$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa File: 4caa04d7-8937-30a0-9987-0d8e972b0598.roa (raw, json) Hash identifier: pIk/PY5gMPffUQvCPmp4G5OYl4ny36caEfEIdtTdSEo= Subject key identifier: 7C:EB:DA:A8:F5:17:62:EB:55:54:9E:10:83:52:0F:A3:B0:51:70:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A9D30FC305C4122FDA08D7C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 13335 IP address blocks: 104.29.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fc:30:5c:41:22:fd:a0:8d:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=bc84db4a-dc94-484c-88ea-ae47c91a5122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:43:45:70:73:97:16:9f:d6:43:95:ab:cd: 9a:0f:82:b5:3d:a5:11:e0:d1:74:2f:98:6f:99:40: a2:fd:c9:29:0a:02:75:d9:02:11:21:f9:24:2d:10: db:09:13:c4:a7:e9:5a:c3:12:1f:af:e2:11:cf:17: 00:72:6f:5c:a5:96:ac:3e:9d:6e:78:5e:e1:78:7e: bd:ef:3d:a6:1f:e9:da:a0:de:30:67:7e:75:c8:59: a8:35:13:62:19:f7:77:9f:0d:f5:2e:b4:4c:73:ac: e9:c1:a6:e3:96:c2:91:1a:58:79:ba:06:0b:1d:3c: 60:c7:37:8c:e8:dc:49:17:59:57:7f:a6:d7:17:4a: 66:ea:14:46:e5:80:ca:4b:bf:72:1f:5b:48:c0:11: b8:28:33:07:ab:f0:bb:e7:b4:26:f5:3d:d3:c5:85: 4d:12:c3:cd:52:3e:a3:ae:da:b1:de:4e:8b:b7:f9: bb:e7:34:a2:87:5f:c8:04:99:a5:72:b9:df:75:19: e4:aa:b1:1d:0e:cb:5b:99:ea:21:3f:0a:d1:6a:02: cd:8d:04:64:a3:14:aa:94:ff:3a:5d:bf:4e:02:ad: 54:8d:32:3e:1c:f0:6f:4e:d3:5b:78:37:5e:10:28: 4d:c8:eb:6b:77:38:66:46:48:9c:5f:a8:11:94:b6: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:DA:A8:F5:17:62:EB:55:54:9E:10:83:52:0F:A3:B0:51:70:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d3:e3:69:e8:9a:60:9e:2b:4f:45:17:12:9e:1b:ac:5b:82: 00:74:7d:07:44:69:79:27:24:e7:22:33:4c:43:ca:bd:72:7e: 33:e0:fe:6b:50:f3:20:57:2c:75:5f:2c:95:e1:c6:03:f4:7e: 03:cd:1f:bd:21:07:33:3f:4c:e6:68:6b:df:56:1f:4a:d0:6a: 72:0e:53:8e:93:12:5e:18:ff:a7:61:75:4c:5d:73:71:b6:35: 59:a9:fb:03:a8:08:e7:76:a4:e4:d1:ef:69:87:97:1a:20:d3: 70:86:b1:a1:1c:fe:bc:b2:54:1d:ff:93:20:4f:d4:a5:84:03: a4:ac:60:32:2c:de:7f:71:ce:c2:f3:3a:a2:8c:d0:4e:f9:7e: 1c:14:d9:fb:94:cc:1c:80:49:49:a2:37:63:88:63:f7:7b:48: bf:f7:98:9a:e7:d7:2f:a3:bd:99:6d:ac:fd:4d:c8:a3:8d:07: ab:db:cb:8e:23:47:8e:cb:e2:b0:fb:31:53:b3:72:4a:c6:4c: 97:0e:bd:8b:c6:65:22:c2:dc:91:fb:4d:89:45:b2:99:e2:e1: 85:7b:df:a0:cc:38:02:1d:74:28:a2:34:c2:e1:dc:88:e9:35: 15:6f:70:54:2b:e7:ee:cf:46:57:09:72:50:92:9e:86:91:5f: 91:26:97:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPwwXEEi/aCNfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk YmM4NGRiNGEtZGM5NC00ODRjLTg4ZWEtYWU0N2M5MWE1MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtRDRXBzlxaf1kOVq82aD4K1PaUR4NF0L5hv mUCi/ckpCgJ12QIRIfkkLRDbCRPEp+lawxIfr+IRzxcAcm9cpZasPp1ueF7heH69 7z2mH+naoN4wZ351yFmoNRNiGfd3nw31LrRMc6zpwabjlsKRGlh5ugYLHTxgxzeM 6NxJF1lXf6bXF0pm6hRG5YDKS79yH1tIwBG4KDMHq/C757Qm9T3TxYVNEsPNUj6j rtqx3k6Lt/m75zSih1/IBJmlcrnfdRnkqrEdDstbmeohPwrRagLNjQRkoxSqlP86 Xb9OAq1UjTI+HPBvTtNbeDdeEChNyOtrdzhmRkicX6gRlLbfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzr2qj1F2LrVVSeEINSD6OwUXDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGNhYTA0ZDctODkzNy0z MGEwLTk5ODctMGQ4ZTk3MmIwNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrT42nommCeK09FFxKeG6xbggB0fQdEaXknJOciM0xDyr1yfjPg/mtQ 8yBXLHVfLJXhxgP0fgPNH70hBzM/TOZoa99WH0rQanIOU46TEl4Y/6dhdUxdc3G2 NVmp+wOoCOd2pOTR72mHlxog03CGsaEc/ryyVB3/kyBP1KWEA6SsYDIs3n9xzsLz OqKM0E75fhwU2fuUzByASUmiN2OIY/d7SL/3mJrn1y+jvZltrP1NyKONB6vby44j R47L4rD7MVOzckrGTJcOvYvGZSLC3JH7TYlFspni4YV736DMOAIddCiiNMLh3Ijp NRVvcFQr5+7PRlcJclCSnoaRX5EmlxI= -----END CERTIFICATE-----Generated at Mon Aug 4 01:42:49 2025 by rpki-client