$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a21b4f36-d351-3768-9604-fed95bbad345.roa File: a21b4f36-d351-3768-9604-fed95bbad345.roa (raw, json) Hash identifier: 0/xvm/G8dIlzPx33goutKvLr6POxsRUpCInv2KqvY2k= Subject key identifier: A2:DA:12:A5:6D:D3:C4:C7:71:36:10:51:87:8E:65:2A:30:CF:13:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC016541EC2BF04A7FA56CE00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a21b4f36-d351-3768-9604-fed95bbad345.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 104.23.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:54:1e:c2:bf:04:a7:fa:56:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=62d64375-cc90-482b-9772-86adc6825475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:90:d0:fb:3c:5e:4f:f8:28:02:09:63:fc: bc:2f:9b:e5:92:54:58:5c:10:2b:bc:cb:21:6b:b7: e8:4e:7d:30:57:a8:1f:a6:ff:d4:82:7e:37:72:3f: 59:42:ea:87:9b:78:66:e6:ac:8c:60:ce:5d:05:b6: 8d:4b:13:47:76:5e:37:b2:53:61:49:de:fe:cc:1b: bf:32:7d:f4:ca:03:fb:34:60:54:29:b6:df:51:63: 35:e1:de:76:15:8c:52:79:3d:6c:11:5c:04:5b:d5: cf:c7:fb:20:ac:fb:e3:76:82:13:e8:82:24:8c:8e: ed:10:09:3f:f9:d8:b5:c9:54:98:19:5f:7b:79:74: f0:aa:00:7b:71:b7:d8:d6:2d:80:ac:49:f6:29:52: 10:1e:7b:b6:fb:f4:dc:7f:be:c7:6c:40:e4:48:b5: 50:e0:7c:02:53:25:7c:9d:83:ae:85:7e:b0:35:90: 49:56:52:36:42:ba:4c:62:a1:57:61:68:a8:98:87: b0:04:cb:c8:d9:54:ca:69:87:ad:00:da:99:66:09: 91:fc:1a:fb:9a:ad:33:87:ce:0a:e6:c6:8c:b2:d6: 02:bd:7a:5a:dc:15:2a:a3:60:0c:29:3c:af:8d:31: 77:c1:9b:96:ce:5b:71:4e:f7:66:71:19:7b:8b:b6: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:12:A5:6D:D3:C4:C7:71:36:10:51:87:8E:65:2A:30:CF:13:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a21b4f36-d351-3768-9604-fed95bbad345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:88:f9:e5:ef:e4:13:d6:b0:eb:17:a2:68:86:37:4d:49:fb: 8d:83:54:51:35:ca:01:eb:55:5e:b5:df:96:e4:b7:7e:5a:cb: c8:39:d9:56:91:a7:73:4e:67:1e:54:72:60:a6:4e:92:17:68: 4b:ae:c8:c3:92:76:5c:97:c9:40:16:e2:48:25:bd:74:bd:31: e4:10:3e:97:1b:1b:cf:4e:4d:2c:e1:de:cc:f8:26:f4:b7:89: 5b:06:fc:c7:6a:92:01:1d:97:eb:7b:66:94:82:b8:53:c1:96: 63:53:ee:45:3d:15:b3:85:ce:08:f0:e7:43:99:69:c3:14:b8: 91:f3:ee:ca:33:37:43:0e:fa:29:31:79:a6:50:6f:d2:11:0e: 64:51:5e:00:c0:43:61:1b:b1:dc:66:b9:eb:2d:c7:af:c6:6d: 3c:c7:4a:47:6b:1f:d5:67:c1:b8:90:f5:17:9f:44:fb:38:6e: f9:83:60:8f:ac:e4:ab:11:b9:af:d5:16:95:97:71:28:21:72: 5d:bf:fb:bb:1e:81:2e:01:f4:d0:48:63:29:98:f9:1f:6a:19: 68:0d:e1:58:92:c4:20:ee:fd:70:37:d5:0b:9a:07:76:a5:34: c0:46:05:9d:5d:71:0c:ed:13:76:78:7d:56:2f:5a:39:18:a2: 8a:cd:e7:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFlQewr8Ep/pWzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NjJkNjQzNzUtY2M5MC00ODJiLTk3NzItODZhZGM2ODI1NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJWQ0Ps8Xk/4KAIJY/y8L5vlklRYXBArvMsh a7foTn0wV6gfpv/Ugn43cj9ZQuqHm3hm5qyMYM5dBbaNSxNHdl43slNhSd7+zBu/ Mn30ygP7NGBUKbbfUWM14d52FYxSeT1sEVwEW9XPx/sgrPvjdoIT6IIkjI7tEAk/ +di1yVSYGV97eXTwqgB7cbfY1i2ArEn2KVIQHnu2+/Tcf77HbEDkSLVQ4HwCUyV8 nYOuhX6wNZBJVlI2QrpMYqFXYWiomIewBMvI2VTKaYetANqZZgmR/Br7mq0zh84K 5saMstYCvXpa3BUqo2AMKTyvjTF3wZuWzltxTvdmcRl7i7aiXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLaEqVt08THcTYQUYeOZSowzxN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTIxYjRmMzYtZDM1MS0z NzY4LTk2MDQtZmVkOTViYmFkMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaI+eXv5BPWsOsXomiGN01J+42DVFE1ygHrVV6135bkt35ay8g52VaR p3NOZx5UcmCmTpIXaEuuyMOSdlyXyUAW4kglvXS9MeQQPpcbG89OTSzh3sz4JvS3 iVsG/MdqkgEdl+t7ZpSCuFPBlmNT7kU9FbOFzgjw50OZacMUuJHz7sozN0MO+ikx eaZQb9IRDmRRXgDAQ2Ebsdxmuestx6/GbTzHSkdrH9VnwbiQ9RefRPs4bvmDYI+s 5KsRua/VFpWXcSghcl2/+7segS4B9NBIYymY+R9qGWgN4ViSxCDu/XA31QuaB3al NMBGBZ1dcQztE3Z4fVYvWjkYoorN52Y= -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:11 2025 by rpki-client