysq1p2yC+vdlZS84FHMJz7R+k8CpIr7+Ka V/AUM1ohNLXQK3eyUQfM2K02S3oIWBbUhOiFNSTDDOAHYfKKD+urjBlif3y2K4qP iXApznqr6ZrOGUU9A/T1RrzwHGbkEh0dRFwSqKodEuzanVfFhNg+1FQtUHm8NB0b 48CDZt00HKjRnp0WtdL3THdT1WGrYghgiT3tKWjpv32F8fu8LamFaZ91dhPaQrSN fvsGcv0sCx9WL0sDSP78xw0sSh2HKHzeFxCwXDQUHHSHCls0pdOoyhosPPjhrQGa HUstOsY0hJqjskK0LGl+ok2kQlteVR8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:41 2025 by rpki-client