$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa File: fd0ad239-50b5-3adc-a9f2-317315ec4039.roa (raw, json) Hash identifier: /yFneWt1G0WEsCr66JrU0LsI2SV2DVoLp9R5xaGvnPo= Subject key identifier: 16:51:55:19:75:7F:41:83:BD:2E:6F:DA:F1:4B:43:84:76:52:39:79 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B92DD8FDE1BF60F0562AA9280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 13335 IP address blocks: 104.23.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:8f:de:1b:f6:0f:05:62:aa:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=d8223179-523a-4ba1-9f93-e86b7ab91129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:ef:be:f4:9f:fc:3d:a9:02:33:9f:aa:26: 07:b1:f9:4f:5a:5d:8a:c3:ad:f1:55:9b:1e:22:b7: ba:8b:01:7f:7a:dd:ae:63:34:40:dc:0b:42:df:a2: 3d:13:8d:7e:ab:2e:e7:65:26:ca:b7:36:9c:ff:cd: 70:a9:3f:0b:90:af:cf:f2:73:84:5f:48:ea:5e:ed: 74:f2:64:b9:84:31:72:79:dd:f4:00:dc:cc:6b:1e: 2f:ed:99:18:e7:47:68:7b:34:45:69:c7:97:14:cc: f9:64:43:3d:ce:6f:78:cb:06:d7:b7:ec:bc:70:26: 17:56:c7:57:aa:2e:27:6b:a5:ac:e8:67:fd:8c:38: 7f:a4:ba:2c:f2:7c:19:5d:06:ce:b2:4b:ea:4c:70: d6:10:f7:92:46:fc:0d:79:4b:91:1e:2a:cb:e6:0c: 27:21:57:cd:c1:06:7a:7a:43:6e:7d:1a:ce:76:e5: df:c3:46:ba:1f:7f:57:97:3b:ed:2a:33:5b:bb:ca: 84:ab:b0:4c:24:1f:f2:66:eb:c8:4a:f8:58:88:a4: cc:f4:8d:1f:30:a7:60:66:ca:15:09:c7:35:46:c3: 02:80:ba:a7:77:cc:30:68:dd:41:6d:ba:5b:53:8f: fa:47:be:99:e0:e6:c7:7e:20:ed:dd:c9:12:50:49: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:55:19:75:7F:41:83:BD:2E:6F:DA:F1:4B:43:84:76:52:39:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2f:2d:29:98:d7:41:44:cd:fe:db:e7:b5:1a:ae:09:2a:1f: b8:0f:18:37:bc:25:bc:f0:a0:5f:08:17:7a:e7:63:6a:dd:ed: 4c:64:cb:cf:80:c4:ae:43:b8:21:ee:37:3f:93:b9:fc:05:da: da:05:27:71:c6:3c:88:d0:eb:64:b7:2c:4c:4a:b2:16:74:f8: 4f:94:2d:ac:64:cf:69:9a:7e:8d:dd:cb:26:44:d8:3c:38:ad: 68:e9:8c:45:d8:0d:e4:66:a4:fd:2e:61:73:1a:34:55:62:b1: fc:1f:35:43:f7:e1:dd:f9:41:f2:1e:a7:b1:ef:4b:dd:76:1d: 75:e0:bd:42:70:5a:a4:35:fc:06:be:1e:95:30:47:05:46:ea: f3:f3:e7:68:24:2a:73:6c:cb:64:bf:ef:96:da:ce:8d:cf:c9: 96:07:8f:cf:82:ff:19:58:07:1d:fe:4f:8a:8a:5e:60:af:83: 64:21:52:ff:0e:64:75:3d:41:60:e4:1c:2f:3b:30:56:7b:e4: fa:e7:ea:d6:0c:2a:b3:f2:88:f4:e7:f1:56:73:9c:b5:9d:c4: e9:35:b7:19:42:8a:e4:a0:58:01:a7:01:5d:63:12:19:d2:93: 04:8b:24:d5:d7:62:99:a1:14:3d:da:5b:c1:8a:12:33:fa:44: a2:b5:64:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Y/eG/YPBWKqkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDgyMjMxNzktNTIzYS00YmExLTlmOTMtZTg2YjdhYjkxMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc3vvvSf/D2pAjOfqiYHsflPWl2Kw63xVZse Ire6iwF/et2uYzRA3AtC36I9E41+qy7nZSbKtzac/81wqT8LkK/P8nOEX0jqXu10 8mS5hDFyed30ANzMax4v7ZkY50doezRFaceXFMz5ZEM9zm94ywbXt+y8cCYXVsdX qi4na6Ws6Gf9jDh/pLos8nwZXQbOskvqTHDWEPeSRvwNeUuRHirL5gwnIVfNwQZ6 ekNufRrOduXfw0a6H39XlzvtKjNbu8qEq7BMJB/yZuvISvhYiKTM9I0fMKdgZsoV Ccc1RsMCgLqnd8wwaN1BbbpbU4/6R76Z4ObHfiDt3ckSUElfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZRVRl1f0GDvS5v2vFLQ4R2Ujl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmQwYWQyMzktNTBiNS0z YWRjLWE5ZjItMzE3MzE1ZWM0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUvLSmY10FEzf7b57UargkqH7gPGDe8JbzwoF8IF3rnY2rd7Uxky8+A xK5DuCHuNz+TufwF2toFJ3HGPIjQ62S3LExKshZ0+E+ULaxkz2mafo3dyyZE2Dw4 rWjpjEXYDeRmpP0uYXMaNFVisfwfNUP34d35QfIep7HvS912HXXgvUJwWqQ1/Aa+ HpUwRwVG6vPz52gkKnNsy2S/75bazo3PyZYHj8+C/xlYBx3+T4qKXmCvg2QhUv8O ZHU9QWDkHC87MFZ75Prn6tYMKrPyiPTn8VZznLWdxOk1txlCiuSgWAGnAV1jEhnS kwSLJNXXYpmhFD3aW8GKEjP6RKK1ZKU= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:51 2025 by rpki-client