$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f6fa2a5-72d6-3516-aa2c-1c6b17629121.roa File: 2f6fa2a5-72d6-3516-aa2c-1c6b17629121.roa (raw, json) Hash identifier: EgvF4UCFPJYYM1CRlQbeVC6SVqhQKO2vkSm5PuULTs4= Subject key identifier: 3F:CB:85:E8:7C:FF:37:F5:4A:0C:F6:CD:B0:F6:AB:22:3A:8A:5E:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AE1971D660AE45F1521F03480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f6fa2a5-72d6-3516-aa2c-1c6b17629121.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 104.23.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:1d:66:0a:e4:5f:15:21:f0:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=201d5b5c-e803-47bf-8d9d-90e537b084a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:28:b9:45:5a:18:af:fd:2e:06:59:51:f7:e6: a4:de:d1:2f:41:38:f4:72:7e:d8:6c:00:d0:97:99: 1e:30:05:8f:56:69:b5:70:9e:b1:8b:eb:c9:1e:f5: 35:a3:8e:ad:af:01:0e:a3:e1:0d:80:ff:13:dd:69: 60:9d:ae:71:ef:5b:13:06:73:db:d2:bc:ff:f4:c4: b3:db:ce:f6:41:40:2a:21:60:cb:64:24:a4:40:2e: 90:0d:8e:6c:45:20:15:2f:ec:dd:c9:1a:ee:a5:f3: ad:47:2d:7c:9c:e0:e5:92:07:e7:2c:1c:a0:83:78: d8:74:a2:06:e8:e8:ac:3c:d5:42:7d:64:6c:76:34: b8:e4:fd:1c:2e:3f:70:4d:31:a3:15:4d:29:f9:22: d9:6e:01:34:1c:7b:2f:3d:24:a3:bb:58:8b:24:48: 36:73:bb:80:c8:8d:52:88:ed:c0:71:3b:8b:17:ae: a4:8c:01:b3:23:5d:e9:a9:c7:02:dd:c5:ed:a9:c1: 0a:d5:5b:b3:2d:9d:1e:4f:a9:f7:fb:a9:00:ca:7c: a4:23:5d:d2:e1:bf:d0:2c:13:0f:d3:b1:e9:2e:7c: 68:ad:e3:af:f4:76:78:64:41:9f:ac:a8:11:e6:a1: c1:92:86:8f:5c:ae:df:70:0b:2e:37:a1:47:7b:f7: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CB:85:E8:7C:FF:37:F5:4A:0C:F6:CD:B0:F6:AB:22:3A:8A:5E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f6fa2a5-72d6-3516-aa2c-1c6b17629121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:31:eb:ae:19:c7:95:90:28:13:11:c2:68:5c:e5:6a:40:f2: e0:8c:42:ba:9f:f0:5d:83:d8:9d:ee:37:23:0d:8e:1b:06:a3: ca:d6:97:c7:e8:f5:d3:af:4f:33:f0:d7:cc:7f:49:7e:d1:3f: 75:91:c6:d2:6d:93:b1:9e:0b:a4:fd:a1:84:bc:dd:3a:fd:da: 10:5a:88:33:ae:d0:1d:f3:09:80:b2:b0:7b:f8:de:b7:74:63: 57:bb:78:a8:a0:c5:13:9f:c0:cc:1d:b7:e0:c7:3a:5d:a1:83: b6:48:e6:a0:f3:fc:38:42:70:30:ac:24:3a:65:63:fd:dd:19: 76:69:e0:f3:90:58:39:6e:20:52:71:f3:5f:34:d3:74:40:a2: 95:8b:69:88:8a:8a:d9:dd:af:0e:48:2e:dd:d1:28:b3:12:4f: 75:f5:0b:77:61:e2:d1:d2:f6:ed:cb:fb:97:1e:9e:9e:2e:f6: ab:b8:4d:a7:6a:0f:9f:b7:06:eb:fe:18:0e:a5:c8:c2:f9:14: b4:8f:c0:ed:a8:52:a9:38:80:5e:0e:eb:70:58:71:40:d3:08: 97:fa:79:94:e2:ad:f5:03:4f:ea:82:27:c1:12:28:86:1e:5e: 39:8b:80:c4:4f:c4:7d:1f:81:3c:78:5e:01:15:bd:95:5a:68: 6b:75:9f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlx1mCuRfFSHwNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MjAxZDViNWMtZTgwMy00N2JmLThkOWQtOTBlNTM3YjA4NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Si5RVoYr/0uBllR9+ak3tEvQTj0cn7YbADQ l5keMAWPVmm1cJ6xi+vJHvU1o46trwEOo+ENgP8T3Wlgna5x71sTBnPb0rz/9MSz 2872QUAqIWDLZCSkQC6QDY5sRSAVL+zdyRrupfOtRy18nODlkgfnLBygg3jYdKIG 6OisPNVCfWRsdjS45P0cLj9wTTGjFU0p+SLZbgE0HHsvPSSju1iLJEg2c7uAyI1S iO3AcTuLF66kjAGzI13pqccC3cXtqcEK1VuzLZ0eT6n3+6kAynykI13S4b/QLBMP 07HpLnxoreOv9HZ4ZEGfrKgR5qHBkoaPXK7fcAsuN6FHe/dHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/Lheh8/zf1Sgz2zbD2qyI6il6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmY2ZmEyYTUtNzJkNi0z NTE2LWFhMmMtMWM2YjE3NjI5MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsx664Zx5WQKBMRwmhc5WpA8uCMQrqf8F2D2J3uNyMNjhsGo8rWl8fo 9dOvTzPw18x/SX7RP3WRxtJtk7GeC6T9oYS83Tr92hBaiDOu0B3zCYCysHv43rd0 Y1e7eKigxROfwMwdt+DHOl2hg7ZI5qDz/DhCcDCsJDplY/3dGXZp4POQWDluIFJx 818003RAopWLaYiKitndrw5ILt3RKLMST3X1C3dh4tHS9u3L+5cenp4u9qu4Tadq D5+3Buv+GA6lyML5FLSPwO2oUqk4gF4O63BYcUDTCJf6eZTirfUDT+qCJ8ESKIYe XjmLgMRPxH0fgTx4XgEVvZVaaGt1nyQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:25 2025 by rpki-client