$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa File: 1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa (raw, json) Hash identifier: yOT9vITROTPpP625mWxynsD5jXIEmpAEXE3Us9dxptk= Subject key identifier: 8B:A2:9B:B5:FC:77:E2:89:D7:89:FD:84:9D:D5:00:D1:34:E2:D2:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD18D43C30CF1BAF52FAA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.23.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:18:d4:3c:30:cf:1b:af:52:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=066a2c8e-ef1e-4408-b83c-9de0b0445414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:00:b6:63:4c:4d:29:4d:f1:0b:bb:d4:21: 44:e4:0f:15:d0:c7:bb:b4:03:f2:ba:3d:38:ae:9b: 3d:76:a7:f3:37:fa:c9:bf:b4:c0:0c:69:7b:11:c7: e4:31:2c:e4:8b:3a:5e:3d:dc:c0:16:80:e7:69:1f: 11:bd:62:57:5d:3c:40:c5:ac:bc:61:f9:05:fb:a0: 10:7d:5b:e7:99:b6:17:1b:92:62:db:21:2d:24:c3: 7e:50:91:9e:d3:22:60:65:13:6b:4d:75:0f:dc:53: 3b:e5:8c:0d:2c:02:20:90:d2:1f:88:bf:fb:ef:92: 8c:d6:5f:ce:dc:95:3c:3b:9e:f0:6c:48:ea:9e:47: 3c:fb:05:20:38:66:10:25:e6:f5:c0:67:b1:99:21: bd:e6:29:c5:92:ab:7b:ca:78:24:fe:d3:e3:82:9b: c2:cc:08:78:7b:26:27:23:ec:27:d2:8d:38:1e:a3: 55:0f:50:51:4c:32:14:84:6c:68:fd:ed:e9:86:93: 36:e4:15:15:24:b2:68:15:50:53:cc:29:3b:71:dd: 2f:17:8f:cd:3f:18:ce:0c:f8:25:f4:4a:97:8c:8a: 40:7f:a8:50:49:e4:a8:d7:ac:ca:ab:c0:b7:a8:8e: be:c7:a9:26:7d:e0:e5:7b:8d:cf:0f:e3:12:de:30: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:9B:B5:FC:77:E2:89:D7:89:FD:84:9D:D5:00:D1:34:E2:D2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:18:15:9a:06:c0:71:30:22:3c:8b:03:08:12:e0:14:8e:57: 83:69:30:31:01:c3:88:44:40:31:e6:cb:ab:3b:e6:d0:0e:82: 8c:e1:5a:a8:ef:47:f2:be:54:ec:8f:76:47:a6:c3:63:e3:9d: 40:41:6e:84:70:a8:e0:18:02:e0:e4:59:a6:00:29:3c:28:32: 87:4e:9f:b5:2e:7b:6f:ae:9a:f3:5b:f4:f7:4f:65:c5:9a:9e: 22:d8:dc:08:dc:ff:80:21:79:71:d4:2a:93:50:cc:77:82:c0: ee:5e:17:61:c7:39:d3:a8:12:8d:8b:d2:cc:12:32:d3:2b:02: 42:e7:75:eb:87:3c:af:ca:dd:7e:ae:7c:5e:a1:16:3d:8f:7d: b0:af:3c:40:b3:da:45:bf:f3:cf:41:70:99:e7:a9:a3:5a:e9: f5:88:7f:ba:ac:7f:a5:14:1a:bf:79:17:f8:6c:6c:0f:93:72: 75:5a:50:1c:5a:ab:73:0e:e8:fa:71:a2:d9:da:2c:06:b2:c9: a9:52:3a:c3:3f:1f:5e:66:9a:a4:16:ea:46:97:a4:6a:d2:66: f8:27:54:af:bb:19:89:bd:e7:23:d7:75:23:ff:58:91:ce:26: 8f:29:a7:a9:eb:1e:9a:f9:2b:3a:86:81:51:96:e0:bb:06:2e: 12:cb:da:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRjUPDDPG69S+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MDY2YTJjOGUtZWYxZS00NDA4LWI4M2MtOWRlMGIwNDQ1NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlYAtmNMTSlN8Qu71CFE5A8V0Me7tAPyuj04 rps9dqfzN/rJv7TADGl7EcfkMSzkizpePdzAFoDnaR8RvWJXXTxAxay8YfkF+6AQ fVvnmbYXG5Ji2yEtJMN+UJGe0yJgZRNrTXUP3FM75YwNLAIgkNIfiL/775KM1l/O 3JU8O57wbEjqnkc8+wUgOGYQJeb1wGexmSG95inFkqt7yngk/tPjgpvCzAh4eyYn I+wn0o04HqNVD1BRTDIUhGxo/e3phpM25BUVJLJoFVBTzCk7cd0vF4/NPxjODPgl 9EqXjIpAf6hQSeSo16zKq8C3qI6+x6kmfeDle43PD+MS3jDH4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuim7X8d+KJ14n9hJ3VANE04tIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWE4ODBiMmItNzhjYi0z ZDEwLThkOTUtODJhY2IxNTFmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIYFZoGwHEwIjyLAwgS4BSOV4NpMDEBw4hEQDHmy6s75tAOgozhWqjv R/K+VOyPdkemw2PjnUBBboRwqOAYAuDkWaYAKTwoModOn7Uue2+umvNb9PdPZcWa niLY3Ajc/4AheXHUKpNQzHeCwO5eF2HHOdOoEo2L0swSMtMrAkLndeuHPK/K3X6u fF6hFj2PfbCvPECz2kW/889BcJnnqaNa6fWIf7qsf6UUGr95F/hsbA+TcnVaUBxa q3MO6PpxotnaLAayyalSOsM/H15mmqQW6kaXpGrSZvgnVK+7GYm95yPXdSP/WJHO Jo8pp6nrHpr5KzqGgVGW4LsGLhLL2rs= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:38 2025 by rpki-client