$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa File: a153db53-9524-3f9c-af42-4f159128d889.roa (raw, json) Hash identifier: TTlXSjjyN5ywiNFTD8FQBOekvpsMh97jFPkaD406vNg= Subject key identifier: F2:05:15:35:DB:EE:B1:81:F6:B6:CA:1D:02:D0:BF:0F:E1:E3:C7:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A7D15EF7780645AAF61FDC780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 13335 IP address blocks: 104.23.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:ef:77:80:64:5a:af:61:fd:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=352397ac-7b78-46d7-af99-01749015492a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:84:74:67:66:fb:ab:6b:ea:3d:9c:d8:78: ae:8e:65:67:d1:a1:d7:cb:31:45:0e:2e:4b:28:02: eb:41:5f:0b:20:7d:f4:3f:e7:fd:61:10:3e:fa:31: 20:5b:15:4c:cd:69:c0:7e:f3:0b:6e:b5:fa:97:29: 9f:d9:18:2c:1b:db:c2:8b:61:a2:2c:20:80:61:c6: d3:b8:4d:7c:63:86:63:e7:38:a4:42:c6:dd:f3:5d: ce:2e:b4:bf:13:a1:ab:8c:34:15:3e:9c:b4:6c:17: b4:5a:4d:60:c4:ca:cc:18:ed:4c:af:7a:30:d7:e0: 73:a2:11:76:54:ab:9d:f8:b0:81:7d:89:fa:8c:f6: 97:c6:33:da:30:c9:d8:c6:bf:8d:f6:c3:d5:44:5b: ce:c0:54:5f:bb:89:50:68:f3:58:13:df:99:13:22: ee:94:1f:76:ab:b8:ad:48:80:83:a4:60:2b:07:ac: 06:b2:14:10:16:98:f7:81:92:b1:f8:24:2a:49:24: 53:92:d4:8b:b7:a6:a0:c7:7f:95:fe:c3:f4:12:b7: 02:d7:a8:f1:36:9a:9f:17:10:f0:1c:de:dc:88:51: f5:aa:b6:84:b3:ec:e5:0d:3f:7c:ea:6d:f5:b4:d4: f4:32:b9:56:42:a1:57:3e:9b:f8:bd:3f:19:2f:ee: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:05:15:35:DB:EE:B1:81:F6:B6:CA:1D:02:D0:BF:0F:E1:E3:C7:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ec:4b:75:c0:b8:9d:f9:fa:a9:c4:12:ca:46:92:e7:df:09: 0a:ce:93:a6:23:59:8f:52:11:c0:af:fc:cb:4e:f5:11:95:f5: 1c:5c:f3:a6:cd:b8:3b:ee:3a:28:14:29:cf:4c:d1:a3:08:b6: 66:67:45:d5:c3:38:3d:f5:13:78:0d:d7:03:85:8d:89:18:8d: c8:93:7b:ec:75:94:a0:df:32:59:e5:28:2d:de:64:57:7c:2a: e2:57:6c:aa:f3:65:70:49:e5:cf:36:04:42:82:14:32:22:55: e8:a2:07:99:a7:89:c7:9f:db:dd:09:40:2b:0e:86:8d:04:53: c3:ad:19:7f:81:80:ea:ac:43:95:5d:ab:07:e2:5b:9d:54:eb: b1:25:8e:b7:78:5b:8f:d9:48:93:90:d7:04:f8:5e:ab:a8:fc: ee:bc:79:ab:92:8c:a2:08:ef:7d:e9:39:66:6d:19:0a:ff:a5: 12:b2:fc:5c:db:39:38:0f:1a:e2:d6:e1:ec:8a:3b:d8:ed:e0: ef:7a:be:85:95:82:cb:18:e3:24:52:36:12:9a:c8:29:c8:52: 06:d3:2d:c2:9a:e0:92:c9:8a:6d:de:73:0d:46:7c:a3:23:9f: 73:3d:f2:f6:e4:e1:05:13:b8:90:f7:d3:af:8c:55:5f:a8:39: bf:95:38:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Fe93gGRar2H9x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MzUyMzk3YWMtN2I3OC00NmQ3LWFmOTktMDE3NDkwMTU0OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYKEdGdm+6tr6j2c2HiujmVn0aHXyzFFDi5L KALrQV8LIH30P+f9YRA++jEgWxVMzWnAfvMLbrX6lymf2RgsG9vCi2GiLCCAYcbT uE18Y4Zj5zikQsbd813OLrS/E6GrjDQVPpy0bBe0Wk1gxMrMGO1Mr3ow1+BzohF2 VKud+LCBfYn6jPaXxjPaMMnYxr+N9sPVRFvOwFRfu4lQaPNYE9+ZEyLulB92q7it SICDpGArB6wGshQQFpj3gZKx+CQqSSRTktSLt6agx3+V/sP0ErcC16jxNpqfFxDw HN7ciFH1qraEs+zlDT986m31tNT0MrlWQqFXPpv4vT8ZL+7P5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIFFTXb7rGB9rbKHQLQvw/h48egMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE1M2RiNTMtOTUyNC0z ZjljLWFmNDItNGYxNTkxMjhkODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfsS3XAuJ35+qnEEspGkuffCQrOk6YjWY9SEcCv/MtO9RGV9Rxc86bN uDvuOigUKc9M0aMItmZnRdXDOD31E3gN1wOFjYkYjciTe+x1lKDfMlnlKC3eZFd8 KuJXbKrzZXBJ5c82BEKCFDIiVeiiB5mnicef290JQCsOho0EU8OtGX+BgOqsQ5Vd qwfiW51U67Eljrd4W4/ZSJOQ1wT4Xquo/O68eauSjKII733pOWZtGQr/pRKy/Fzb OTgPGuLW4eyKO9jt4O96voWVgssY4yRSNhKayCnIUgbTLcKa4JLJim3ecw1GfKMj n3M98vbk4QUTuJD306+MVV+oOb+VOCY= -----END CERTIFICATE-----Generated at Wed Jul 23 01:47:58 2025 by rpki-client