$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec291f74-3af2-3b38-ade4-53f2d3066186.roa File: ec291f74-3af2-3b38-ade4-53f2d3066186.roa (raw, json) Hash identifier: pAKZlDasjpMPTdcO/U9SxRv0CVlwmEziiQ6tUEz4P2k= Subject key identifier: BB:87:91:4A:D6:D0:34:B7:FE:EC:29:E8:66:A7:BD:E4:D2:54:73:44 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B92DD8B9932B304E063071060 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec291f74-3af2-3b38-ade4-53f2d3066186.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 13335 IP address blocks: 104.23.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:8b:99:32:b3:04:e0:63:07:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=81d5f502-f5e2-4357-a260-5ba824d0d36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:53:d3:06:b3:93:8e:3c:26:64:96:bd:4d:b7: d7:3e:d2:03:7c:26:be:10:3e:cd:ca:5a:83:10:14: ca:b7:42:9e:ef:68:d4:08:76:9e:be:6f:92:95:98: c2:86:a3:2e:1c:c7:91:11:34:ac:bc:1a:52:5c:97: cc:d2:68:e4:28:8c:e7:5e:dd:76:e6:58:e0:82:79: c5:d3:4d:4c:97:83:a4:d8:4c:cc:84:53:7e:13:7b: 62:3f:ab:96:e1:49:1c:28:97:29:13:d9:20:de:8c: 58:ab:9a:b3:f2:de:30:8d:86:50:c7:63:45:fa:b2: ee:5f:a0:23:66:3a:e0:57:9e:54:41:eb:99:c5:b0: f6:09:b8:91:d9:2a:0f:f9:dc:ae:cb:9a:ed:a5:e5: 25:84:76:41:38:23:9e:15:16:26:c3:c3:ea:79:f8: e7:63:70:ee:1e:45:dd:5b:2d:c7:28:9a:85:a5:3d: f4:54:a1:03:7b:6a:cb:86:25:95:84:11:2d:ba:a4: 7d:0d:bc:5b:48:c8:34:70:bf:11:a6:c5:95:62:16: cc:dc:5d:7e:b6:59:f3:e1:8a:df:4d:a6:87:9e:8b: a8:5e:0f:14:25:bb:c9:4f:71:0d:98:c6:5f:9b:d2: f7:00:50:db:53:dd:3c:ff:da:30:2b:af:39:54:7a: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:87:91:4A:D6:D0:34:B7:FE:EC:29:E8:66:A7:BD:E4:D2:54:73:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec291f74-3af2-3b38-ade4-53f2d3066186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b4:90:4b:3b:2c:f4:ea:6d:64:94:ea:48:76:0e:21:0e:23: 0e:7c:43:89:ee:d6:86:37:1d:99:7e:08:b6:da:dd:75:04:b4: 78:fd:83:64:f3:32:8b:86:63:55:84:ae:41:67:47:3a:16:56: cd:26:52:76:8d:b3:24:dc:62:3e:60:0b:38:d1:93:fa:a9:69: 55:3b:d9:49:af:e5:db:ab:e5:37:df:17:b0:59:cd:15:82:1b: 47:66:c0:dd:fd:54:c2:07:fd:34:51:e1:54:d9:24:c7:47:e1: 44:a2:7a:fc:b9:84:72:82:13:a5:59:19:24:ae:55:69:ae:ae: 80:cc:28:67:95:a8:47:ce:63:f8:52:da:01:0f:cd:77:d2:a7: 43:bf:b2:cc:c2:65:90:c5:d4:32:e7:39:56:e3:b1:d3:0d:ee: a0:18:83:ee:21:b7:1c:9e:d7:cc:90:fd:a3:7e:53:ff:89:e0: 15:84:b8:12:6b:5c:fe:f3:cb:2f:08:1b:c4:e8:53:b1:58:9d: fe:a7:48:b7:b7:09:ba:6d:d7:f6:06:d1:e8:e2:04:73:2a:d3: 09:a5:66:18:00:59:0c:e8:dd:44:35:00:ad:ed:34:39:a8:7f: 9b:24:7b:2f:f3:00:7a:b7:d5:f1:54:70:cb:48:2c:36:c0:5f: b6:35:95:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YuZMrME4GMHEGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ODFkNWY1MDItZjVlMi00MzU3LWEyNjAtNWJhODI0ZDBkMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lPTBrOTjjwmZJa9TbfXPtIDfCa+ED7NylqD EBTKt0Ke72jUCHaevm+SlZjChqMuHMeRETSsvBpSXJfM0mjkKIznXt125ljggnnF 001Ml4Ok2EzMhFN+E3tiP6uW4UkcKJcpE9kg3oxYq5qz8t4wjYZQx2NF+rLuX6Aj ZjrgV55UQeuZxbD2CbiR2SoP+dyuy5rtpeUlhHZBOCOeFRYmw8PqefjnY3DuHkXd Wy3HKJqFpT30VKEDe2rLhiWVhBEtuqR9DbxbSMg0cL8RpsWVYhbM3F1+tlnz4Yrf TaaHnouoXg8UJbvJT3ENmMZfm9L3AFDbU908/9owK685VHrYPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuHkUrW0DS3/uwp6GanveTSVHNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWMyOTFmNzQtM2FmMi0z YjM4LWFkZTQtNTNmMmQzMDY2MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu0kEs7LPTqbWSU6kh2DiEOIw58Q4nu1oY3HZl+CLba3XUEtHj9g2Tz MouGY1WErkFnRzoWVs0mUnaNsyTcYj5gCzjRk/qpaVU72Umv5dur5TffF7BZzRWC G0dmwN39VMIH/TRR4VTZJMdH4USievy5hHKCE6VZGSSuVWmuroDMKGeVqEfOY/hS 2gEPzXfSp0O/sszCZZDF1DLnOVbjsdMN7qAYg+4htxye18yQ/aN+U/+J4BWEuBJr XP7zyy8IG8ToU7FYnf6nSLe3Cbpt1/YG0ejiBHMq0wmlZhgAWQzo3UQ1AK3tNDmo f5skey/zAHq31fFUcMtILDbAX7Y1ldU= -----END CERTIFICATE-----Generated at Sun Oct 19 23:53:29 2025 by rpki-client