$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa File: 897fb56e-da5b-3350-83c3-5691de7bc50e.roa (raw, json) Hash identifier: 6uNEkE/tJGB+KMa8iRfohmGhW+TsV1pEQxibniT7Dic= Subject key identifier: 49:FB:C7:E9:B0:75:0A:9A:E8:36:3A:CF:0D:1D:1F:F0:9F:43:4B:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B48E2135D218F6E91AEB3ECC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.23.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:13:5d:21:8f:6e:91:ae:b3:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=84780eff-4fce-4fae-8496-3df66ec1358e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:1f:19:ed:a4:5a:e2:e8:e7:b1:ef:cd:34: a1:8b:c2:43:bb:d2:5d:eb:5f:69:b0:fd:33:60:98: bc:84:42:9e:36:0e:f9:74:df:bf:ad:bc:40:ad:17: f9:8e:f2:7a:ce:24:1d:d6:e1:6e:65:bf:54:01:76: 57:fd:f5:c7:07:cd:51:44:b5:63:01:38:87:ac:9a: f0:d9:48:5a:96:80:b4:c1:a3:97:bf:13:07:f0:eb: f4:ce:95:51:10:d8:00:4a:96:47:4f:42:fd:d8:75: 3b:d7:a3:ee:f1:ca:06:e3:87:02:34:1b:6c:fa:e6: 8b:71:97:8d:64:c8:cb:38:32:26:20:eb:32:1a:a0: 03:dd:49:3d:fa:8f:18:cf:7a:f9:16:5f:18:f5:93: 2b:58:f6:f0:71:02:45:5d:77:55:5f:77:de:ca:68: 1d:ae:2c:fe:32:3d:83:a6:8b:7e:d9:37:df:64:eb: 6b:a4:23:40:83:dc:2b:7b:a3:59:70:18:de:e0:b0: 31:f7:de:79:ac:ae:72:15:8e:f3:e3:a3:bd:5a:26: e7:8d:e1:73:3f:8e:7b:28:c1:27:62:ff:ff:c6:c9: 32:c3:b2:ed:17:7a:18:98:f4:c5:07:d2:ef:3a:c8: d1:e1:f5:e7:0a:f2:91:39:b9:c4:65:ae:1d:f0:1c: bc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FB:C7:E9:B0:75:0A:9A:E8:36:3A:CF:0D:1D:1F:F0:9F:43:4B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ca:bd:3a:3d:e0:dc:2e:a3:de:ca:13:62:f8:f4:87:d9:cb: 62:38:d2:b7:a9:24:6f:23:22:1c:e6:2d:41:bc:9a:7f:c8:f5: fb:06:7c:ab:fc:84:34:e9:af:c2:c4:bf:76:17:c5:90:09:6b: 34:47:64:95:93:ae:db:4e:00:a5:4f:3f:82:30:99:d1:3f:6d: 3e:83:53:e4:3a:05:bd:1b:19:fe:9d:3a:0a:09:bc:60:df:6d: 2f:2b:21:6e:74:fe:0b:da:72:65:85:ae:4b:f7:33:b5:90:bb: aa:ae:a8:43:49:37:2b:44:0c:5b:8f:fe:09:43:e0:97:22:0e: 36:5d:81:1f:b7:9d:7f:60:6c:71:10:5f:1c:8d:65:b0:60:49: eb:08:5d:a9:fd:a3:4d:31:25:d5:66:a3:c4:dd:a7:43:8b:ca: 53:7a:fc:3f:d6:de:b9:f3:9e:ea:b0:b7:51:8a:76:e0:a7:15: 65:0e:3a:9d:f9:f3:0c:91:c7:78:9e:37:91:db:25:1f:03:d9: e1:b5:98:17:c0:13:d4:c0:f5:4b:c9:1c:8c:0d:e7:be:85:c3: d6:ad:ec:e2:7d:d0:6c:ce:72:65:01:53:c5:23:4f:f9:c7:ac: 2a:4a:c6:5f:6a:52:8a:82:1c:d3:76:48:34:ca:c5:3c:9c:30: db:63:d5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hNdIY9uka6z7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODQ3ODBlZmYtNGZjZS00ZmFlLTg0OTYtM2RmNjZlYzEzNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUIfGe2kWuLo57HvzTShi8JDu9Jd619psP0z YJi8hEKeNg75dN+/rbxArRf5jvJ6ziQd1uFuZb9UAXZX/fXHB81RRLVjATiHrJrw 2UhaloC0waOXvxMH8Ov0zpVRENgASpZHT0L92HU716Pu8coG44cCNBts+uaLcZeN ZMjLODImIOsyGqAD3Uk9+o8Yz3r5Fl8Y9ZMrWPbwcQJFXXdVX3feymgdriz+Mj2D pot+2TffZOtrpCNAg9wre6NZcBje4LAx9955rK5yFY7z46O9WibnjeFzP457KMEn Yv//xskyw7LtF3oYmPTFB9LvOsjR4fXnCvKRObnEZa4d8By8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn7x+mwdQqa6DY6zw0dH/CfQ0t3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODk3ZmI1NmUtZGE1Yi0z MzUwLTgzYzMtNTY5MWRlN2JjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPKvTo94Nwuo97KE2L49IfZy2I40repJG8jIhzmLUG8mn/I9fsGfKv8 hDTpr8LEv3YXxZAJazRHZJWTrttOAKVPP4IwmdE/bT6DU+Q6Bb0bGf6dOgoJvGDf bS8rIW50/gvacmWFrkv3M7WQu6quqENJNytEDFuP/glD4JciDjZdgR+3nX9gbHEQ XxyNZbBgSesIXan9o00xJdVmo8Tdp0OLylN6/D/W3rnznuqwt1GKduCnFWUOOp35 8wyRx3ieN5HbJR8D2eG1mBfAE9TA9UvJHIwN576Fw9at7OJ90GzOcmUBU8UjT/nH rCpKxl9qUoqCHNN2SDTKxTycMNtj1T0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:57:14 2025 by rpki-client