$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa File: 9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa (raw, json) Hash identifier: 6XPSdjbDV0lbjx6+VujU5jucksvaswBaekXwz/SDoq4= Subject key identifier: 50:2F:90:C4:58:96:3E:B8:E6:04:F5:63:90:8B:48:E3:CC:E4:EF:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A19F42E2493504EC9A1FEA5C8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa Signing time: Fri 06 Jun 2025 12:47:58 +0000 ROA not before: Fri 06 Jun 2025 12:47:58 +0000 ROA not after: Thu 04 Sep 2025 12:47:58 +0000 asID: 13335 IP address blocks: 104.23.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:f4:2e:24:93:50:4e:c9:a1:fe:a5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 6 12:47:58 2025 GMT Not After : Sep 4 12:47:58 2025 GMT Subject: CN=dd311240-e48e-4297-8178-6d37264ded50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:d6:79:0c:5f:bc:bb:e1:c0:5f:44:0b:9e: 3e:c3:f4:36:66:76:76:35:13:60:04:1c:b8:0c:c9: 4d:b0:00:80:99:b8:fb:a4:72:cb:c7:82:4e:c3:51: 5d:5a:35:0e:2f:ae:12:97:b2:d1:7a:57:41:7c:8d: 20:f7:ec:8a:90:cb:83:78:28:a7:ef:5a:8e:d6:e6: f5:35:35:a6:32:3f:e0:85:be:57:58:52:43:a0:33: 02:c4:51:3e:75:99:c0:f4:6a:20:eb:c6:0d:4d:cb: 0e:22:43:7a:c6:19:e7:4f:92:1d:8a:fa:51:23:a5: 8c:ea:96:40:24:b0:5e:d2:52:8d:b0:09:23:f9:1e: 1e:69:67:e6:ac:7e:bd:3b:36:94:ca:35:9c:ec:d8: 08:3a:b4:ab:06:39:92:ec:a0:87:70:0e:eb:cd:3b: bb:d2:70:17:4d:6a:d9:f7:16:53:b7:c1:a5:73:b5: a0:ca:c1:7f:92:9c:f8:f6:89:11:11:61:ef:da:9c: db:cb:c3:90:09:37:13:c1:4f:74:ed:c4:0f:0b:38: af:da:a8:26:1f:36:de:a9:dc:a3:70:03:9b:44:d1: 9d:9a:c1:19:8a:ab:71:95:16:72:2b:e7:4f:21:e8: 1b:f2:5a:9a:dc:c7:b3:d7:8c:45:41:6c:01:9b:29: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:90:C4:58:96:3E:B8:E6:04:F5:63:90:8B:48:E3:CC:E4:EF:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d6:fa:0d:64:70:70:f3:89:84:96:5c:18:da:33:5c:9d:1a: 40:67:ff:87:70:28:90:eb:b7:8a:60:03:3d:a8:c7:a1:25:ef: c5:de:42:42:f6:d0:ba:33:6c:9a:b0:80:e1:7b:29:cc:8e:b4: 7b:f2:90:1b:43:df:c9:ac:c2:74:e9:92:eb:cd:57:46:6c:b7: db:f9:21:69:55:f8:1d:a8:00:7e:72:b1:9a:21:fd:00:f4:cf: d4:78:4c:ba:22:bb:a7:c5:94:14:8e:c0:5e:2c:70:d3:51:7c: 96:c8:0c:ae:3f:4c:af:7d:11:3c:1f:ce:7c:f0:25:33:b1:dd: cb:93:dc:5a:20:8b:92:1d:bb:4b:26:ed:b2:74:46:eb:1d:52: b8:90:6d:18:9f:e2:b5:8c:0c:0c:1c:b1:5e:af:a0:34:74:2f: 6f:2c:4d:e9:2a:ba:cc:38:db:73:17:e0:5c:0d:3e:f5:72:e5: e9:34:16:c8:ac:b3:e4:29:29:a3:de:c3:9d:49:79:23:34:04: 7a:c3:f4:11:62:00:71:ed:be:df:0c:8b:0a:c2:2c:61:d9:43: a6:ee:77:6b:aa:e6:f3:12:f8:75:7b:5f:88:1d:37:2d:e1:7f: 2e:ac:02:5a:cb:94:59:17:fa:9e:8b:c7:8c:fa:39:a0:d7:1b: 1a:09:2d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ9C4kk1BOyaH+pcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDYwNjEyNDc1OFoXDTI1MDkwNDEyNDc1OFowLzEtMCsGA1UEAxMk ZGQzMTEyNDAtZTQ4ZS00Mjk3LTgxNzgtNmQzNzI2NGRlZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg7WeQxfvLvhwF9EC54+w/Q2ZnZ2NRNgBBy4 DMlNsACAmbj7pHLLx4JOw1FdWjUOL64Sl7LReldBfI0g9+yKkMuDeCin71qO1ub1 NTWmMj/ghb5XWFJDoDMCxFE+dZnA9Gog68YNTcsOIkN6xhnnT5IdivpRI6WM6pZA JLBe0lKNsAkj+R4eaWfmrH69OzaUyjWc7NgIOrSrBjmS7KCHcA7rzTu70nAXTWrZ 9xZTt8Glc7WgysF/kpz49okREWHv2pzby8OQCTcTwU907cQPCziv2qgmHzbeqdyj cAObRNGdmsEZiqtxlRZyK+dPIegb8lqa3Mez14xFQWwBmyn93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAvkMRYlj645gT1Y5CLSOPM5O9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWM4NWY0OTgtNWY4MS0z ZGFmLThiMzEtOWEzOWY5NWMzOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATW+g1kcHDziYSWXBjaM1ydGkBn/4dwKJDrt4pgAz2ox6El78XeQkL2 0LozbJqwgOF7KcyOtHvykBtD38mswnTpkuvNV0Zst9v5IWlV+B2oAH5ysZoh/QD0 z9R4TLoiu6fFlBSOwF4scNNRfJbIDK4/TK99ETwfznzwJTOx3cuT3Fogi5Idu0sm 7bJ0RusdUriQbRif4rWMDAwcsV6voDR0L28sTekqusw423MX4FwNPvVy5ek0Fsis s+QpKaPew51JeSM0BHrD9BFiAHHtvt8MiwrCLGHZQ6bud2uq5vMS+HV7X4gdNy3h fy6sAlrLlFkX+p6Lx4z6OaDXGxoJLTk= -----END CERTIFICATE-----Generated at Sun Jun 8 00:43:13 2025 by rpki-client