$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa File: c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa (raw, json) Hash identifier: 1nIQSsAFm3lULWR6CE9Ncpt3RYF3dSTCcyuhQE87eM8= Subject key identifier: A7:08:A4:24:85:89:DB:EE:B3:FD:89:3C:03:E1:A9:04:8C:CE:A8:64 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9D59E6653DADCA0A3B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.23.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9d:59:e6:65:3d:ad:ca:0a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=b9200d08-3ca9-4fcc-8189-8ad369d8d1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:f8:27:8b:29:11:d2:6c:a6:9b:48:a4:be: 19:15:5b:af:df:54:01:0e:06:49:f4:35:b9:d9:44: 20:85:33:ac:7e:6e:4b:4b:ff:ac:ec:66:59:9a:e0: f3:92:98:da:53:57:36:53:82:dd:f8:56:2b:0d:ef: e1:ce:c8:18:a2:c4:80:7b:31:bd:4a:f5:f4:3f:29: 58:15:84:8b:72:f6:83:94:40:af:bd:87:83:18:1a: 5b:23:f9:a9:d3:6a:38:30:4c:f5:5b:d2:c6:67:6e: 1a:25:4c:c1:82:59:e3:d7:6b:cd:f9:32:a3:a3:66: 74:e4:65:75:a8:87:cd:c2:02:13:51:94:23:a9:d2: 4b:99:12:2c:1d:5b:d6:a1:82:f2:a8:a5:8a:3b:7f: 0b:b1:f2:31:c4:4a:de:aa:59:8e:79:bf:20:9e:20: 3e:f4:e1:a5:93:96:a9:40:90:af:2a:35:29:d5:93: 25:af:a8:16:4a:a4:69:ee:49:43:6b:44:ac:64:1d: c7:c0:7b:96:09:f7:1d:6b:b3:80:75:69:c4:6c:c0: bb:e2:7e:52:81:50:8f:1d:19:83:0e:58:d9:16:56: 14:a8:8d:22:6a:1f:7d:47:79:e3:65:7e:4d:d8:69: fe:93:ba:0f:5c:dc:2f:cd:f6:f5:a6:25:b9:31:e2: ee:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:08:A4:24:85:89:DB:EE:B3:FD:89:3C:03:E1:A9:04:8C:CE:A8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f0:13:43:b8:84:9e:4d:b9:11:26:e9:b6:b0:e0:dd:f3:55: 6a:22:6b:b1:52:db:e5:79:1a:0d:f5:f4:d1:ad:5b:eb:c1:77: 38:32:c7:01:28:0d:6c:46:17:6b:c5:85:07:5b:e6:df:d4:60: 0b:cf:67:c0:4d:19:a8:7c:06:af:02:89:7d:db:ed:82:68:00: 68:6b:58:c1:cc:2e:e2:f4:25:76:a2:c0:0c:ac:5c:8c:4a:8c: fb:92:cd:92:73:1a:ec:91:67:9b:60:83:3e:93:4f:74:53:b4: 05:62:46:d3:d2:83:ab:d8:87:63:ac:f0:39:97:6b:93:8a:11: 9c:bf:05:9d:31:74:cc:8a:0e:9d:52:02:9f:55:32:08:0c:a3: 4e:26:bf:49:ee:56:ec:a7:4d:19:e6:79:02:49:8e:a9:85:aa: 06:36:c3:00:fe:79:ec:37:32:f3:b9:87:95:e0:55:67:4d:41: 56:c4:e6:96:87:20:b7:c1:da:33:25:04:01:d2:dd:a3:dc:e7: 1a:c5:ca:28:12:4e:f1:b7:25:3e:7a:74:84:c8:d3:71:1c:1a: 3b:ea:94:ab:6b:6e:12:5a:2c:47:f8:5a:a4:1d:6a:e8:70:aa: 38:f3:85:d2:0c:33:d9:d1:ca:7b:1c:51:d7:22:46:53:86:6c: 20:e4:6b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq51Z5mU9rcoKO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YjkyMDBkMDgtM2NhOS00ZmNjLTgxODktOGFkMzY5ZDhkMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3n4J4spEdJspptIpL4ZFVuv31QBDgZJ9DW5 2UQghTOsfm5LS/+s7GZZmuDzkpjaU1c2U4Ld+FYrDe/hzsgYosSAezG9SvX0PylY FYSLcvaDlECvvYeDGBpbI/mp02o4MEz1W9LGZ24aJUzBglnj12vN+TKjo2Z05GV1 qIfNwgITUZQjqdJLmRIsHVvWoYLyqKWKO38LsfIxxEreqlmOeb8gniA+9OGlk5ap QJCvKjUp1ZMlr6gWSqRp7klDa0SsZB3HwHuWCfcda7OAdWnEbMC74n5SgVCPHRmD DljZFlYUqI0iah99R3njZX5N2Gn+k7oPXNwvzfb1piW5MeLusQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcIpCSFidvus/2JPAPhqQSMzqhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzkyNzJmNjktZDI3OC0z ZTI0LWIyZjktMjFlN2FhOGYyMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzwE0O4hJ5NuREm6baw4N3zVWoia7FS2+V5Gg319NGtW+vBdzgyxwEo DWxGF2vFhQdb5t/UYAvPZ8BNGah8Bq8CiX3b7YJoAGhrWMHMLuL0JXaiwAysXIxK jPuSzZJzGuyRZ5tggz6TT3RTtAViRtPSg6vYh2Os8DmXa5OKEZy/BZ0xdMyKDp1S Ap9VMggMo04mv0nuVuynTRnmeQJJjqmFqgY2wwD+eew3MvO5h5XgVWdNQVbE5paH ILfB2jMlBAHS3aPc5xrFyigSTvG3JT56dITI03EcGjvqlKtrbhJaLEf4WqQdauhw qjjzhdIMM9nRynscUdciRlOGbCDka/s= -----END CERTIFICATE-----Generated at Sat Aug 23 17:30:46 2025 by rpki-client