$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5c03b76-d688-3450-91ec-8a63c3994c93.roa File: e5c03b76-d688-3450-91ec-8a63c3994c93.roa (raw, json) Hash identifier: J3kQkJ2dC9+r4RcZvAh3odyEeg8o8/IzwGociMZ8jw0= Subject key identifier: 5A:31:51:39:16:E3:51:BD:00:F5:2F:BD:A9:9A:36:93:A7:2C:7C:61 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA88462BB7A393C800200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5c03b76-d688-3450-91ec-8a63c3994c93.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.21.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a8:84:62:bb:7a:39:3c:80:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=a9644c40-1ec4-47b0-9443-480bcf884f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:d2:a6:25:55:1a:6a:59:bd:29:a3:2e:40: 39:d8:6e:9c:e7:b6:14:db:04:42:cd:ee:bc:e2:ad: ec:2f:25:34:48:a0:86:b4:52:c1:68:c5:fa:7d:ce: c5:17:d3:4c:ea:dc:3a:8a:db:0f:d6:af:15:50:b8: 41:45:64:2c:62:80:dd:de:be:4f:82:7b:3a:9e:eb: fa:63:b0:66:d1:0b:2c:a0:ea:9d:1b:52:c9:b4:ef: 53:1d:8f:b7:d2:bf:90:d7:9a:ec:07:4c:8c:a5:e1: d4:79:38:d9:d3:45:10:78:c3:c0:a0:7a:5f:35:3e: e0:fe:68:62:40:cb:19:49:cb:dc:7a:e3:d3:35:a0: b9:c9:09:3d:55:18:49:a4:38:34:10:40:35:27:46: 21:83:5e:66:2a:0f:1f:0d:d3:f7:66:5d:c2:45:42: fa:b1:61:d8:f2:75:8b:23:ce:ba:b4:9b:36:d6:b9: 17:0c:33:57:4f:8f:ec:ae:9c:13:e7:30:c5:e8:48: 2c:cb:07:76:f7:46:76:dc:fa:9a:ad:ec:81:72:de: 60:87:6b:0c:35:cd:87:d0:92:e0:69:c3:64:f5:4d: 00:7d:cc:a4:6d:72:06:fe:0d:43:07:35:5f:64:4f: 37:5f:05:a2:2a:cf:39:0c:2b:c6:a8:ce:81:26:dd: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:51:39:16:E3:51:BD:00:F5:2F:BD:A9:9A:36:93:A7:2C:7C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5c03b76-d688-3450-91ec-8a63c3994c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:62:8e:94:8c:d0:62:d3:0d:69:37:bb:19:04:c7:03:7a:ba: 4b:3d:47:43:4f:cc:d8:56:84:e6:e9:e3:fb:2b:da:17:b7:50: 6c:6f:4a:81:86:3b:2f:e5:03:5a:2b:a7:fa:51:b9:d5:1e:be: 3b:80:f9:ce:11:c4:7b:ee:ba:6c:90:aa:2f:b7:a7:fc:16:0f: b7:3d:d1:29:f2:59:64:c2:9f:4b:a5:3d:eb:c7:39:96:d0:47: a0:5d:49:af:b1:4c:2c:23:ae:1a:f6:4b:fa:b9:ee:86:22:6d: aa:e9:24:b6:af:dc:e6:2d:dc:58:a9:57:84:52:4d:37:8e:3b: 52:7a:89:c7:dc:5b:1c:92:26:29:f3:83:66:fc:03:c0:69:6d: d5:81:bd:b3:64:20:e6:34:53:17:e8:be:7d:57:90:97:ea:e3: 7e:d7:99:c2:67:91:b9:76:6b:f3:48:7e:4b:cc:f2:75:a5:ed: b6:03:ed:c9:96:df:a3:21:68:da:a3:40:44:d2:a9:39:79:30: c7:39:99:63:cd:31:7b:dd:0e:e9:47:79:01:cd:d7:81:c0:15: 23:49:c5:22:f5:70:b3:5d:8d:d4:ee:15:ff:06:1f:24:8d:63: 6d:ef:92:36:6d:ad:a0:7a:52:59:11:d4:22:e0:0f:1c:ee:b1: 3e:88:98:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6iEYrt6OTyAAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YTk2NDRjNDAtMWVjNC00N2IwLTk0NDMtNDgwYmNmODg0ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMbSpiVVGmpZvSmjLkA52G6c57YU2wRCze68 4q3sLyU0SKCGtFLBaMX6fc7FF9NM6tw6itsP1q8VULhBRWQsYoDd3r5Pgns6nuv6 Y7Bm0QssoOqdG1LJtO9THY+30r+Q15rsB0yMpeHUeTjZ00UQeMPAoHpfNT7g/mhi QMsZScvceuPTNaC5yQk9VRhJpDg0EEA1J0Yhg15mKg8fDdP3Zl3CRUL6sWHY8nWL I866tJs21rkXDDNXT4/srpwT5zDF6Egsywd290Z23PqareyBct5gh2sMNc2H0JLg acNk9U0AfcykbXIG/g1DBzVfZE83XwWiKs85DCvGqM6BJt3GOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoxUTkW41G9APUvvamaNpOnLHxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTVjMDNiNzYtZDY4OC0z NDUwLTkxZWMtOGE2M2MzOTk0YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdijpSM0GLTDWk3uxkExwN6uks9R0NPzNhWhObp4/sr2he3UGxvSoGG Oy/lA1orp/pRudUevjuA+c4RxHvuumyQqi+3p/wWD7c90SnyWWTCn0ulPevHOZbQ R6BdSa+xTCwjrhr2S/q57oYibarpJLav3OYt3FipV4RSTTeOO1J6icfcWxySJinz g2b8A8BpbdWBvbNkIOY0Uxfovn1XkJfq437XmcJnkbl2a/NIfkvM8nWl7bYD7cmW 36MhaNqjQETSqTl5MMc5mWPNMXvdDulHeQHN14HAFSNJxSL1cLNdjdTuFf8GHySN Y23vkjZtraB6UlkR1CLgDxzusT6ImJg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:44 2025 by rpki-client