$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5da9c89b-90a0-3bb5-a9d5-f0a39709ccc3.roa File: 5da9c89b-90a0-3bb5-a9d5-f0a39709ccc3.roa (raw, json) Hash identifier: 8Ubr8MOWW6BOF7jpWkswOAevSePlzx4OwrpW0ZOJ++w= Subject key identifier: 95:E9:4E:C5:B3:E7:51:A4:FB:6B:1C:DE:DB:F8:08:8B:56:9F:F7:35 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B2FC1B88DC87226CA065A4F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5da9c89b-90a0-3bb5-a9d5-f0a39709ccc3.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.23.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:b8:8d:c8:72:26:ca:06:5a:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=f4c0a2b0-fc18-4b17-8a46-112eb1c6a688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:69:d4:ae:7b:47:2b:6c:b5:62:4f:5d:73: 4a:b5:ff:3a:12:e6:92:a4:77:36:ee:48:4d:e3:5f: d6:13:69:c5:ed:0f:52:19:ad:91:fd:a1:92:ae:dc: 6c:86:8a:33:04:83:a4:24:ab:c2:d6:ac:8d:56:9e: 2d:41:3a:a6:4a:25:82:d8:54:22:03:86:c8:cf:44: a2:ab:f7:e9:94:c5:d2:1c:0d:de:9c:2d:b5:1c:93: 31:8d:71:42:af:7b:98:e0:a4:4e:42:77:43:2b:ec: 35:db:fb:14:59:a8:28:58:9e:62:1c:06:93:4e:17: 7c:eb:58:0f:37:bf:b7:0a:02:03:1f:0a:fb:8d:a8: 92:26:3b:b3:c9:db:13:73:60:6f:d0:59:48:58:6b: 3c:7c:c0:a8:42:d4:98:40:bc:72:6e:26:6a:6e:56: 88:6b:8d:45:fb:5c:ed:73:c3:72:8e:aa:57:6f:5b: a5:a3:1c:33:dd:e2:aa:15:49:bd:51:e2:52:04:fa: e0:0b:1c:a8:b9:34:04:fb:d7:31:9e:7c:a2:28:1c: e2:77:1d:82:87:c7:d9:3e:69:25:e9:71:bd:93:d1: 8d:ba:80:31:d9:03:ff:2e:57:e7:bb:2f:ef:ca:62: ee:0f:90:0b:2a:15:dd:32:bf:87:b5:c9:27:4a:44: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E9:4E:C5:B3:E7:51:A4:FB:6B:1C:DE:DB:F8:08:8B:56:9F:F7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5da9c89b-90a0-3bb5-a9d5-f0a39709ccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:33:8d:64:53:5f:fe:05:df:6d:cb:0f:9e:b0:a1:9b:a8:e7: cf:9f:9d:d7:bc:4a:1c:aa:fe:fc:e3:45:a2:f7:39:00:d0:98: 89:f4:31:06:14:c9:83:ec:9d:0f:47:d6:85:c8:45:de:1e:18: 85:d3:44:d5:76:54:9d:3e:97:51:ca:e2:c8:e9:80:c8:f4:38: d5:d8:5d:9b:dc:cd:b5:88:1e:c4:5c:48:ac:16:32:69:4a:b3: dd:7e:6f:ec:62:d2:cf:a6:7f:d8:95:1e:ac:e5:7d:2c:c9:0f: 50:59:24:08:15:4d:dc:51:c8:cc:78:e8:4c:b3:07:3e:e0:45: a3:eb:4c:15:d5:75:44:de:20:63:31:f7:8a:0f:55:59:77:21: 87:74:0f:fb:8c:b5:da:e6:5c:f0:ae:dc:89:a0:1a:9a:8e:98: 97:3a:15:ff:84:45:4c:7a:4d:8f:f4:7e:be:65:76:ec:7a:5b: 6d:24:80:15:63:cf:f6:c8:11:45:f5:8b:e9:8a:10:aa:6d:81: 16:c5:b8:13:e4:4f:11:d5:ad:56:e6:98:a1:ef:85:33:a3:6d: b0:a7:93:aa:41:e1:2e:92:11:7c:8d:73:53:75:79:2c:04:d3: 68:f1:d5:63:a8:a4:7b:70:3e:6f:04:fc:ab:ca:23:a9:82:e1: aa:c9:2d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbiNyHImygZaT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjRjMGEyYjAtZmMxOC00YjE3LThhNDYtMTEyZWIxYzZhNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3hp1K57RytstWJPXXNKtf86EuaSpHc27khN 41/WE2nF7Q9SGa2R/aGSrtxshoozBIOkJKvC1qyNVp4tQTqmSiWC2FQiA4bIz0Si q/fplMXSHA3enC21HJMxjXFCr3uY4KROQndDK+w12/sUWagoWJ5iHAaTThd861gP N7+3CgIDHwr7jaiSJjuzydsTc2Bv0FlIWGs8fMCoQtSYQLxybiZqblaIa41F+1zt c8NyjqpXb1uloxwz3eKqFUm9UeJSBPrgCxyouTQE+9cxnnyiKBzidx2Ch8fZPmkl 6XG9k9GNuoAx2QP/Llfnuy/vymLuD5ALKhXdMr+HtcknSkRfoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXpTsWz51Gk+2sc3tv4CItWn/c1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWRhOWM4OWItOTBhMC0z YmI1LWE5ZDUtZjBhMzk3MDljY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEzjWRTX/4F323LD56woZuo58+fnde8Shyq/vzjRaL3OQDQmIn0MQYU yYPsnQ9H1oXIRd4eGIXTRNV2VJ0+l1HK4sjpgMj0ONXYXZvczbWIHsRcSKwWMmlK s91+b+xi0s+mf9iVHqzlfSzJD1BZJAgVTdxRyMx46EyzBz7gRaPrTBXVdUTeIGMx 94oPVVl3IYd0D/uMtdrmXPCu3ImgGpqOmJc6Ff+ERUx6TY/0fr5ldux6W20kgBVj z/bIEUX1i+mKEKptgRbFuBPkTxHVrVbmmKHvhTOjbbCnk6pB4S6SEXyNc1N1eSwE 02jx1WOopHtwPm8E/KvKI6mC4arJLaQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:07:05 2025 by rpki-client