$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed4eca3d-3aa8-3609-8658-1158a2cd020d.roa File: ed4eca3d-3aa8-3609-8658-1158a2cd020d.roa (raw, json) Hash identifier: AjuaXFovu1E9o72tp+W/mO2SNrIWZey8D6mKiqSNx18= Subject key identifier: BC:47:53:9E:8A:0F:57:8E:49:C8:5B:52:8E:88:39:64:88:F9:3A:DE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B87B219310BFA2FB4F56AE400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed4eca3d-3aa8-3609-8658-1158a2cd020d.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.23.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:19:31:0b:fa:2f:b4:f5:6a:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=8f0322dd-6467-4dc6-b186-258040e6b921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:d3:0a:b5:49:7a:a9:13:50:52:1c:ae:eb: 4e:89:65:60:1f:b0:1b:56:5e:98:08:24:2f:68:e5: e3:fc:4b:6b:6c:a1:b9:08:53:56:a3:ea:2d:b4:7a: 24:ab:31:1f:7a:f8:15:b4:d6:47:2a:e9:a3:92:67: 36:d7:35:54:d1:43:90:d0:83:ae:11:6d:64:bf:04: 87:99:e1:81:38:92:52:47:6b:27:2c:2c:f1:72:5c: a6:8b:94:77:d4:8e:ef:aa:38:3c:b1:e2:4c:ae:b6: a4:e0:b7:63:92:7e:14:43:3c:4b:d9:73:6a:e6:14: 4f:42:03:dc:89:00:3e:59:1d:29:b8:ab:a8:64:ec: a3:07:e5:e1:c2:58:59:e9:f8:43:cd:19:4b:c1:aa: b3:cb:56:81:6d:4b:ea:73:c2:ea:8c:16:11:e1:6a: 57:de:b5:4f:88:41:27:76:5a:0e:b1:d3:0b:34:f9: cd:7c:ee:96:ef:82:61:80:6d:ae:1a:f5:39:fb:d1: ad:fd:83:c8:83:5d:1c:5f:f7:a7:85:c4:fa:a8:da: dc:49:db:e0:63:79:38:9b:fd:e7:70:e3:3d:1e:45: a5:73:1b:80:7b:02:c8:c0:da:77:59:3b:49:59:87: 05:2d:5c:74:88:7b:c9:58:47:99:bc:74:c3:0b:21: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:47:53:9E:8A:0F:57:8E:49:C8:5B:52:8E:88:39:64:88:F9:3A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed4eca3d-3aa8-3609-8658-1158a2cd020d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:79:b8:db:e7:46:20:da:1e:85:8f:60:b7:5c:c3:d8:97:53: 41:39:32:d6:33:1b:51:e2:34:65:93:de:c3:de:6a:14:4a:7f: 81:c5:60:f0:71:81:a6:d7:56:3b:44:01:47:0d:36:e7:16:08: 0b:41:bf:d9:e0:9d:c3:36:f2:99:c4:d3:48:9c:a2:d1:de:35: 85:88:cf:91:60:bf:88:25:55:7b:e4:6a:5e:5b:fa:29:24:22: 22:fb:1d:b8:22:22:8d:ee:ae:6a:df:60:cf:ec:2d:dc:5c:b8: 84:a1:00:b1:07:2d:b8:41:98:8a:35:5e:ba:36:ea:fe:a4:54: 0f:8d:e2:20:90:45:73:41:64:5a:63:bf:4c:20:52:81:1c:d2: 87:4a:8e:56:95:76:61:dd:9d:a3:b0:fa:da:bb:49:a9:8d:c5: 22:bb:de:bc:9f:0c:4d:48:5f:0c:9f:59:40:3e:d1:1b:23:73: f4:17:ca:39:f8:0f:e1:aa:f3:83:e4:be:4f:71:03:d2:7e:e9: cf:df:15:e3:30:54:cf:a2:76:6f:e3:d5:16:d2:9d:f8:9b:18: 09:4c:91:1e:fa:f9:a0:9b:98:12:ea:53:59:a2:b0:35:ae:1a: ce:43:f7:a0:2d:5c:f4:fb:68:da:e9:54:2a:e1:8b:a8:6c:5c: 82:9c:7c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshkxC/ovtPVq5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OGYwMzIyZGQtNjQ2Ny00ZGM2LWIxODYtMjU4MDQwZTZiOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCzTCrVJeqkTUFIcrutOiWVgH7AbVl6YCCQv aOXj/EtrbKG5CFNWo+ottHokqzEfevgVtNZHKumjkmc21zVU0UOQ0IOuEW1kvwSH meGBOJJSR2snLCzxclymi5R31I7vqjg8seJMrrak4Ldjkn4UQzxL2XNq5hRPQgPc iQA+WR0puKuoZOyjB+XhwlhZ6fhDzRlLwaqzy1aBbUvqc8LqjBYR4WpX3rVPiEEn dloOsdMLNPnNfO6W74JhgG2uGvU5+9Gt/YPIg10cX/enhcT6qNrcSdvgY3k4m/3n cOM9HkWlcxuAewLIwNp3WTtJWYcFLVx0iHvJWEeZvHTDCyEtDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxHU56KD1eOSchbUo6IOWSI+TreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWQ0ZWNhM2QtM2FhOC0z NjA5LTg2NTgtMTE1OGEyY2QwMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBeqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh5uNvnRiDaHoWPYLdcw9iXU0E5MtYzG1HiNGWT3sPeahRKf4HFYPBx gabXVjtEAUcNNucWCAtBv9ngncM28pnE00icotHeNYWIz5Fgv4glVXvkal5b+ikk IiL7HbgiIo3urmrfYM/sLdxcuIShALEHLbhBmIo1Xro26v6kVA+N4iCQRXNBZFpj v0wgUoEc0odKjlaVdmHdnaOw+tq7SamNxSK73ryfDE1IXwyfWUA+0Rsjc/QXyjn4 D+Gq84Pkvk9xA9J+6c/fFeMwVM+idm/j1RbSnfibGAlMkR76+aCbmBLqU1misDWu Gs5D96AtXPT7aNrpVCrhi6hsXIKcfJQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:58:14 2025 by rpki-client