$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ebfcd154-6e18-35f7-83fb-7d08fa38bd3b.roa File: ebfcd154-6e18-35f7-83fb-7d08fa38bd3b.roa (raw, json) Hash identifier: d2An7Wm4ekRo0eLsgot+ginWX3sZqD/sHNxSaqWfNKU= Subject key identifier: 35:D7:8A:23:CF:DA:99:78:94:CD:04:9A:C2:79:E4:3E:C6:79:0C:99 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B01B147A761E3C181EFE36D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ebfcd154-6e18-35f7-83fb-7d08fa38bd3b.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 104.23.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:47:a7:61:e3:c1:81:ef:e3:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=29d8e133-001f-46c4-ba96-846e118caf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:16:a0:2d:9d:dd:12:57:16:12:3e:ce:65:2e: 56:b9:32:84:93:83:f7:1f:f6:ee:2c:eb:3f:29:82: 93:82:ee:1f:81:48:1a:1c:55:71:8d:8a:cd:78:27: c4:db:4c:45:78:ff:22:e0:d0:fd:6f:34:6b:ef:39: f0:2e:a0:42:95:3b:8e:25:48:20:99:c6:06:85:a4: 85:0e:ff:28:a0:06:b3:0b:cc:44:12:20:41:96:a1: 58:a7:27:dd:5d:58:e5:1e:fb:4c:9a:04:2e:2a:ab: af:26:e6:f4:e7:1f:6b:b1:a7:18:d4:1f:e5:c6:af: f2:b1:87:87:82:3e:97:80:6b:85:2d:b1:28:66:12: 91:d5:b1:f1:01:3f:ca:99:88:f8:a7:82:f4:2d:eb: 85:ae:f9:87:7f:99:40:7f:12:c8:b8:a2:62:58:07: 80:e8:89:e2:0d:6c:8d:cb:c5:ce:d6:83:83:72:ed: d9:bd:9c:0b:fa:30:3b:8b:e1:01:18:df:cf:2b:f7: 5f:15:53:fd:e9:6f:a9:26:e6:09:76:2e:78:50:89: 8d:07:37:83:2c:b3:47:49:b1:35:c0:e1:0b:08:31: 82:2f:0e:8e:1c:de:30:d2:10:0e:f8:cf:1f:49:38: d7:69:70:e3:0a:29:af:ee:17:8b:0e:ea:d6:30:36: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D7:8A:23:CF:DA:99:78:94:CD:04:9A:C2:79:E4:3E:C6:79:0C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ebfcd154-6e18-35f7-83fb-7d08fa38bd3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:45:49:cf:10:66:03:fe:1d:52:38:36:26:c1:b6:45:57:7b: d4:56:ae:47:99:00:94:06:79:cc:63:13:71:d1:7f:db:b8:bd: ac:dc:4b:8b:4b:b8:46:63:ce:03:2f:22:10:ee:56:94:d5:4c: ec:5e:1f:c9:39:1d:f7:62:b5:9a:af:94:2f:26:85:2e:d5:23: c2:fe:46:0a:70:8c:e1:bf:aa:b1:d2:79:56:61:52:fb:46:bb: ca:87:44:79:91:fd:e1:39:df:86:37:de:aa:87:b4:34:fc:63: ad:3e:29:32:fa:8d:b9:46:f2:f9:7b:62:ee:7f:0d:2e:37:98: 18:19:6e:6e:a9:97:2c:80:67:52:c3:dd:19:4c:82:d2:9f:27: 5f:a8:4f:e9:a7:8a:77:6e:da:5a:6a:f4:9f:73:40:ff:fc:e6: fd:fa:5a:11:45:38:af:c7:00:cf:fa:d1:ca:ce:32:92:cb:30: 90:99:93:fd:c8:c3:1f:3b:a8:46:b6:30:4d:90:31:03:49:f2: 74:20:a5:9d:ae:69:94:7c:5d:b2:7c:7e:34:51:52:bf:e4:fb: cf:86:b3:4c:85:ca:57:eb:22:39:c7:b1:4f:e9:93:ab:d3:88: 4e:9b:b9:ee:5a:30:d8:8c:05:0f:40:65:aa:65:1f:92:cc:04: 99:02:e0:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBsUenYePBge/jbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk MjlkOGUxMzMtMDAxZi00NmM0LWJhOTYtODQ2ZTExOGNhZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRagLZ3dElcWEj7OZS5WuTKEk4P3H/buLOs/ KYKTgu4fgUgaHFVxjYrNeCfE20xFeP8i4ND9bzRr7znwLqBClTuOJUggmcYGhaSF Dv8ooAazC8xEEiBBlqFYpyfdXVjlHvtMmgQuKquvJub05x9rsacY1B/lxq/ysYeH gj6XgGuFLbEoZhKR1bHxAT/KmYj4p4L0LeuFrvmHf5lAfxLIuKJiWAeA6IniDWyN y8XO1oODcu3ZvZwL+jA7i+EBGN/PK/dfFVP96W+pJuYJdi54UImNBzeDLLNHSbE1 wOELCDGCLw6OHN4w0hAO+M8fSTjXaXDjCimv7heLDurWMDbSZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXXiiPP2pl4lM0EmsJ55D7GeQyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWJmY2QxNTQtNmUxOC0z NWY3LTgzZmItN2QwOGZhMzhiZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdFSc8QZgP+HVI4NibBtkVXe9RWrkeZAJQGecxjE3HRf9u4vazcS4tL uEZjzgMvIhDuVpTVTOxeH8k5HfditZqvlC8mhS7VI8L+RgpwjOG/qrHSeVZhUvtG u8qHRHmR/eE534Y33qqHtDT8Y60+KTL6jblG8vl7Yu5/DS43mBgZbm6plyyAZ1LD 3RlMgtKfJ1+oT+mnindu2lpq9J9zQP/85v36WhFFOK/HAM/60crOMpLLMJCZk/3I wx87qEa2ME2QMQNJ8nQgpZ2uaZR8XbJ8fjRRUr/k+8+Gs0yFylfrIjnHsU/pk6vT iE6bue5aMNiMBQ9AZaplH5LMBJkC4L4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:44 2025 by rpki-client