$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa File: 31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa (raw, json) Hash identifier: 02Fz5SsUeh69U7N/T5OOzT7E8sxoZQ6J6okFegW4dXQ= Subject key identifier: D1:DB:4B:1C:9B:A8:04:11:3F:C4:8B:2A:F4:C1:05:A5:F1:66:54:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B87B23FC8417EE26DBF277AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.23.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3f:c8:41:7e:e2:6d:bf:27:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=528055be-bf31-4e8d-8c30-7ca0d5e98868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:08:3e:bc:96:c6:ff:0b:b2:76:66:30:04: c4:51:32:cd:5a:a9:5e:60:de:ac:22:6f:47:00:af: be:6a:f1:38:42:6c:30:ed:93:a8:84:4a:46:8b:b1: 24:fe:c3:0c:cf:f2:b2:69:08:60:4d:ec:c9:17:a6: 7c:4d:73:dd:7e:8a:be:15:b7:f3:d5:18:04:4a:f5: cc:b4:00:89:fd:85:2d:0b:c8:f4:2a:27:ee:02:e1: ca:af:91:9e:a6:15:9e:71:f2:7a:15:b7:4e:1b:56: 13:4b:89:1c:d2:5c:4d:cc:b2:8a:2a:84:9f:06:01: 11:80:81:b1:2f:44:8b:ee:33:dd:39:7b:40:90:79: 0a:cc:30:72:61:70:0b:83:61:3b:ab:47:1b:f1:37: cd:c5:ad:07:a4:a6:a5:9c:f3:f7:86:a0:05:44:0f: ec:16:12:13:10:f8:4b:19:41:69:a4:11:36:11:18: 00:72:bd:69:04:0a:2b:0e:a6:4f:59:2e:2e:02:f4: 24:52:3f:da:2a:68:ff:e8:cb:e9:86:b9:55:bf:05: 83:c2:21:47:9e:9f:cb:a6:60:a0:f5:dd:c1:4c:d2: 47:89:c2:80:38:51:31:2a:b2:d8:dc:48:9c:88:ef: fe:e1:fb:b0:43:d8:4c:e4:28:91:53:e9:4c:53:b5: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DB:4B:1C:9B:A8:04:11:3F:C4:8B:2A:F4:C1:05:A5:F1:66:54:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ed:a3:03:a9:4c:7d:f5:84:e3:bc:d3:83:c4:8c:58:d0:ba: 07:c3:4e:be:64:63:85:97:f6:76:d2:53:e4:ce:b5:17:37:60: 92:57:7c:11:ce:20:36:f0:90:77:a5:65:cb:17:d5:63:a0:1c: fd:86:f8:b9:17:57:20:13:9a:5c:6b:0e:09:7d:7a:ce:be:fb: ca:44:fe:e8:1a:9f:dd:4a:78:b3:85:79:4f:55:c4:0e:74:5d: 08:dd:5d:0f:ab:23:a5:e9:2d:c1:c0:50:73:03:4c:9c:02:51: 7a:ed:62:15:6e:60:bf:b3:7e:88:d6:42:31:76:4e:2a:fa:a8: 87:ed:89:65:89:45:de:81:e2:c7:c0:dd:05:a8:ac:88:4a:5d: 42:2d:08:cc:cb:6a:82:e3:04:5e:24:1e:de:70:e9:b4:a8:47: 5f:22:fc:a4:6b:c8:e2:1a:2c:89:20:79:f2:a3:8f:97:81:31: 7e:d8:45:d1:f7:aa:b5:1f:b0:e7:86:ce:4e:72:66:7c:9a:31: ec:82:ac:31:17:42:c9:45:0d:6e:f9:49:10:46:1a:6f:37:68: c3:47:92:8b:08:47:eb:cc:59:b0:c1:31:53:ce:6a:f8:da:cf: 4e:09:84:9b:5f:85:67:a8:84:e1:24:97:1c:67:e4:02:b1:0f: 82:8c:d0:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsj/IQX7ibb8nesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NTI4MDU1YmUtYmYzMS00ZThkLThjMzAtN2NhMGQ1ZTk4ODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbgIPryWxv8LsnZmMATEUTLNWqleYN6sIm9H AK++avE4Qmww7ZOohEpGi7Ek/sMMz/KyaQhgTezJF6Z8TXPdfoq+Fbfz1RgESvXM tACJ/YUtC8j0KifuAuHKr5GephWecfJ6FbdOG1YTS4kc0lxNzLKKKoSfBgERgIGx L0SL7jPdOXtAkHkKzDByYXALg2E7q0cb8TfNxa0HpKalnPP3hqAFRA/sFhITEPhL GUFppBE2ERgAcr1pBAorDqZPWS4uAvQkUj/aKmj/6MvphrlVvwWDwiFHnp/LpmCg 9d3BTNJHicKAOFExKrLY3EiciO/+4fuwQ9hM5CiRU+lMU7XLEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHbSxybqAQRP8SLKvTBBaXxZlT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzFmZTk0OTUtYWNlNi0z MmI1LTlmNmItMmZmN2VmNmFlNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjtowOpTH31hOO804PEjFjQugfDTr5kY4WX9nbSU+TOtRc3YJJXfBHO IDbwkHelZcsX1WOgHP2G+LkXVyATmlxrDgl9es6++8pE/ugan91KeLOFeU9VxA50 XQjdXQ+rI6XpLcHAUHMDTJwCUXrtYhVuYL+zfojWQjF2Tir6qIftiWWJRd6B4sfA 3QWorIhKXUItCMzLaoLjBF4kHt5w6bSoR18i/KRryOIaLIkgefKjj5eBMX7YRdH3 qrUfsOeGzk5yZnyaMeyCrDEXQslFDW75SRBGGm83aMNHkosIR+vMWbDBMVPOavja z04JhJtfhWeohOEklxxn5AKxD4KM0Hs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:44:30 2025 by rpki-client