$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa File: 10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa (raw, json) Hash identifier: NIvz2J60ze7vBJSuDNpSo889ChWhkv0cVMp+YPE7hrI= Subject key identifier: 14:67:7B:8B:78:AC:12:E0:29:8F:3E:F9:05:BC:AA:A2:8D:EE:42:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B48E1BB393EF79AFBB1797B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.23.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bb:39:3e:f7:9a:fb:b1:79:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0e375954-2cb9-4024-a63c-066372a12fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7e:2e:12:a9:78:32:9c:a9:b4:72:3c:52:4f: 03:ba:34:a0:c9:ad:ad:0f:11:7a:e3:76:3f:ee:08: 01:a8:43:b9:6c:c8:0e:f5:17:c7:70:99:06:aa:91: 5d:7e:7c:4f:02:8e:77:7f:e2:5b:95:e3:0a:d2:27: 6e:87:d0:c6:f0:5d:8d:57:fe:c0:a6:00:45:9b:8d: eb:0e:cc:97:f9:fb:5d:0b:3d:ea:30:63:5a:83:f4: 7f:e2:1a:a5:98:06:3f:56:78:d6:6c:8d:93:e3:a3: 92:73:f5:f0:4e:31:bd:9a:89:0e:21:9a:c5:c5:88: 45:bc:ed:eb:ce:3d:c0:ba:dc:c7:f6:ef:96:97:b5: b9:ec:58:4f:98:e9:8a:84:47:82:68:01:ec:55:ed: b6:3a:cf:76:23:fb:48:d7:36:f5:42:64:7b:5c:f4: 45:0c:9a:51:3d:42:90:80:e8:b2:3d:8d:bd:ec:b9: 2b:f4:20:42:e1:3e:ce:55:fe:64:2a:72:7a:9e:c8: 10:d6:19:15:7d:83:9e:88:0e:df:fb:f1:26:fd:c9: 89:e5:da:4f:a0:6a:87:f4:f4:83:08:27:15:44:63: cf:1c:3c:da:14:3c:2c:1c:2c:b5:10:e6:df:86:1d: 40:a1:b9:5d:dd:76:6b:e8:c1:8b:c9:e8:9c:81:1d: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:67:7B:8B:78:AC:12:E0:29:8F:3E:F9:05:BC:AA:A2:8D:EE:42:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2b:97:57:bc:22:e4:63:78:fa:1c:c2:e8:17:d9:8c:c3:53: 20:db:51:de:4e:9f:d3:12:ac:22:ab:b6:5c:3b:37:3b:b1:4a: 3a:1b:53:d1:67:7c:fa:00:9b:4f:6a:5e:79:41:92:5d:28:d7: bb:0c:e9:fb:1e:63:5d:20:b0:a8:fc:2e:19:8f:ab:a5:ff:ff: e7:7e:f6:ac:c3:e2:0c:4e:76:3c:d1:a2:d8:3f:10:08:04:c8: 59:95:7d:fc:b4:a0:90:2e:e0:cf:83:57:92:00:b2:3a:69:65: 03:77:c1:e3:74:e1:fe:a7:51:fd:c2:02:4d:5e:91:f1:c5:b2: 98:b7:ff:5d:be:5d:27:48:3a:63:44:ab:50:7e:e7:44:69:13: fe:66:7b:48:2b:ff:dc:d1:50:dc:04:6e:88:f5:a4:80:33:2e: a9:1f:df:d7:3e:8c:88:e9:24:17:3a:64:8f:c3:3a:d0:6b:0a: d7:a4:92:fa:95:1b:df:9c:ae:a3:10:6b:5a:52:79:84:d6:6c: 5e:b0:59:64:ef:dc:93:a4:4f:14:42:f4:8a:cf:77:c1:c8:b4: a6:7d:cc:f1:cc:02:72:6d:e1:f5:76:79:63:1b:08:a8:e7:67: 83:66:39:92:1e:d9:f9:cf:50:aa:05:82:d0:60:7e:45:95:db: 20:3c:d9:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bs5Pvea+7F5e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGUzNzU5NTQtMmNiOS00MDI0LWE2M2MtMDY2MzcyYTEyZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH4uEql4MpyptHI8Uk8DujSgya2tDxF643Y/ 7ggBqEO5bMgO9RfHcJkGqpFdfnxPAo53f+JbleMK0iduh9DG8F2NV/7ApgBFm43r DsyX+ftdCz3qMGNag/R/4hqlmAY/VnjWbI2T46OSc/XwTjG9mokOIZrFxYhFvO3r zj3AutzH9u+Wl7W57FhPmOmKhEeCaAHsVe22Os92I/tI1zb1QmR7XPRFDJpRPUKQ gOiyPY297Lkr9CBC4T7OVf5kKnJ6nsgQ1hkVfYOeiA7f+/Em/cmJ5dpPoGqH9PSD CCcVRGPPHDzaFDwsHCy1EObfhh1Aobld3XZr6MGLyeicgR3a0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRne4t4rBLgKY8++QW8qqKN7kKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTBmNTcyZmUtZjU3ZS0z NGRlLTkxZWEtZWM1NmI2ZDFlYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIrl1e8IuRjePocwugX2YzDUyDbUd5On9MSrCKrtlw7NzuxSjobU9Fn fPoAm09qXnlBkl0o17sM6fseY10gsKj8LhmPq6X//+d+9qzD4gxOdjzRotg/EAgE yFmVffy0oJAu4M+DV5IAsjppZQN3weN04f6nUf3CAk1ekfHFspi3/12+XSdIOmNE q1B+50RpE/5me0gr/9zRUNwEboj1pIAzLqkf39c+jIjpJBc6ZI/DOtBrCtekkvqV G9+crqMQa1pSeYTWbF6wWWTv3JOkTxRC9IrPd8HItKZ9zPHMAnJt4fV2eWMbCKjn Z4NmOZIe2fnPUKoFgtBgfkWV2yA82SY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:51 2025 by rpki-client