$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa File: 972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa (raw, json) Hash identifier: m1uXpo+/Xh94y2AGSxIauT3Zhbz3J6KxWbZ/5sNA4/8= Subject key identifier: 85:4A:9E:46:18:25:1B:4F:EE:B6:4B:5B:0A:8B:E8:5D:2D:C1:2A:F5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AFD5DF6C08268562F5B11F680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa Signing time: Tue 26 Aug 2025 23:49:36 +0000 ROA not before: Tue 26 Aug 2025 23:49:36 +0000 ROA not after: Tue 25 Nov 2025 00:49:36 +0000 asID: 13335 IP address blocks: 104.29.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:5d:f6:c0:82:68:56:2f:5b:11:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 26 23:49:36 2025 GMT Not After : Nov 25 00:49:36 2025 GMT Subject: CN=5cf52cf3-9455-4a6d-87db-c25ef7c96c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a6:6f:36:30:c9:c5:af:38:81:4b:73:64:16: 53:06:53:9e:92:a3:6e:3e:32:6d:df:6b:5e:27:7c: 1d:2e:28:4a:4c:67:06:aa:10:53:12:f2:0b:9f:34: a8:88:10:3c:83:05:5e:65:94:e3:fa:12:e1:a0:cc: 03:b2:dd:a3:72:38:17:d2:f7:16:60:e6:7f:4e:be: e8:4f:0e:56:5a:bd:4b:17:82:4f:bd:4b:31:84:6a: 3a:18:5c:f3:a0:81:6d:bc:a4:9a:a8:6f:a2:0d:7a: 69:eb:b4:93:40:7f:e2:10:80:c2:e1:63:75:db:bf: 88:e2:a6:45:43:80:54:29:2e:19:42:51:a7:05:52: fa:2f:d6:d3:eb:40:68:2a:d8:8c:8a:74:1c:29:be: 30:92:1a:39:bc:bc:a7:f3:9d:e4:8a:55:1f:4f:2c: 63:22:f0:ac:2e:27:3b:7a:95:af:ef:5f:ca:97:e6: 42:aa:b0:a9:bf:e2:c3:19:61:a7:81:70:b1:51:06: d6:68:57:30:68:cd:58:ca:92:70:de:ca:f4:5e:7d: 47:c3:01:95:00:4e:5c:de:b5:0b:67:7e:25:93:a8: bd:8d:58:24:2b:ab:b1:43:26:f8:93:a6:e1:69:4d: 85:5d:d6:4a:0b:72:7e:48:63:0e:a6:65:59:20:fa: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4A:9E:46:18:25:1B:4F:EE:B6:4B:5B:0A:8B:E8:5D:2D:C1:2A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:8f:4d:94:9a:74:51:e6:09:ad:08:45:c8:75:88:54:dc:ff: 5a:f8:ad:df:a4:02:af:d4:37:3b:60:f1:1f:2b:0d:e5:9a:8f: 9b:db:34:75:87:6f:8d:e0:b6:db:86:33:4e:af:41:ac:20:3f: f2:b1:d5:e8:f9:34:00:a5:d9:f4:2a:bd:e4:8e:c1:d1:9e:a1: 30:f9:83:3b:3b:40:0a:2c:df:88:35:fc:cf:9e:ae:3c:c8:d4: 2f:f9:5e:f2:06:3c:a8:db:01:6e:a5:28:93:58:4b:41:5c:d3: ef:78:05:e4:6b:dd:9a:1a:f0:bf:5d:17:e9:a5:7b:7e:dc:de: 98:4d:95:ba:f3:ef:ae:10:a0:ca:a7:bf:e9:1e:02:88:16:21: bb:ca:b0:ea:8e:8e:37:42:66:7a:94:d3:bd:a3:e8:6b:25:e6: 3e:87:fe:86:20:0b:d7:8d:5a:c1:ac:1b:d2:25:5d:e3:53:b2: 98:9d:fa:9c:7a:75:8f:61:11:32:39:8e:99:23:a6:a1:d9:63: 15:f3:66:ae:c7:c3:73:7e:68:b4:af:d0:74:f8:a0:f7:09:04: a0:5f:f6:24:87:61:91:5a:62:54:b0:2b:bb:af:4b:95:e7:8b: d3:30:e9:04:27:e3:08:ac:14:bc:fe:f5:f9:49:f0:98:8f:cd: 78:3e:3e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9XfbAgmhWL1sR9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyNjIzNDkzNloXDTI1MTEyNTAwNDkzNlowLzEtMCsGA1UEAxMk NWNmNTJjZjMtOTQ1NS00YTZkLTg3ZGItYzI1ZWY3Yzk2YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKZvNjDJxa84gUtzZBZTBlOekqNuPjJt32te J3wdLihKTGcGqhBTEvILnzSoiBA8gwVeZZTj+hLhoMwDst2jcjgX0vcWYOZ/Tr7o Tw5WWr1LF4JPvUsxhGo6GFzzoIFtvKSaqG+iDXpp67STQH/iEIDC4WN127+I4qZF Q4BUKS4ZQlGnBVL6L9bT60BoKtiMinQcKb4wkho5vLyn853kilUfTyxjIvCsLic7 epWv71/Kl+ZCqrCpv+LDGWGngXCxUQbWaFcwaM1YypJw3sr0Xn1HwwGVAE5c3rUL Z34lk6i9jVgkK6uxQyb4k6bhaU2FXdZKC3J+SGMOpmVZIPpMKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVKnkYYJRtP7rZLWwqL6F0twSr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTcyYThmMzctNmExOS0z NWQzLWE0N2EtN2NlNWIzYzM5OTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmPTZSadFHmCa0IRch1iFTc/1r4rd+kAq/UNztg8R8rDeWaj5vbNHWH b43gttuGM06vQawgP/Kx1ej5NACl2fQqveSOwdGeoTD5gzs7QAos34g1/M+erjzI 1C/5XvIGPKjbAW6lKJNYS0Fc0+94BeRr3Zoa8L9dF+mle37c3phNlbrz764QoMqn v+keAogWIbvKsOqOjjdCZnqU072j6Gsl5j6H/oYgC9eNWsGsG9IlXeNTspid+px6 dY9hETI5jpkjpqHZYxXzZq7Hw3N+aLSv0HT4oPcJBKBf9iSHYZFaYlSwK7uvS5Xn i9Mw6QQn4wisFLz+9flJ8JiPzXg+Poc= -----END CERTIFICATE-----Generated at Wed Sep 3 13:52:12 2025 by rpki-client