$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa File: caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa (raw, json) Hash identifier: bpEX7A/2SH8CYBvmyzwGsqy0oajJ71xkDXcvxEItVAc= Subject key identifier: 24:81:6A:39:34:65:F5:AB:B7:65:93:60:C3:EC:C8:78:47:09:4D:65 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B9E07D6CEDCEEBD08F06CE410 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d6:ce:dc:ee:bd:08:f0:6c:e4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8ff70416-b73e-4122-b7a5-89d23b3a9ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8f:ea:a8:9d:6f:07:9f:e7:8f:71:bf:b3:0d: e4:51:88:22:ab:b2:bc:40:62:ed:62:6f:4e:af:ed: 82:e6:e9:f3:01:21:34:7a:3e:cf:ec:f4:ad:61:b5: ce:1c:35:4e:96:e8:b3:fd:0d:88:19:1b:dc:98:e2: 22:80:67:33:35:3b:05:a0:bd:66:0b:b8:30:4b:23: b1:dd:52:33:93:0d:11:00:ce:9b:1e:66:2a:b9:7b: 1d:12:3b:f4:d7:72:67:12:9e:f1:c8:c4:b8:b3:fa: b3:4e:3d:ec:03:61:03:9e:f3:9c:97:1b:f5:dd:2b: 7e:ef:01:98:f8:77:1c:02:ff:40:00:db:08:38:9c: 04:25:ce:a1:53:9f:5f:ee:3d:f5:12:90:8c:ce:41: 26:7e:32:69:de:3e:85:c2:be:a6:8e:54:dd:87:49: 73:57:3d:48:83:45:0e:56:b4:fc:41:d9:a8:d9:2f: 29:7e:79:a0:cb:2d:6d:8d:b3:ce:72:34:d0:42:71: 4c:ce:91:92:ae:4b:7d:9b:2a:eb:5e:ba:af:02:9b: 30:5c:d2:ff:bb:0e:26:92:43:ff:f9:fd:77:19:2b: 3f:63:6c:70:c6:0a:34:63:d6:07:49:f2:23:58:59: 72:83:eb:bb:c2:0e:fa:d5:f7:1e:9c:cc:0d:fc:67: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:6A:39:34:65:F5:AB:B7:65:93:60:C3:EC:C8:78:47:09:4D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:56:d6:96:cd:af:d2:40:1d:94:e8:38:78:27:27:9f:0c:ae: bc:e7:ca:79:0a:d0:57:49:b0:8d:9e:8d:b1:57:96:5b:5e:0a: fd:70:5e:e4:e8:d4:d7:89:3d:9f:67:8e:7b:81:b7:84:75:03: 32:08:16:f0:13:94:22:db:47:01:60:ad:82:ce:60:0d:cf:e6: 55:ae:c7:a2:77:54:a3:6a:fc:62:60:22:7c:1a:b0:6d:c6:e3: f2:a4:34:e6:67:59:07:28:80:f5:37:2e:ec:6c:f2:a2:b7:08: 94:2b:88:9e:b3:d7:0b:94:79:13:b3:27:89:0a:2a:a8:4c:af: 50:a4:31:15:2c:08:11:dd:68:10:d4:97:7c:e3:bc:00:09:40: 79:22:f8:3b:dc:d7:d0:ba:60:f4:87:5e:94:dc:ef:91:ee:fa: 35:73:b4:0f:cd:e0:fb:19:15:ab:1e:7f:59:89:4c:d0:b6:ba: d6:59:96:9c:65:6b:01:bb:27:ad:9c:a9:84:20:bd:88:e4:ab: 86:de:60:15:5a:0a:7f:53:f0:61:da:9f:65:ee:77:6f:e4:f3: a7:c7:ed:e8:02:ec:2b:01:ac:52:4e:06:c6:16:11:77:19:6d: b0:4b:b9:a8:d7:20:34:41:f3:a0:84:39:16:10:21:d4:35:48: 00:aa:85:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9bO3O69CPBs5BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGZmNzA0MTYtYjczZS00MTIyLWI3YTUtODlkMjNiM2E5ZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo/qqJ1vB5/nj3G/sw3kUYgiq7K8QGLtYm9O r+2C5unzASE0ej7P7PStYbXOHDVOluiz/Q2IGRvcmOIigGczNTsFoL1mC7gwSyOx 3VIzkw0RAM6bHmYquXsdEjv013JnEp7xyMS4s/qzTj3sA2EDnvOclxv13St+7wGY +HccAv9AANsIOJwEJc6hU59f7j31EpCMzkEmfjJp3j6Fwr6mjlTdh0lzVz1Ig0UO VrT8Qdmo2S8pfnmgyy1tjbPOcjTQQnFMzpGSrkt9myrrXrqvApswXNL/uw4mkkP/ +f13GSs/Y2xwxgo0Y9YHSfIjWFlyg+u7wg761fcenMwN/GduPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSBajk0ZfWrt2WTYMPsyHhHCU1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FhZGM5OGItMmE4OC0z YmRkLTlkYjAtNmQ5OGYyZjg0NWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFW1pbNr9JAHZToOHgnJ58MrrznynkK0FdJsI2ejbFXllteCv1wXuTo 1NeJPZ9njnuBt4R1AzIIFvATlCLbRwFgrYLOYA3P5lWux6J3VKNq/GJgInwasG3G 4/KkNOZnWQcogPU3Luxs8qK3CJQriJ6z1wuUeROzJ4kKKqhMr1CkMRUsCBHdaBDU l3zjvAAJQHki+Dvc19C6YPSHXpTc75Hu+jVztA/N4PsZFasef1mJTNC2utZZlpxl awG7J62cqYQgvYjkq4beYBVaCn9T8GHan2Xud2/k86fH7egC7CsBrFJOBsYWEXcZ bbBLuajXIDRB86CEORYQIdQ1SACqhV4= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:08 2025 by rpki-client