$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c134e8-8fa4-3616-961b-f43323c5c0e4.roa File: 61c134e8-8fa4-3616-961b-f43323c5c0e4.roa (raw, json) Hash identifier: LC7QxQmhAog1ve4kVyXqEd8h87m4zV1PcrbmH60UotU= Subject key identifier: 66:6B:2C:10:24:A7:83:F0:8A:38:B1:48:D5:98:6B:B8:DB:11:F5:62 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A357A7DC94A6F74B7C367B440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c134e8-8fa4-3616-961b-f43323c5c0e4.roa Signing time: Mon 16 Jun 2025 09:25:25 +0000 ROA not before: Mon 16 Jun 2025 09:25:25 +0000 ROA not after: Sun 14 Sep 2025 09:25:25 +0000 asID: 13335 IP address blocks: 104.23.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:7a:7d:c9:4a:6f:74:b7:c3:67:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 16 09:25:25 2025 GMT Not After : Sep 14 09:25:25 2025 GMT Subject: CN=03fb78e4-2b24-4206-8901-9c13627bb172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:47:fd:4b:f6:48:3d:e1:8d:c6:3d:9f:8e: 6b:e7:a2:37:9a:8d:4f:fa:ff:9a:96:e6:c2:41:a7: 7d:3a:e0:b0:ca:96:39:e6:5b:16:9e:97:50:29:1b: 07:d2:a8:95:af:22:50:ed:5d:8c:76:bb:3a:dd:29: e1:5a:45:65:1e:ef:13:b5:3d:c5:27:19:64:bc:a1: 69:4f:98:ef:48:73:f5:e7:87:8e:90:9a:5d:ac:5a: 4a:d9:57:c2:24:b2:b0:28:f1:18:d2:f7:ec:eb:6a: 4d:5f:72:04:bf:50:b4:d2:4b:46:b0:f2:0a:ee:54: 86:64:31:56:7c:76:17:0d:d2:ea:24:01:c3:36:9f: 8f:bd:3f:4e:00:d4:86:2f:c9:23:2c:e7:bb:f6:99: ad:11:f2:86:fa:8d:b7:38:22:c8:b5:12:74:c1:9b: da:b3:44:04:bb:1d:19:60:d7:c0:96:d2:55:9b:e5: ab:a9:db:cc:8f:96:c2:ba:ed:40:ed:ec:0d:2f:13: c0:a2:e4:2b:48:24:55:82:4f:0c:08:00:e8:2f:4a: 69:ec:ae:6b:47:94:6e:6b:c9:19:27:bc:7b:30:93: bf:08:75:ad:5e:54:9f:3a:12:63:54:c8:8b:ac:b0: 48:ee:90:bf:85:25:f7:c0:b0:69:29:19:db:9e:fe: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6B:2C:10:24:A7:83:F0:8A:38:B1:48:D5:98:6B:B8:DB:11:F5:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c134e8-8fa4-3616-961b-f43323c5c0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:03:3b:ed:b2:48:b0:62:f9:c0:8e:5d:68:bc:90:76:be:a2: 86:50:c4:72:d0:da:78:aa:c5:7b:91:fe:9f:da:e4:ae:32:52: 0d:a3:70:c7:20:80:61:f8:92:1c:f5:9d:d6:72:77:47:e0:3b: fa:f5:3b:ab:23:ae:7a:d0:16:9c:1c:84:be:c1:3a:be:2e:70: 03:1a:52:bd:be:af:06:2a:fc:b5:15:23:e2:f9:eb:29:1d:3c: 3a:00:ef:7f:81:96:8d:db:79:2c:96:18:d1:a1:56:1e:1f:0d: 30:42:5a:1b:7c:fd:07:37:f6:56:33:56:90:f8:f8:f8:23:93: 78:32:6a:ac:87:13:d2:cc:0a:c6:9d:52:09:d7:a7:98:68:ac: b2:ef:92:09:53:03:ef:a0:a4:a3:82:f5:8e:97:1c:56:82:54: e8:b5:5f:8a:9a:67:9a:33:d2:b3:b4:0d:ad:1a:d6:38:f3:be: 17:4c:2f:59:79:db:c5:fe:2a:b0:e9:e1:90:74:96:17:7c:14: d0:81:f7:93:71:0e:2b:80:f3:94:44:f2:49:e0:74:2a:2f:af: 49:eb:5c:25:b0:95:2c:0e:5e:c4:f9:3d:10:25:82:c2:f2:a1: ed:1f:2d:f4:ad:52:3d:7a:4c:02:c9:80:ac:5c:55:6c:66:d0: 47:48:1b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo1en3JSm90t8NntEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDYxNjA5MjUyNVoXDTI1MDkxNDA5MjUyNVowLzEtMCsGA1UEAxMk MDNmYjc4ZTQtMmIyNC00MjA2LTg5MDEtOWMxMzYyN2JiMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9tH/Uv2SD3hjcY9n45r56I3mo1P+v+alubC Qad9OuCwypY55lsWnpdQKRsH0qiVryJQ7V2Mdrs63SnhWkVlHu8TtT3FJxlkvKFp T5jvSHP154eOkJpdrFpK2VfCJLKwKPEY0vfs62pNX3IEv1C00ktGsPIK7lSGZDFW fHYXDdLqJAHDNp+PvT9OANSGL8kjLOe79pmtEfKG+o23OCLItRJ0wZvas0QEux0Z YNfAltJVm+WrqdvMj5bCuu1A7ewNLxPAouQrSCRVgk8MCADoL0pp7K5rR5Rua8kZ J7x7MJO/CHWtXlSfOhJjVMiLrLBI7pC/hSX3wLBpKRnbnv5gTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZrLBAkp4PwijixSNWYa7jbEfViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjFjMTM0ZTgtOGZhNC0z NjE2LTk2MWItZjQzMzIzYzVjMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIDO+2ySLBi+cCOXWi8kHa+ooZQxHLQ2niqxXuR/p/a5K4yUg2jcMcg gGH4khz1ndZyd0fgO/r1O6sjrnrQFpwchL7BOr4ucAMaUr2+rwYq/LUVI+L56ykd PDoA73+Blo3beSyWGNGhVh4fDTBCWht8/Qc39lYzVpD4+Pgjk3gyaqyHE9LMCsad UgnXp5horLLvkglTA++gpKOC9Y6XHFaCVOi1X4qaZ5oz0rO0Da0a1jjzvhdML1l5 28X+KrDp4ZB0lhd8FNCB95NxDiuA85RE8kngdCovr0nrXCWwlSwOXsT5PRAlgsLy oe0fLfStUj16TALJgKxcVWxm0EdIG3E= -----END CERTIFICATE-----Generated at Wed Jul 2 04:40:41 2025 by rpki-client