$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae02812-1f43-32c0-99c6-4c6c09ac1924.roa File: 8ae02812-1f43-32c0-99c6-4c6c09ac1924.roa (raw, json) Hash identifier: kw6x1UYK+2GrKJJz5UMb1eT9qovJB5Os9Hj9asqR9TQ= Subject key identifier: B3:3D:8A:B4:D9:04:28:1F:69:0B:DD:21:BD:E8:CD:38:A1:0B:42:98 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B4A471675D2D6AA4060406B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae02812-1f43-32c0-99c6-4c6c09ac1924.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 13335 IP address blocks: 104.23.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:16:75:d2:d6:aa:40:60:40:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=21e4c6fd-4027-4d4a-b7ae-0648f9b3d9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:7e:5a:64:ed:f8:63:00:43:fe:31:c7:c5: cb:70:b8:0e:20:78:0f:0d:dc:20:db:0e:5b:74:e3: be:9b:18:ac:67:af:43:4a:0a:b0:aa:5d:7b:96:49: 1a:05:38:09:f7:d5:e4:e0:89:63:67:fe:a8:18:f6: a4:c7:27:07:18:71:78:7f:60:e1:c3:92:1c:3b:f2: 7d:20:b8:ff:a7:8c:4d:de:04:fa:43:0a:8a:96:54: 58:74:be:74:f2:d2:71:00:31:40:69:46:d3:7a:b3: a1:cf:75:23:c4:71:3d:ab:c4:52:44:19:3b:a7:f6: d8:22:4a:cc:e9:f5:6e:8f:c5:70:05:bf:10:b9:a6: 07:28:ae:15:79:87:54:18:2d:d6:04:7a:e2:02:36: c4:7b:d1:6b:87:fc:07:04:e1:d8:3f:08:ee:64:3d: ba:7d:df:0c:df:6c:5a:7a:74:41:90:04:00:8d:fd: f6:f7:32:1c:a8:43:ab:30:6f:db:a2:4f:c4:ff:ee: 6d:08:a5:d1:e1:5f:13:87:09:72:19:ec:58:31:75: 33:bb:85:b7:4e:ef:64:08:3c:f8:70:b3:f0:12:3f: 32:6c:af:18:2d:72:ce:5d:81:e5:81:79:93:7d:f7: 11:62:50:ea:14:01:7e:1a:c4:6e:58:74:61:9d:e2: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:8A:B4:D9:04:28:1F:69:0B:DD:21:BD:E8:CD:38:A1:0B:42:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae02812-1f43-32c0-99c6-4c6c09ac1924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:9e:3e:7a:f9:bb:15:42:b5:27:5f:6c:74:51:e1:bf:a8:c8: fb:2d:7a:c0:a5:25:c9:d2:90:6d:cc:e7:41:ea:de:cc:a3:08: 7a:0b:e7:ee:66:af:ad:6f:e9:80:3a:3e:6e:c6:10:e8:0a:a8: 63:45:a2:76:d5:fb:a5:64:5a:08:f7:29:b5:0a:4a:2e:b5:ac: 5f:c5:87:22:56:d0:f0:02:ac:86:da:3f:f6:71:12:bb:aa:43: 22:33:f9:07:43:af:0a:87:f2:8a:7e:9c:81:10:89:e3:87:0b: 7b:39:93:e9:7b:38:7d:d6:13:4b:fd:e3:ae:ce:06:0b:77:57: 54:a6:dd:80:26:3a:d3:f3:a6:d2:5b:7d:0a:03:fd:f8:51:3f: 92:3c:0d:73:10:bb:c7:39:8b:4e:14:57:f7:13:1f:04:5a:57: 81:ee:8c:fb:21:c0:42:c2:ad:a3:71:c3:f2:23:6a:dd:bb:93: 78:74:a9:e6:f8:50:22:ee:69:dd:62:a5:2a:96:1f:d9:c4:5d: 0d:1f:2b:98:1f:f8:91:0f:d8:5f:98:11:03:13:03:ce:d2:54: c4:d5:98:00:be:88:a5:28:a8:7d:ca:e1:59:9d:69:5a:4c:c6: 0f:ef:df:24:e9:d5:54:c8:e6:dc:14:82:48:70:3b:0c:29:cd: d0:36:af:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxZ10taqQGBAa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MjFlNGM2ZmQtNDAyNy00ZDRhLWI3YWUtMDY0OGY5YjNkOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifV+WmTt+GMAQ/4xx8XLcLgOIHgPDdwg2w5b dOO+mxisZ69DSgqwql17lkkaBTgJ99Xk4IljZ/6oGPakxycHGHF4f2Dhw5IcO/J9 ILj/p4xN3gT6QwqKllRYdL508tJxADFAaUbTerOhz3UjxHE9q8RSRBk7p/bYIkrM 6fVuj8VwBb8QuaYHKK4VeYdUGC3WBHriAjbEe9Frh/wHBOHYPwjuZD26fd8M32xa enRBkAQAjf329zIcqEOrMG/bok/E/+5tCKXR4V8ThwlyGexYMXUzu4W3Tu9kCDz4 cLPwEj8ybK8YLXLOXYHlgXmTffcRYlDqFAF+GsRuWHRhneIYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM9irTZBCgfaQvdIb3ozTihC0KYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGFlMDI4MTItMWY0My0z MmMwLTk5YzYtNGM2YzA5YWMxOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGePnr5uxVCtSdfbHRR4b+oyPstesClJcnSkG3M50Hq3syjCHoL5+5m r61v6YA6Pm7GEOgKqGNFonbV+6VkWgj3KbUKSi61rF/FhyJW0PACrIbaP/ZxEruq QyIz+QdDrwqH8op+nIEQieOHC3s5k+l7OH3WE0v9467OBgt3V1Sm3YAmOtPzptJb fQoD/fhRP5I8DXMQu8c5i04UV/cTHwRaV4HujPshwELCraNxw/Ijat27k3h0qeb4 UCLuad1ipSqWH9nEXQ0fK5gf+JEP2F+YEQMTA87SVMTVmAC+iKUoqH3K4VmdaVpM xg/v3yTp1VTI5twUgkhwOwwpzdA2r+o= -----END CERTIFICATE-----Generated at Sun Oct 19 23:57:56 2025 by rpki-client