$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa File: 18307d49-fa73-3f26-966c-cec9e529ba9c.roa (raw, json) Hash identifier: ZbHPdX7MaxnhCER/bCZiUIwBUdTHXk14EmdPoabqsow= Subject key identifier: 70:CF:78:4D:A1:42:B0:39:F0:F2:9A:16:7C:BC:6A:7E:56:BA:E6:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B196C0C2B8107323A90ACE0C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.23.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:0c:2b:81:07:32:3a:90:ac:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=dfe33f3c-fd78-4e02-aede-d1c59bfd9a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:da:d4:45:30:e4:09:6c:48:93:dc:9a:3e: ab:99:fa:af:e9:76:03:30:1e:c9:ff:49:ac:c9:50: 1e:19:f1:7e:c5:c5:cd:22:9d:a1:6a:d5:8b:6f:d2: 1a:62:20:39:69:87:fd:e4:34:c2:bc:a0:f9:28:70: 8d:d8:31:57:45:0e:8f:56:9c:fe:50:ce:c3:8b:3d: 6e:56:8d:c0:ea:7e:48:64:e7:25:f8:b9:f8:25:77: d7:bc:48:1c:71:9e:29:eb:87:eb:ba:70:56:ef:97: e5:a2:4b:e0:81:c1:c0:97:00:69:53:e6:a3:fd:2e: 81:8d:f4:54:cb:bc:3b:c8:ed:c0:4e:29:ab:0f:c0: f1:90:fc:38:d0:e2:88:4d:f3:ba:0a:15:a6:cc:7e: 53:8b:60:79:eb:c6:fc:1e:39:ef:31:ee:a5:de:6d: 94:b5:a5:ae:02:e5:41:bd:dc:2e:e7:84:ff:84:63: bc:8d:52:5e:20:9e:4e:51:bf:ae:a9:60:e5:00:3f: ac:f3:b2:16:7a:4b:73:9b:64:a9:33:3d:30:80:6e: 7c:10:84:37:48:15:71:2c:a0:6b:b5:e3:14:2d:1d: cb:1c:c7:d9:5c:5b:8f:25:d9:dd:17:f7:62:d8:90: 55:c5:d3:78:91:7c:71:9c:95:42:fc:73:89:3b:c6: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:78:4D:A1:42:B0:39:F0:F2:9A:16:7C:BC:6A:7E:56:BA:E6:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:55:1a:3d:2c:21:45:c5:a2:e2:25:fa:cb:d6:81:de:25:e2: 3a:7f:1c:30:2d:01:02:c6:98:6e:b9:a4:d8:b6:62:00:90:a7: 40:14:bb:29:40:ff:1f:3c:cb:fb:ba:e5:22:f3:85:d0:c6:fa: 95:cf:b8:a0:bb:31:94:0c:7d:89:7a:dc:01:bf:9d:f7:24:c4: c8:d1:00:77:d7:85:99:4e:b1:05:2b:a7:94:49:d2:31:0a:79: ba:3e:7a:fb:66:38:ad:11:38:46:fd:57:10:89:f6:a6:18:3b: 44:3b:3f:5b:31:7f:45:81:35:44:57:8b:a0:fa:a5:87:2b:81: 4c:58:9f:cf:fb:fe:ca:77:47:ee:62:82:d3:0a:7e:5d:7a:87: 29:a5:52:32:06:b2:cd:c8:af:15:ff:ac:0d:7f:ae:6c:d4:0c: 1f:2e:cb:2f:b5:66:1e:b8:c2:99:dc:82:4b:3c:93:77:7c:74: 83:46:21:db:96:3d:80:36:b2:5a:2d:92:df:29:c7:57:7b:99: 45:b4:cf:53:0d:32:63:6a:8c:9f:27:ff:5c:f6:98:20:a8:d2: 6c:dd:e8:07:7c:22:c5:d7:d9:44:ae:dd:ad:07:d2:33:a4:3e: 07:d9:33:ca:7c:34:5f:d0:c9:27:e1:93:7d:13:71:67:27:37: e6:0d:2b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAwrgQcyOpCs4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGZlMzNmM2MtZmQ3OC00ZTAyLWFlZGUtZDFjNTliZmQ5YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUva1EUw5AlsSJPcmj6rmfqv6XYDMB7J/0ms yVAeGfF+xcXNIp2hatWLb9IaYiA5aYf95DTCvKD5KHCN2DFXRQ6PVpz+UM7Diz1u Vo3A6n5IZOcl+Ln4JXfXvEgccZ4p64frunBW75flokvggcHAlwBpU+aj/S6BjfRU y7w7yO3ATimrD8DxkPw40OKITfO6ChWmzH5Ti2B568b8HjnvMe6l3m2UtaWuAuVB vdwu54T/hGO8jVJeIJ5OUb+uqWDlAD+s87IWektzm2SpMz0wgG58EIQ3SBVxLKBr teMULR3LHMfZXFuPJdndF/di2JBVxdN4kXxxnJVC/HOJO8YSCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDPeE2hQrA58PKaFny8an5WuuZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTgzMDdkNDktZmE3My0z ZjI2LTk2NmMtY2VjOWU1MjliYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpVGj0sIUXFouIl+svWgd4l4jp/HDAtAQLGmG65pNi2YgCQp0AUuylA /x88y/u65SLzhdDG+pXPuKC7MZQMfYl63AG/nfckxMjRAHfXhZlOsQUrp5RJ0jEK ebo+evtmOK0ROEb9VxCJ9qYYO0Q7P1sxf0WBNURXi6D6pYcrgUxYn8/7/sp3R+5i gtMKfl16hymlUjIGss3IrxX/rA1/rmzUDB8uyy+1Zh64wpncgks8k3d8dINGIduW PYA2slotkt8px1d7mUW0z1MNMmNqjJ8n/1z2mCCo0mzd6Ad8IsXX2USu3a0H0jOk PgfZM8p8NF/QySfhk30TcWcnN+YNK3Q= -----END CERTIFICATE-----Generated at Tue Sep 9 06:53:26 2025 by rpki-client