$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa File: aac69805-db9c-3d5e-8a6c-61855f417b0e.roa (raw, json) Hash identifier: mjMQBByXScEpYT7szWzBNcJswGNzbV/TNZRKaxkuHjY= Subject key identifier: 67:34:5B:66:25:A1:60:25:65:D3:FA:71:11:39:54:9E:D6:C6:7C:B0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A90A0A94B0BC4376F8A11E380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 14789 IP address blocks: 104.29.29.0/24 maxlen: 24 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:a9:4b:0b:c4:37:6f:8a:11:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ed38f819-b24c-4e93-8a37-4373fb3f2642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:f1:a2:5c:40:1b:84:b3:b2:b7:3e:ba:e4: b9:15:16:c9:c9:40:b6:36:06:64:c7:77:79:91:0a: 72:bc:53:8e:90:29:4e:88:b0:f9:aa:f8:34:3c:c4: 44:e2:21:b4:a9:72:fa:ff:f7:9a:de:5b:70:0d:ce: ec:63:15:78:a5:27:47:c1:dc:78:6f:9e:fb:8c:c1: 20:ac:f7:9a:0d:3c:9e:9f:48:c2:89:5c:4c:1c:99: 65:39:66:4e:c9:de:c3:26:0c:6b:f7:9b:5b:6f:bf: 59:5f:f1:5d:26:88:c5:c1:48:ff:d1:96:44:41:91: d8:fb:ed:f3:db:c5:90:d3:ef:54:39:0c:90:14:b7: 24:b8:9c:53:42:ca:7c:34:03:b0:3d:2b:3d:91:8b: 82:22:6c:12:75:26:06:d4:b4:d1:91:72:ce:75:64: 48:32:4b:e4:66:4c:4a:31:4f:be:02:8d:ee:6a:c7: f4:5f:36:93:8b:9f:f7:a9:26:15:44:5f:4f:3f:35: 63:74:b2:aa:5e:8d:33:d9:67:ae:59:01:86:98:c0: ef:c2:19:aa:a1:41:b3:de:57:11:a7:f1:36:93:77: 4b:10:5c:90:67:e1:23:11:2e:f9:a9:60:c4:14:f7: e6:8b:2f:70:32:f0:3a:04:42:fd:4a:7d:7e:c4:d0: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:34:5B:66:25:A1:60:25:65:D3:FA:71:11:39:54:9E:D6:C6:7C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.29.0/24 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1e:23:ac:fa:7e:bc:f8:c4:3f:60:14:d2:31:02:f8:5a:77: 38:b8:4e:15:c7:27:ec:df:8a:00:66:a3:63:69:f1:ea:69:bc: 65:18:25:a3:ea:d7:43:57:14:69:04:e9:d6:1b:5a:43:e1:25: 2a:a1:87:03:02:e5:9a:ad:f5:0d:0e:47:71:8c:42:18:15:0c: 21:bd:96:6a:0e:82:34:75:41:41:5a:f4:67:28:83:08:be:9c: 3c:48:c6:63:76:91:84:28:72:dd:09:40:2c:ad:cf:19:3c:c9: b8:19:15:db:78:e8:ae:e6:b8:17:e8:05:39:36:6f:ef:46:7d: 61:0e:0a:fa:cf:27:2d:95:9d:f7:71:15:d5:00:09:71:39:31: a7:f3:f2:5b:7a:f3:c5:d3:10:31:88:c8:8f:04:49:6c:65:7c: 95:f4:f0:28:f4:8e:0c:8d:55:84:1c:72:b7:6f:9d:f6:82:81: 6a:0f:4c:d3:7a:72:54:b6:5f:01:eb:2b:98:91:3a:1c:54:bc: 4c:69:aa:9d:44:54:db:31:9a:7e:ae:77:7d:bb:9f:da:80:d4: 89:6b:89:81:14:b1:82:e4:96:a8:2f:94:2c:28:f4:5c:b3:4e: 41:78:08:b7:07:c2:6f:4f:fd:d7:71:65:10:da:47:a5:de:82: 2a:19:2d:d2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqQoKlLC8Q3b4oR44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWQzOGY4MTktYjI0Yy00ZTkzLThhMzctNDM3M2ZiM2YyNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5DxolxAG4Szsrc+uuS5FRbJyUC2NgZkx3d5 kQpyvFOOkClOiLD5qvg0PMRE4iG0qXL6//ea3ltwDc7sYxV4pSdHwdx4b577jMEg rPeaDTyen0jCiVxMHJllOWZOyd7DJgxr95tbb79ZX/FdJojFwUj/0ZZEQZHY++3z 28WQ0+9UOQyQFLckuJxTQsp8NAOwPSs9kYuCImwSdSYG1LTRkXLOdWRIMkvkZkxK MU++Ao3uasf0XzaTi5/3qSYVRF9PPzVjdLKqXo0z2WeuWQGGmMDvwhmqoUGz3lcR p/E2k3dLEFyQZ+EjES75qWDEFPfmiy9wMvA6BEL9Sn1+xNAe5wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGc0W2YloWAlZdP6cRE5VJ7WxnywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFjNjk4MDUtZGI5Yy0z ZDVlLThhNmMtNjE4NTVmNDE3YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaB0dAwQA rEcCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAgeI6z6frz4xD9gFNIxAvhadzi4ThXHJ+zfigBmo2Np8epp vGUYJaPq10NXFGkE6dYbWkPhJSqhhwMC5Zqt9Q0OR3GMQhgVDCG9lmoOgjR1QUFa 9Gcogwi+nDxIxmN2kYQoct0JQCytzxk8ybgZFdt46K7muBfoBTk2b+9GfWEOCvrP Jy2VnfdxFdUACXE5Mafz8lt688XTEDGIyI8ESWxlfJX08Cj0jgyNVYQccrdvnfaC gWoPTNN6clS2XwHrK5iROhxUvExpqp1EVNsxmn6ud327n9qA1IlriYEUsYLklqgv lCwo9FyzTkF4CLcHwm9P/ddxZRDaR6XegioZLdI= -----END CERTIFICATE-----Generated at Wed Jul 23 01:26:20 2025 by rpki-client