$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a12fe58-3c27-36fa-a832-e174aac82eda.roa File: 1a12fe58-3c27-36fa-a832-e174aac82eda.roa (raw, json) Hash identifier: Kt9xTFn0IeNgvwrvk+l2fUHXWElmVK/sTWSmDg+PAnY= Subject key identifier: 76:BB:56:D0:5F:FF:8D:58:82:CA:38:39:21:62:82:65:82:14:46:80 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A38CDD7783769AAC966B3F680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a12fe58-3c27-36fa-a832-e174aac82eda.roa Signing time: Tue 17 Jun 2025 14:00:47 +0000 ROA not before: Tue 17 Jun 2025 14:00:47 +0000 ROA not after: Mon 15 Sep 2025 14:00:47 +0000 asID: 13335 IP address blocks: 104.23.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:cd:d7:78:37:69:aa:c9:66:b3:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 17 14:00:47 2025 GMT Not After : Sep 15 14:00:47 2025 GMT Subject: CN=d298c185-5b5e-4bab-8cec-44075ab4156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:48:48:a7:8f:55:7e:1a:78:da:cc:b7:4e: 3e:4b:11:89:46:f4:c1:6f:3f:55:fa:46:74:e5:4b: 68:88:92:56:f4:e4:3b:fc:d8:aa:f0:82:ff:98:9a: 20:e3:a1:6e:a8:53:09:2a:94:b5:a0:c2:21:f7:bd: b9:24:3d:83:c3:92:75:e5:76:92:b0:f8:6a:a1:d0: 9d:ab:96:71:e8:32:70:60:25:8b:33:5c:62:46:af: 1d:70:38:d8:2e:4b:30:d9:91:cd:27:21:e8:7f:1b: 6e:df:28:68:84:fa:f3:8e:01:71:b4:d6:03:d8:52: 76:6f:86:d6:c9:ad:9e:65:34:87:2d:48:2d:1e:e7: a5:7f:4f:07:03:59:86:71:30:dc:ed:a2:64:b7:e5: fa:0c:81:75:72:b6:fb:68:54:66:a6:48:00:88:63: f9:7a:1b:dd:9f:8a:f7:96:2b:bf:79:ab:e8:ac:55: 82:8f:a8:22:05:bd:56:29:ff:d4:39:15:92:4f:bd: 4a:b2:42:2b:19:88:ce:26:10:31:48:fe:9c:0f:c4: 87:15:76:6a:f1:90:25:76:87:12:a3:42:fa:5c:f2: 3a:88:e8:02:81:35:90:05:a7:ca:08:6c:2f:17:45: d6:a5:75:99:79:b8:ba:3e:b8:fd:79:fe:43:62:99: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:56:D0:5F:FF:8D:58:82:CA:38:39:21:62:82:65:82:14:46:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a12fe58-3c27-36fa-a832-e174aac82eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fa:4f:69:fa:a2:31:d3:de:cf:71:9e:a0:18:fa:b8:3c:cd: b9:8b:a3:aa:0e:e4:93:3b:60:01:fe:3e:66:53:fc:71:2d:32: 95:d7:94:bb:1b:af:b1:72:47:e6:5a:5a:36:a1:a8:b7:c6:0d: 71:45:bb:5c:83:27:fa:94:ec:71:cf:71:ab:25:47:17:a9:62: dd:11:f1:1c:55:2c:d9:a6:db:5f:94:bc:65:21:81:de:14:2a: 6d:4c:f3:a0:68:8a:9a:8f:18:eb:4a:16:9c:c6:cd:1f:13:9f: 6d:65:26:8a:42:08:89:16:fe:68:32:b9:02:44:aa:ec:7a:60: 7a:06:03:95:83:f7:b2:70:db:b1:aa:8f:c9:64:3b:3a:b9:bf: e2:fc:f3:67:ef:e4:52:b9:74:c2:41:3c:44:e5:de:df:a8:e4: 34:b5:7d:63:99:3d:70:d9:4f:c9:6b:e6:9e:a2:70:f2:a4:24: 3a:e1:40:a2:d5:4b:f5:58:c2:5d:1b:c3:eb:29:41:39:de:6f: 62:08:5c:c1:a8:1d:5f:57:f8:76:5e:70:54:61:f0:02:5c:7e: f3:c0:75:3a:16:d0:29:a0:a4:08:78:c9:f2:0b:12:18:d6:77: 05:4b:9a:58:a0:7c:20:5c:f2:0c:28:91:eb:73:13:7d:b1:01: 1c:c3:71:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4zdd4N2mqyWaz9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDYxNzE0MDA0N1oXDTI1MDkxNTE0MDA0N1owLzEtMCsGA1UEAxMk ZDI5OGMxODUtNWI1ZS00YmFiLThjZWMtNDQwNzVhYjQxNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHZISKePVX4aeNrMt04+SxGJRvTBbz9V+kZ0 5UtoiJJW9OQ7/Niq8IL/mJog46FuqFMJKpS1oMIh9725JD2Dw5J15XaSsPhqodCd q5Zx6DJwYCWLM1xiRq8dcDjYLksw2ZHNJyHofxtu3yhohPrzjgFxtNYD2FJ2b4bW ya2eZTSHLUgtHuelf08HA1mGcTDc7aJkt+X6DIF1crb7aFRmpkgAiGP5ehvdn4r3 liu/eavorFWCj6giBb1WKf/UORWST71KskIrGYjOJhAxSP6cD8SHFXZq8ZAldocS o0L6XPI6iOgCgTWQBafKCGwvF0XWpXWZebi6Prj9ef5DYpnMtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa7VtBf/41Ygso4OSFigmWCFEaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWExMmZlNTgtM2MyNy0z NmZhLWE4MzItZTE3NGFhYzgyZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD6T2n6ojHT3s9xnqAY+rg8zbmLo6oO5JM7YAH+PmZT/HEtMpXXlLsb r7FyR+ZaWjahqLfGDXFFu1yDJ/qU7HHPcaslRxepYt0R8RxVLNmm21+UvGUhgd4U Km1M86BoipqPGOtKFpzGzR8Tn21lJopCCIkW/mgyuQJEqux6YHoGA5WD97Jw27Gq j8lkOzq5v+L882fv5FK5dMJBPETl3t+o5DS1fWOZPXDZT8lr5p6icPKkJDrhQKLV S/VYwl0bw+spQTneb2IIXMGoHV9X+HZecFRh8AJcfvPAdToW0CmgpAh4yfILEhjW dwVLmligfCBc8gwoketzE32xARzDcXU= -----END CERTIFICATE-----Generated at Sun Jun 29 08:58:33 2025 by rpki-client