$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b96b1c3e-de92-33f7-8a30-59d17d4467cf.roa File: b96b1c3e-de92-33f7-8a30-59d17d4467cf.roa (raw, json) Hash identifier: h00+6+2I/GVNycsJg8n8vQh6kV6DKHfb1w5sx0ufPgE= Subject key identifier: 78:5A:C5:73:B8:9A:F2:2F:ED:F4:69:43:05:94:0F:6F:46:2E:C8:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B1D9CB7D3F04B23E18560C480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b96b1c3e-de92-33f7-8a30-59d17d4467cf.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 13335 IP address blocks: 104.23.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:b7:d3:f0:4b:23:e1:85:60:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=402e4006-9199-4b94-9eae-22de788d35c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2d:f0:94:4c:0e:dc:b8:8b:4f:fa:56:73:14: ea:d5:e2:96:0e:4f:54:10:d1:4a:28:9e:0c:34:45: 15:2c:82:a7:9f:40:c7:f9:6d:eb:f0:02:f1:82:3f: 5b:e7:bf:0a:f3:69:6e:22:4d:72:94:f5:74:a7:1d: 5f:06:44:80:87:70:43:0c:36:14:f1:c5:38:8b:7f: 6f:11:40:f7:37:e9:75:e5:e2:88:bb:f0:d5:54:72: 6a:ec:61:8d:08:04:16:af:d6:11:bc:2c:e9:1b:0b: b4:86:d5:16:0b:28:a4:fb:6b:02:82:fb:05:a9:7b: a1:9b:70:13:5f:64:18:f7:c9:cd:bf:b1:4b:78:03: 31:ed:67:d1:77:7e:11:69:dd:6d:eb:8d:1f:94:d4: 6f:8a:c0:ac:2d:b4:f4:10:66:11:96:ad:95:e9:6f: 98:cf:bc:c2:30:18:9b:88:4c:b6:86:09:e5:1b:d4: 8d:74:03:ec:88:65:2e:7a:68:99:31:fe:ee:3e:58: 01:89:2a:66:83:56:ba:ab:57:f7:54:ad:da:be:4c: ce:8d:91:82:52:de:0b:cd:8e:c3:62:16:82:78:2a: a2:f7:33:ad:e5:8f:ee:a5:55:77:0c:11:a8:38:9d: a8:6a:b1:14:82:d0:7c:4a:41:a0:5f:a3:c5:4f:e8: 66:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5A:C5:73:B8:9A:F2:2F:ED:F4:69:43:05:94:0F:6F:46:2E:C8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b96b1c3e-de92-33f7-8a30-59d17d4467cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0b:e3:87:eb:86:a3:45:a0:01:19:69:26:15:c9:43:87:be: 1b:6b:61:5c:77:e8:1b:4e:93:51:2f:57:d0:0d:a3:2c:79:6c: 88:0f:a2:da:58:ce:fa:83:d6:ad:a8:03:28:42:62:3b:ec:47: 38:3f:0d:e8:71:ed:1b:79:46:65:65:49:49:86:8b:84:9c:e3: 4d:ce:2f:66:ae:0a:0c:5a:a1:51:92:ee:81:0c:aa:69:51:63: 3d:97:c5:b5:48:5d:a9:1d:9f:bc:da:5e:f7:86:17:9f:7f:2a: 55:89:aa:c7:7f:b6:7a:f3:64:db:7c:bf:75:3d:50:74:8c:57: 69:c5:4f:e2:a6:72:6a:1b:36:a5:52:01:fd:66:3b:01:f9:c8: 96:83:05:c4:09:f2:4e:65:ea:b2:d5:1a:e0:85:f3:01:e8:1e: 5b:f6:c1:7e:ca:39:a1:b5:55:3e:23:83:28:6c:51:d1:64:8a: ff:49:a1:9c:c8:f0:62:39:79:f1:96:ab:7a:19:51:80:f1:20: 74:7b:ad:b8:60:36:a2:c8:71:0e:14:81:d6:3c:12:b2:66:b7: e1:54:d7:99:4a:f2:6c:42:a6:83:2d:76:9e:87:d0:d3:64:88: b1:a0:af:f8:f3:72:4d:7c:16:82:5c:a5:c6:09:f2:b8:f2:09: 11:70:44:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnLfT8Esj4YVgxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NDAyZTQwMDYtOTE5OS00Yjk0LTllYWUtMjJkZTc4OGQzNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i3wlEwO3LiLT/pWcxTq1eKWDk9UENFKKJ4M NEUVLIKnn0DH+W3r8ALxgj9b578K82luIk1ylPV0px1fBkSAh3BDDDYU8cU4i39v EUD3N+l15eKIu/DVVHJq7GGNCAQWr9YRvCzpGwu0htUWCyik+2sCgvsFqXuhm3AT X2QY98nNv7FLeAMx7WfRd34Rad1t640flNRvisCsLbT0EGYRlq2V6W+Yz7zCMBib iEy2hgnlG9SNdAPsiGUuemiZMf7uPlgBiSpmg1a6q1f3VK3avkzOjZGCUt4LzY7D YhaCeCqi9zOt5Y/upVV3DBGoOJ2oarEUgtB8SkGgX6PFT+hmlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhaxXO4mvIv7fRpQwWUD29GLshPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjk2YjFjM2UtZGU5Mi0z M2Y3LThhMzAtNTlkMTdkNDQ2N2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHML44frhqNFoAEZaSYVyUOHvhtrYVx36BtOk1EvV9ANoyx5bIgPotpY zvqD1q2oAyhCYjvsRzg/Dehx7Rt5RmVlSUmGi4Sc403OL2auCgxaoVGS7oEMqmlR Yz2XxbVIXakdn7zaXveGF59/KlWJqsd/tnrzZNt8v3U9UHSMV2nFT+KmcmobNqVS Af1mOwH5yJaDBcQJ8k5l6rLVGuCF8wHoHlv2wX7KOaG1VT4jgyhsUdFkiv9JoZzI 8GI5efGWq3oZUYDxIHR7rbhgNqLIcQ4UgdY8ErJmt+FU15lK8mxCpoMtdp6H0NNk iLGgr/jzck18FoJcpcYJ8rjyCRFwRLI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:35 2025 by rpki-client