$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/668d251f-1349-33b0-b58c-8d264d51b26e.roa File: 668d251f-1349-33b0-b58c-8d264d51b26e.roa (raw, json) Hash identifier: ZXFX62OO3UXWVKSqCHiyeKBx9f9NKZRSCUxMoziAoKk= Subject key identifier: A1:FD:AC:0D:0C:5E:61:02:98:A9:15:13:03:6D:7D:31:6E:73:D6:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD3A0FA4F630EF7E2F45A8400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/668d251f-1349-33b0-b58c-8d264d51b26e.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 104.23.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fa:4f:63:0e:f7:e2:f4:5a:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=1e694511-8612-4957-89db-9d5f68a45cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:4c:5f:18:39:7d:34:15:24:e3:fc:73:de: 64:25:af:36:f2:a0:6a:5c:3d:75:34:6a:a9:56:28: a5:74:d8:62:52:ae:48:e6:bc:2d:13:9f:fe:b4:58: 6a:2b:42:1b:24:4e:40:6e:0f:75:47:38:2e:61:b3: 7f:4f:1d:b3:95:ec:a6:b2:34:9c:45:47:bd:6d:13: d2:29:59:ed:1b:3f:ee:70:53:2a:d3:d9:5c:b0:30: c5:91:9e:77:24:3a:0a:8d:ca:ce:b1:dd:d7:d7:62: 2d:7d:f2:4a:5c:3f:b4:3c:38:be:d6:6e:e7:33:78: 93:ac:dd:fc:6b:88:83:73:8f:61:74:c1:14:97:9e: 70:30:ce:bd:7c:ff:c5:b5:14:7d:56:f8:98:9c:2c: f1:df:f7:51:16:bd:76:c9:c6:f5:ac:5d:1b:c1:6d: 52:d9:36:30:9e:e4:ee:a9:63:3b:f7:93:20:4b:45: db:1b:13:3e:86:d0:64:70:d5:2b:35:a0:36:0d:de: f5:0b:55:b1:aa:25:9e:0e:65:63:66:66:bd:4c:6c: f3:e9:55:51:4c:9d:7e:c5:6e:22:fd:7a:d7:e9:7a: 66:35:3f:82:07:11:e6:86:70:80:62:0a:e6:e0:3e: 9e:60:a2:28:be:1e:20:ee:af:64:9d:d1:9d:bc:32: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:AC:0D:0C:5E:61:02:98:A9:15:13:03:6D:7D:31:6E:73:D6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/668d251f-1349-33b0-b58c-8d264d51b26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:15:54:cf:68:95:ac:d7:1e:7a:91:2a:2e:01:81:4c:b0:5d: de:48:30:f7:6c:45:30:3f:cf:f7:e5:f6:6e:2b:21:47:39:0a: 06:b2:15:4e:80:62:33:58:e3:fc:51:da:2c:66:dd:7e:78:5b: e1:48:51:7c:2f:87:93:44:75:b5:db:c6:b7:9d:f7:04:30:90: 3b:42:8f:bf:53:19:7e:00:f9:82:b1:02:2b:bf:f3:e6:0c:3e: 45:c2:f0:ef:cf:3f:70:7b:57:27:60:63:c8:8a:30:79:e0:51: 3e:fb:ec:cc:23:c9:10:84:eb:e6:6c:78:61:e7:06:b8:d6:e2: d1:89:2e:62:6b:46:a2:89:2f:1a:e1:c4:91:b6:aa:aa:88:c3: 0d:2e:2c:09:e6:0e:4f:dd:9f:b7:e3:f3:6f:ac:a6:9d:70:35: 91:9d:73:c3:61:c9:86:30:cf:70:ea:3a:e0:ac:57:17:25:7c: 26:d0:de:35:62:19:c2:43:6f:69:25:b6:ea:1c:4d:7a:78:cb: d8:3a:2c:b9:af:a0:70:34:78:d7:bd:3c:5c:3e:1f:52:7e:5b: 4e:61:88:5f:3c:91:6f:59:ba:3c:07:ad:15:d0:a4:13:40:35: 1b:f2:77:d5:a5:5a:72:be:f2:d2:86:d8:28:34:ed:ba:88:3c: 12:3f:95:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPpPYw734vRahAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MWU2OTQ1MTEtODYxMi00OTU3LTg5ZGItOWQ1ZjY4YTQ1Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfdMXxg5fTQVJOP8c95kJa828qBqXD11NGqp ViildNhiUq5I5rwtE5/+tFhqK0IbJE5Abg91RzguYbN/Tx2zleymsjScRUe9bRPS KVntGz/ucFMq09lcsDDFkZ53JDoKjcrOsd3X12ItffJKXD+0PDi+1m7nM3iTrN38 a4iDc49hdMEUl55wMM69fP/FtRR9VviYnCzx3/dRFr12ycb1rF0bwW1S2TYwnuTu qWM795MgS0XbGxM+htBkcNUrNaA2Dd71C1WxqiWeDmVjZma9TGzz6VVRTJ1+xW4i /XrX6XpmNT+CBxHmhnCAYgrm4D6eYKIovh4g7q9kndGdvDLIsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH9rA0MXmECmKkVEwNtfTFuc9aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjY4ZDI1MWYtMTM0OS0z M2IwLWI1OGMtOGQyNjRkNTFiMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0VVM9olazXHnqRKi4BgUywXd5IMPdsRTA/z/fl9m4rIUc5CgayFU6A YjNY4/xR2ixm3X54W+FIUXwvh5NEdbXbxred9wQwkDtCj79TGX4A+YKxAiu/8+YM PkXC8O/PP3B7VydgY8iKMHngUT777MwjyRCE6+ZseGHnBrjW4tGJLmJrRqKJLxrh xJG2qqqIww0uLAnmDk/dn7fj82+spp1wNZGdc8NhyYYwz3DqOuCsVxclfCbQ3jVi GcJDb2kltuocTXp4y9g6LLmvoHA0eNe9PFw+H1J+W05hiF88kW9ZujwHrRXQpBNA NRvyd9WlWnK+8tKG2Cg07bqIPBI/lZc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:08 2025 by rpki-client