$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa File: f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa (raw, json) Hash identifier: J1AkmckrCwVdNzouC4lKUSACpjFSTEKAMzjdckb12cM= Subject key identifier: 99:E1:6B:51:07:2E:1E:CF:48:7D:97:0A:93:43:0D:F7:3B:64:37:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD3A0EBBE4BE46131E0E5F200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 104.23.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:eb:be:4b:e4:61:31:e0:e5:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=2f3a627c-b517-4981-a234-9b39180eaefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:c9:e3:f3:1a:51:77:76:46:50:06:01:3a: 82:cd:72:a1:21:75:83:38:66:97:ec:77:a2:23:82: 51:09:5c:27:a5:c4:0b:b6:a7:e8:96:5f:ec:d1:ef: 47:ee:9c:d8:e9:a8:31:cb:e3:a5:a7:d9:1c:b0:7d: aa:c0:19:3a:58:0d:eb:c8:95:63:6c:94:be:fe:d1: 93:96:fa:1d:8b:0a:46:fd:1b:f0:2d:4d:0d:3c:b9: f3:84:45:e8:3d:40:d0:7e:bf:7d:d1:9b:3a:41:f5: a0:1d:e9:e3:ba:3f:9e:bd:32:7b:2c:1a:50:5a:bc: c7:f2:d0:b9:48:1f:07:71:a4:d8:be:6a:0a:82:c5: 72:e7:a9:35:a5:2d:8e:b2:c6:b6:7e:e2:19:1e:9f: 39:f0:25:8c:31:5a:f9:7c:5b:1f:00:f0:65:13:45: 31:ff:89:7e:34:0f:44:8a:a8:85:7e:3c:d9:87:b7: 58:73:39:7f:ef:ba:a6:a8:4b:42:1f:ba:59:df:ef: 1b:57:c3:06:58:ff:8e:61:ee:07:8f:38:fc:55:08: ed:b4:4c:16:99:1c:bb:33:d0:a1:c9:61:ab:af:77: 7e:82:c3:5d:0b:02:12:f9:46:9e:08:24:02:aa:c8: d0:e2:14:23:22:cd:ee:33:41:75:33:f9:f7:a7:d2: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E1:6B:51:07:2E:1E:CF:48:7D:97:0A:93:43:0D:F7:3B:64:37:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5e:c2:1d:24:d1:9c:0f:d1:99:94:d5:c8:9f:f5:d8:88:a5: 5a:e1:43:a9:83:03:c7:df:75:61:40:d0:f8:fc:3a:8d:30:9b: 00:96:c8:e5:b0:88:05:3e:40:69:f8:7f:61:a9:66:82:dd:3e: 50:6d:0e:0b:24:b5:1d:d9:95:8b:97:e2:aa:79:ce:1b:64:f0: 89:e9:14:eb:8d:1b:68:8b:a9:ab:2a:3a:6d:80:6e:59:1d:f1: 9f:9e:a4:97:a6:ef:b2:7c:aa:3f:b0:09:11:af:00:4a:2d:15: 37:2b:ef:84:6e:db:dd:70:8b:3f:d8:9b:3a:83:fa:85:9d:b1: 75:21:b4:c5:20:c9:a5:bd:f4:67:b3:dc:be:22:9c:08:e8:e3: 78:ec:08:45:0d:1f:db:3c:a2:37:b1:d2:8e:52:d5:0f:9c:0d: f0:bf:06:8f:c5:a4:1d:53:74:61:92:20:7f:3d:5d:83:59:92: bb:7a:22:c5:87:68:25:41:71:29:00:4a:9e:24:b4:a5:13:56: 32:05:dd:2e:cc:a1:f6:7f:1e:12:98:6c:5b:3b:d7:26:88:82: 37:d0:35:7e:e8:c8:a4:1e:4c:37:96:ea:54:7e:be:a4:1b:7a: 46:f7:8f:6c:90:fa:a4:d4:ff:52:ef:e6:24:9f:ec:e1:83:de: e1:43:51:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToOu+S+RhMeDl8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MmYzYTYyN2MtYjUxNy00OTgxLWEyMzQtOWIzOTE4MGVhZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl23J4/MaUXd2RlAGATqCzXKhIXWDOGaX7Hei I4JRCVwnpcQLtqfoll/s0e9H7pzY6agxy+Olp9kcsH2qwBk6WA3ryJVjbJS+/tGT lvodiwpG/RvwLU0NPLnzhEXoPUDQfr990Zs6QfWgHenjuj+evTJ7LBpQWrzH8tC5 SB8HcaTYvmoKgsVy56k1pS2Ossa2fuIZHp858CWMMVr5fFsfAPBlE0Ux/4l+NA9E iqiFfjzZh7dYczl/77qmqEtCH7pZ3+8bV8MGWP+OYe4Hjzj8VQjttEwWmRy7M9Ch yWGrr3d+gsNdCwIS+UaeCCQCqsjQ4hQjIs3uM0F1M/n3p9K1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnha1EHLh7PSH2XCpNDDfc7ZDeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjdlYmE2MjQtYTU5Yy0z ZmNjLThhZDEtNzc5ODUxOWRjM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABewh0k0ZwP0ZmU1cif9diIpVrhQ6mDA8ffdWFA0Pj8Oo0wmwCWyOWw iAU+QGn4f2GpZoLdPlBtDgsktR3ZlYuX4qp5zhtk8InpFOuNG2iLqasqOm2Ablkd 8Z+epJem77J8qj+wCRGvAEotFTcr74Ru291wiz/YmzqD+oWdsXUhtMUgyaW99Gez 3L4inAjo43jsCEUNH9s8ojex0o5S1Q+cDfC/Bo/FpB1TdGGSIH89XYNZkrt6IsWH aCVBcSkASp4ktKUTVjIF3S7MofZ/HhKYbFs71yaIgjfQNX7oyKQeTDeW6lR+vqQb ekb3j2yQ+qTU/1Lv5iSf7OGD3uFDUSs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:25 2025 by rpki-client