$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa File: ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa (raw, json) Hash identifier: 6gVa8iSnn5YaS195l+TD7JlkxwF80o7C9o6m6+NxgB0= Subject key identifier: D9:57:0B:62:4B:09:3F:E1:01:3A:BB:8C:FE:5F:AE:6A:42:F7:41:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB45D1A121F29C7F427B8E300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 13335 IP address blocks: 104.23.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1a:12:1f:29:c7:f4:27:b8:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=c1e0dd90-9df8-43a8-9b22-c63839cc3efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:d9:42:80:05:b5:00:07:bf:b9:5a:4b:42: 81:56:2e:f5:68:30:46:e1:08:e3:69:fd:e5:fa:73: 53:73:3a:e3:07:e0:18:1d:24:ba:f7:0f:7b:1f:3c: cd:36:68:b1:37:d0:40:d0:9d:70:67:be:0e:69:e6: e7:89:d4:6f:f4:14:88:08:3f:c0:77:8f:1e:be:f0: 78:62:3a:7b:e1:ae:e5:8b:96:2d:da:92:f8:ff:e5: 77:a8:ef:72:d6:ac:64:5e:83:e7:96:6e:a9:72:ad: d7:45:fe:bc:a7:ce:d0:26:a0:cd:6a:b9:65:8d:9c: 90:2a:2b:e4:dc:92:86:7d:ee:c8:fa:a3:4a:81:f4: b2:f2:fc:6b:f0:e8:20:5f:45:3b:f5:0c:94:9b:c1: c7:92:d7:28:bd:68:15:af:c9:e5:27:b8:50:8f:d7: f7:b7:c8:f0:26:26:98:37:0b:b1:c9:44:da:8b:b1: fc:ea:77:a0:da:76:26:1d:80:b1:45:b4:48:8c:99: 29:e0:a1:62:d5:9a:f9:58:99:03:38:c7:f5:2c:f7: 99:c8:46:ff:7c:3f:49:17:aa:72:ed:4b:20:72:a0: 4b:e8:04:f2:68:7a:39:f7:ea:ff:78:ca:f9:c5:e4: 3b:24:eb:8f:aa:e2:cf:35:1e:58:8a:8b:b2:35:fa: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:0B:62:4B:09:3F:E1:01:3A:BB:8C:FE:5F:AE:6A:42:F7:41:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8a:20:b3:78:5d:f9:b9:5a:7f:12:13:c5:9c:b3:36:61:8e: 32:d6:7f:8e:ad:43:81:50:1c:ac:da:82:77:7b:a5:b9:da:ae: 49:e5:b0:d0:6e:d8:10:3f:bd:0f:92:09:07:14:ce:66:00:3d: a1:df:42:26:90:91:ae:89:fa:e3:e5:d7:4d:d5:33:d5:fb:21: fc:bf:01:cd:9e:79:18:e8:d9:eb:4e:fe:d8:e9:ba:31:32:24: 54:31:1d:0c:ab:80:a6:18:72:aa:55:d6:25:83:53:58:4c:e2: 8b:74:ab:7d:a0:1e:96:d2:4c:9f:8a:a4:17:12:5a:1c:58:bf: e8:a5:a3:35:be:e0:fd:f2:3c:75:33:c9:af:83:20:f0:71:9a: 29:77:1d:d7:34:84:40:6f:92:f0:73:21:30:3d:23:5c:51:f4: f2:98:59:8b:4e:56:df:48:df:2a:f2:ed:4b:bc:59:29:2d:4f: c6:6f:12:cd:63:c1:3d:d2:95:4b:b9:c8:15:26:e7:7c:99:31: d8:87:c4:a3:cd:01:47:0a:30:e9:4f:ab:d7:e7:a0:2a:eb:b0: 05:13:71:28:d3:1e:00:50:b9:33:a4:bf:aa:1d:8a:49:6f:69: f6:15:b3:c0:01:e9:65:06:82:ed:b4:bd:af:d1:6b:58:d6:fa: 0d:1c:d6:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRoSHynH9Ce44wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YzFlMGRkOTAtOWRmOC00M2E4LTliMjItYzYzODM5Y2MzZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ3ZQoAFtQAHv7laS0KBVi71aDBG4Qjjaf3l +nNTczrjB+AYHSS69w97HzzNNmixN9BA0J1wZ74OaebnidRv9BSICD/Ad48evvB4 Yjp74a7li5Yt2pL4/+V3qO9y1qxkXoPnlm6pcq3XRf68p87QJqDNarlljZyQKivk 3JKGfe7I+qNKgfSy8vxr8OggX0U79QyUm8HHktcovWgVr8nlJ7hQj9f3t8jwJiaY NwuxyUTai7H86neg2nYmHYCxRbRIjJkp4KFi1Zr5WJkDOMf1LPeZyEb/fD9JF6py 7UsgcqBL6ATyaHo59+r/eMr5xeQ7JOuPquLPNR5YiouyNfqVRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlXC2JLCT/hATq7jP5frmpC90FZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWQ1ZGQ0MWQtYmE4MC0z MGYyLTgwNTUtODkyYmRjMGQ0NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBevMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+KILN4Xfm5Wn8SE8WcszZhjjLWf46tQ4FQHKzagnd7pbnarknlsNBu 2BA/vQ+SCQcUzmYAPaHfQiaQka6J+uPl103VM9X7Ify/Ac2eeRjo2etO/tjpujEy JFQxHQyrgKYYcqpV1iWDU1hM4ot0q32gHpbSTJ+KpBcSWhxYv+ilozW+4P3yPHUz ya+DIPBxmil3Hdc0hEBvkvBzITA9I1xR9PKYWYtOVt9I3yry7Uu8WSktT8ZvEs1j wT3SlUu5yBUm53yZMdiHxKPNAUcKMOlPq9fnoCrrsAUTcSjTHgBQuTOkv6odiklv afYVs8AB6WUGgu20va/Ra1jW+g0c1sE= -----END CERTIFICATE-----Generated at Sat Nov 1 15:19:53 2025 by rpki-client