$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e17f76b6-f017-390f-a321-ac4727d60e22.roa File: e17f76b6-f017-390f-a321-ac4727d60e22.roa (raw, json) Hash identifier: 3pd7+DJxCp2WPfAirqPdCGfId3DNCPafKuKRcToMPmU= Subject key identifier: 56:F3:08:F8:8F:BC:8F:45:11:31:6D:15:3C:28:E6:B7:73:66:51:57 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA7B662049E899FA8BD40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e17f76b6-f017-390f-a321-ac4727d60e22.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.19.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a7:b6:62:04:9e:89:9f:a8:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=b8e3473f-d215-49f2-9e01-b0cd48a369b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:5f:c8:ea:7b:35:1b:51:73:81:5e:8a:a7: 74:93:3b:54:54:82:2d:d3:ab:22:9f:20:a0:11:74: 3d:24:e4:53:b2:54:80:48:d8:9b:05:82:47:db:97: 29:2e:5c:74:c0:24:19:9b:a0:82:7f:df:ed:d7:0c: 08:36:c4:e1:60:5d:d8:8c:58:4e:18:18:1b:70:1b: 6a:18:54:03:3e:ce:db:e4:5d:60:8a:27:ad:c5:fc: 7b:6f:bd:ab:e4:10:4a:cf:9d:f8:8b:76:bf:e4:a9: f9:c0:e3:2f:2f:a0:00:79:c4:b2:ac:12:ed:c7:b8: 7e:60:2c:3f:d6:39:53:a5:41:ee:2a:1e:d9:ae:3a: bd:f3:d6:95:4b:ad:b4:92:8f:f8:b4:e1:ea:58:58: a4:23:57:33:3b:1e:27:0e:f5:f8:0d:89:7d:b2:e8: 91:a6:04:77:f4:a6:cf:43:cf:9e:91:62:c6:0f:22: 3f:00:e4:81:8c:6d:20:91:03:c2:1f:e9:88:8a:60: f2:b1:00:5e:63:8d:6d:12:56:82:ed:3f:95:66:00: 46:83:49:7b:a5:6f:86:6e:82:6b:87:0b:c4:0d:f6: 16:a9:17:76:be:ee:66:4c:b4:3c:de:6f:c1:9b:ac: 87:01:d9:0a:79:25:64:61:64:a5:7b:57:2b:eb:7b: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F3:08:F8:8F:BC:8F:45:11:31:6D:15:3C:28:E6:B7:73:66:51:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e17f76b6-f017-390f-a321-ac4727d60e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a4:8c:85:6c:6d:63:17:96:c2:99:1d:de:cb:86:0e:b2:1d: 6a:d6:49:76:a3:0c:8d:b5:ea:b6:6d:49:b2:8b:fa:5b:69:5f: 87:ed:73:29:11:32:7b:11:1d:72:b3:12:cc:17:bc:92:20:83: a9:55:a3:cd:d2:16:4c:6b:e8:b5:5b:4f:57:70:16:2e:55:36: 2e:9f:5d:c1:e4:18:13:8d:fa:23:7c:83:d9:2e:61:1a:81:41: 8b:75:e8:c0:0d:54:b2:c8:11:83:e3:7e:7c:53:1f:12:64:fb: 48:5c:d8:75:71:29:b9:81:33:e6:77:c1:59:02:04:58:3a:b1: a9:7e:a7:31:36:80:0b:bd:82:4e:50:df:c7:93:4b:e8:b8:63: b2:26:15:e6:9e:12:71:88:a0:1e:17:e4:68:de:62:9c:85:4c: 43:e9:af:df:1a:71:33:fb:51:04:3c:9b:e1:bd:0e:b1:cb:6a: 27:1e:b5:3c:7e:4c:44:74:11:d9:a7:42:b3:10:6e:99:b9:a4: 42:eb:29:e3:8e:6f:54:47:f6:9a:51:95:95:ff:af:bd:ab:0b: 76:55:c7:a4:35:39:b0:b6:6f:f1:b7:43:67:b0:ac:56:51:e8: 62:82:b9:e8:4a:fa:cd:4d:5b:2a:93:4d:e3:f5:4c:fe:62:b5: 7e:38:16:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6e2YgSeiZ+ovUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YjhlMzQ3M2YtZDIxNS00OWYyLTllMDEtYjBjZDQ4YTM2OWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzNfyOp7NRtRc4Feiqd0kztUVIIt06sinyCg EXQ9JORTslSASNibBYJH25cpLlx0wCQZm6CCf9/t1wwINsThYF3YjFhOGBgbcBtq GFQDPs7b5F1giietxfx7b72r5BBKz534i3a/5Kn5wOMvL6AAecSyrBLtx7h+YCw/ 1jlTpUHuKh7Zrjq989aVS620ko/4tOHqWFikI1czOx4nDvX4DYl9suiRpgR39KbP Q8+ekWLGDyI/AOSBjG0gkQPCH+mIimDysQBeY41tElaC7T+VZgBGg0l7pW+GboJr hwvEDfYWqRd2vu5mTLQ83m/Bm6yHAdkKeSVkYWSle1cr63uhPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbzCPiPvI9FETFtFTwo5rdzZlFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTE3Zjc2YjYtZjAxNy0z OTBmLWEzMjEtYWM0NzI3ZDYwZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOkjIVsbWMXlsKZHd7Lhg6yHWrWSXajDI216rZtSbKL+ltpX4ftcykR MnsRHXKzEswXvJIgg6lVo83SFkxr6LVbT1dwFi5VNi6fXcHkGBON+iN8g9kuYRqB QYt16MANVLLIEYPjfnxTHxJk+0hc2HVxKbmBM+Z3wVkCBFg6sal+pzE2gAu9gk5Q 38eTS+i4Y7ImFeaeEnGIoB4X5GjeYpyFTEPpr98acTP7UQQ8m+G9DrHLaicetTx+ TER0EdmnQrMQbpm5pELrKeOOb1RH9ppRlZX/r72rC3ZVx6Q1ObC2b/G3Q2ewrFZR 6GKCuehK+s1NWyqTTeP1TP5itX44Fg0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:57 2025 by rpki-client