$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9678d797-0bde-3845-afab-260a1b366edc.roa File: 9678d797-0bde-3845-afab-260a1b366edc.roa (raw, json) Hash identifier: 53uscOuG5WFpWWGQcKqoPXNAj1ycmCBNrV+YQ2uQUbw= Subject key identifier: 40:31:D0:78:64:E6:3F:61:99:7E:32:BD:C7:12:29:51:F9:11:EB:8B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AF52170030CB9D8C20D3C79C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9678d797-0bde-3845-afab-260a1b366edc.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.23.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:70:03:0c:b9:d8:c2:0d:3c:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a04f29b8-f859-49d8-a74c-bdb1517f0b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:be:a5:a9:be:0d:53:b3:5d:77:f9:1d:ee: f7:47:49:85:a9:cd:d1:fc:78:e6:24:eb:7d:b1:d5: 9e:e2:52:2b:e2:1a:fd:57:c6:2f:c0:ed:1d:a2:e6: 69:1d:f6:cf:0f:68:18:33:2e:df:ed:f1:9d:95:32: b6:93:00:7e:61:23:62:59:41:06:ae:e7:1f:6e:45: 1d:78:16:f5:67:58:67:a1:dc:d2:a8:e4:38:3f:e5: b9:31:72:36:29:82:fb:b0:7d:9c:13:da:bb:0d:62: e1:ef:e2:4c:82:a8:a9:2f:87:e7:17:ac:15:d6:ab: e3:08:19:12:e4:2f:02:5a:0a:e4:dd:f2:ee:80:8f: 05:f6:82:74:6e:30:5f:ed:25:2b:30:79:33:00:7c: 16:58:41:73:87:39:80:d7:f4:d7:9a:9c:25:ef:7f: 0a:39:16:30:9e:cd:f8:fa:52:ac:2a:73:ca:d5:df: 9d:2b:34:1b:d8:05:55:e6:eb:78:72:17:ac:45:81: a2:76:a1:48:a1:19:e8:f2:87:9a:8a:38:66:09:0d: 2c:3d:f4:fa:e9:af:89:f3:12:df:ea:a2:91:b4:db: 97:09:0d:ef:14:26:1f:79:7c:f0:11:fe:5d:e3:2a: df:7b:3b:de:51:4d:05:83:7b:ad:cd:65:87:1f:dc: fc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:31:D0:78:64:E6:3F:61:99:7E:32:BD:C7:12:29:51:F9:11:EB:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9678d797-0bde-3845-afab-260a1b366edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:66:80:fd:95:9e:7b:bb:cd:f2:82:a9:aa:22:a9:05:e5:7b: a9:4f:b7:08:1f:c0:87:7a:fe:8a:94:b2:c9:d9:6a:ec:51:0c: 48:b0:d8:25:40:fa:8b:78:48:c8:e2:b1:1a:7a:4d:cc:01:c9: 80:e0:df:cb:c7:76:0c:c3:e7:ec:bc:10:40:39:ea:47:23:ec: ed:05:04:4c:2d:c9:eb:65:86:04:0d:53:69:f3:26:77:17:ca: 02:c3:f6:ab:ef:c7:ac:d6:f0:36:2f:40:54:3d:b7:e3:66:32: 71:a4:b3:c6:af:fb:ed:69:f6:1a:7f:96:ca:89:b9:71:b4:eb: d9:4d:45:6c:ba:6b:d3:59:83:32:7f:69:12:44:f0:a0:41:f1: e7:19:1b:39:05:4b:e0:6c:4f:48:a7:dd:ac:44:00:c9:5d:53: 76:3e:49:a2:95:93:9e:25:be:4e:ac:ba:9f:ac:f4:9a:29:9a: d8:55:74:5b:20:44:cc:79:98:c8:27:54:7d:61:7f:71:5b:a5: 86:5b:e5:a5:4b:65:38:e1:ee:3e:77:69:72:fe:90:76:0d:76: c6:81:be:33:ab:09:db:0c:84:6d:ab:09:d8:dd:a4:95:a8:96: 74:89:1c:94:b8:06:b1:2f:70:f8:db:d5:03:d5:f0:88:7c:3c: 65:2a:44:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IXADDLnYwg08ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTA0ZjI5YjgtZjg1OS00OWQ4LWE3NGMtYmRiMTUxN2YwYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4G+pam+DVOzXXf5He73R0mFqc3R/HjmJOt9 sdWe4lIr4hr9V8YvwO0douZpHfbPD2gYMy7f7fGdlTK2kwB+YSNiWUEGrucfbkUd eBb1Z1hnodzSqOQ4P+W5MXI2KYL7sH2cE9q7DWLh7+JMgqipL4fnF6wV1qvjCBkS 5C8CWgrk3fLugI8F9oJ0bjBf7SUrMHkzAHwWWEFzhzmA1/TXmpwl738KORYwns34 +lKsKnPK1d+dKzQb2AVV5ut4chesRYGidqFIoRno8oeaijhmCQ0sPfT66a+J8xLf 6qKRtNuXCQ3vFCYfeXzwEf5d4yrfezveUU0Fg3utzWWHH9z8ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAx0Hhk5j9hmX4yvccSKVH5EeuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY3OGQ3OTctMGJkZS0z ODQ1LWFmYWItMjYwYTFiMzY2ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVmgP2Vnnu7zfKCqaoiqQXle6lPtwgfwId6/oqUssnZauxRDEiw2CVA +ot4SMjisRp6TcwByYDg38vHdgzD5+y8EEA56kcj7O0FBEwtyetlhgQNU2nzJncX ygLD9qvvx6zW8DYvQFQ9t+NmMnGks8av++1p9hp/lsqJuXG069lNRWy6a9NZgzJ/ aRJE8KBB8ecZGzkFS+BsT0in3axEAMldU3Y+SaKVk54lvk6sup+s9JopmthVdFsg RMx5mMgnVH1hf3FbpYZb5aVLZTjh7j53aXL+kHYNdsaBvjOrCdsMhG2rCdjdpJWo lnSJHJS4BrEvcPjb1QPV8Ih8PGUqRMM= -----END CERTIFICATE-----Generated at Tue Sep 9 07:01:53 2025 by rpki-client