$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/640eab37-d266-3075-b792-e19cef7189dd.roa File: 640eab37-d266-3075-b792-e19cef7189dd.roa (raw, json) Hash identifier: 5TQ1NL8gvKGeMv4C7FsXEC9XTe9MYhFJai7TpZYCXW4= Subject key identifier: 47:F4:73:EA:65:AE:9D:41:32:E4:6E:2E:82:FA:78:EA:7F:1C:18:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AF521709222D43AD47CD6506A Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/640eab37-d266-3075-b792-e19cef7189dd.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.23.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:70:92:22:d4:3a:d4:7c:d6:50:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=9591544d-21da-4f6a-916f-f5c19d4bf1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:27:aa:65:84:be:a0:17:8e:07:47:92:1e: 4e:ad:32:ad:5d:1b:01:d6:87:8d:25:f4:22:93:00: 74:2d:94:07:a6:18:cc:d8:aa:92:c4:74:78:ce:97: 64:35:57:e7:fd:00:7c:54:26:33:3d:fb:41:82:93: d1:c0:f2:a8:4f:cf:4a:6f:de:04:4b:d1:74:5e:c1: 7d:be:29:de:06:43:31:50:3e:89:74:9c:3b:f3:d1: fd:ea:2f:2b:9a:7e:23:63:56:ad:28:d2:19:e4:7e: e1:3b:b3:d9:f3:f0:47:62:ce:99:dc:93:94:01:51: 7f:37:ec:92:b0:87:ce:4a:d7:a9:b5:f0:29:bd:b2: e7:3d:2c:f6:9c:96:63:e1:82:70:d7:14:98:06:81: 78:f9:ac:a4:22:58:ac:00:7f:29:d0:a4:3b:be:75: 3a:fe:4c:69:91:e5:18:72:a2:a4:68:a8:1f:a3:c8: 90:92:8c:3f:2d:43:f1:e4:f3:1f:a3:20:bd:90:15: ff:fa:4e:d4:b6:84:5a:c9:2d:85:d5:ae:6d:47:c6: 4b:9a:13:3d:ca:7e:5f:07:74:c2:e5:cf:0d:fb:fc: 16:25:1e:99:f9:ca:3c:a7:21:f4:52:83:4f:9f:9d: 8c:96:78:d8:cd:7d:96:60:3a:6b:ca:76:17:e5:62: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F4:73:EA:65:AE:9D:41:32:E4:6E:2E:82:FA:78:EA:7F:1C:18:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/640eab37-d266-3075-b792-e19cef7189dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0e:29:49:29:51:14:6f:6d:cf:bd:67:9d:23:9b:fd:35:9c: 4e:30:fa:71:de:d4:93:a4:e1:3d:eb:4f:13:f5:b3:61:24:2d: d8:c0:e6:15:46:8b:0c:9b:1d:a1:9c:0f:b4:03:72:ad:6b:da: 78:84:ab:41:63:34:6e:ba:ca:d1:68:4f:20:41:00:88:75:ad: 0a:93:88:0c:71:4f:ab:c7:19:e0:fc:91:64:79:92:8c:85:0f: e2:31:ec:68:c0:c9:b5:9d:72:ec:4f:8f:d9:f5:9e:30:19:9e: 71:67:d4:c1:11:13:ed:8d:4d:27:f7:97:e3:35:f0:b8:61:07: 02:f0:ec:d1:19:aa:32:fc:01:02:81:7b:b0:2c:fd:5b:1f:4f: 50:55:f9:66:25:23:66:88:16:a3:f4:98:45:08:33:74:64:d9: 84:cf:b0:6d:45:e6:24:60:32:f5:a3:7b:db:53:c3:f7:d3:43: 4d:80:59:61:f1:48:e3:84:7f:0b:bf:01:18:5c:90:ca:20:1c: 87:b1:43:aa:ba:b0:38:87:9f:b5:ee:6b:8f:e5:ba:ff:33:83: 1b:67:64:b7:29:01:d1:f4:16:6c:a4:36:74:fb:f1:1a:d2:22: ff:ac:22:d5:e7:9c:01:0e:18:71:76:0d:0f:9e:c1:31:34:6d: a8:95:f0:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IXCSItQ61HzWUGowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTU5MTU0NGQtMjFkYS00ZjZhLTkxNmYtZjVjMTlkNGJmMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwknqmWEvqAXjgdHkh5OrTKtXRsB1oeNJfQi kwB0LZQHphjM2KqSxHR4zpdkNVfn/QB8VCYzPftBgpPRwPKoT89Kb94ES9F0XsF9 vineBkMxUD6JdJw789H96i8rmn4jY1atKNIZ5H7hO7PZ8/BHYs6Z3JOUAVF/N+yS sIfOSteptfApvbLnPSz2nJZj4YJw1xSYBoF4+aykIlisAH8p0KQ7vnU6/kxpkeUY cqKkaKgfo8iQkow/LUPx5PMfoyC9kBX/+k7UtoRayS2F1a5tR8ZLmhM9yn5fB3TC 5c8N+/wWJR6Z+co8pyH0UoNPn52MlnjYzX2WYDprynYX5WKAzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf0c+plrp1BMuRuLoL6eOp/HBirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjQwZWFiMzctZDI2Ni0z MDc1LWI3OTItZTE5Y2VmNzE4OWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIOKUkpURRvbc+9Z50jm/01nE4w+nHe1JOk4T3rTxP1s2EkLdjA5hVG iwybHaGcD7QDcq1r2niEq0FjNG66ytFoTyBBAIh1rQqTiAxxT6vHGeD8kWR5koyF D+Ix7GjAybWdcuxPj9n1njAZnnFn1MERE+2NTSf3l+M18LhhBwLw7NEZqjL8AQKB e7As/VsfT1BV+WYlI2aIFqP0mEUIM3Rk2YTPsG1F5iRgMvWje9tTw/fTQ02AWWHx SOOEfwu/ARhckMogHIexQ6q6sDiHn7Xua4/luv8zgxtnZLcpAdH0FmykNnT78RrS Iv+sItXnnAEOGHF2DQ+ewTE0baiV8PI= -----END CERTIFICATE-----Generated at Tue Sep 9 07:06:12 2025 by rpki-client