$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa File: f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa (raw, json) Hash identifier: VoDVNYHy0u/AMnBiQa1XQzK0p2xVe1MBRQiCHqrUwd4= Subject key identifier: 34:59:3A:AA:C0:84:38:10:2C:12:46:69:73:F2:EA:50:1F:06:7C:CD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB45D0A8463582428FBE8C480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 13335 IP address blocks: 104.23.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0a:84:63:58:24:28:fb:e8:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=3ae1d669-8337-4ae2-be65-ce68357bf1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b7:4b:de:03:f8:81:a4:fb:31:3a:50:94:44: e9:71:22:de:3a:a9:ca:db:7c:69:71:7d:50:19:1a: f0:71:bc:cc:37:a8:6e:f8:0c:3a:b4:77:34:11:00: 6b:15:42:77:32:6f:a6:dc:a6:30:4d:3b:82:27:17: 5c:a2:fd:fd:d2:6d:74:0c:c7:46:dd:06:27:59:d4: 75:55:af:ef:22:c5:44:6c:9e:65:c0:6c:e3:b8:66: ba:81:af:ab:c6:50:99:73:64:9a:56:61:a4:c5:d0: db:a2:8f:c8:8a:34:2c:be:27:71:49:bf:ea:38:5b: 08:43:00:29:74:8f:0e:90:80:71:8a:cc:aa:d3:ad: 7f:b2:1a:5c:14:fc:bd:8f:6a:30:14:36:78:39:20: 5f:6c:e1:5f:c8:4e:ff:da:32:f8:61:aa:66:f6:a7: 85:35:3f:e2:67:b4:4f:90:bd:71:05:54:9c:2f:72: 8f:c1:57:97:15:fb:7b:12:77:bf:25:42:b5:1a:98: 62:67:e5:19:96:6f:73:2e:f9:ef:eb:bb:d9:95:e3: cc:2d:6a:23:2d:b8:51:21:c0:24:a3:80:c5:5e:e2: ba:fe:cb:c8:bb:c9:f0:9f:1e:5a:49:39:94:c9:fa: 47:a0:35:2b:09:16:0a:74:d2:3a:e5:2d:ba:52:85: a1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:59:3A:AA:C0:84:38:10:2C:12:46:69:73:F2:EA:50:1F:06:7C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:39:09:e0:c6:22:26:1c:8a:54:59:e8:7d:c9:b2:2a:46:b5: 9a:da:99:a7:22:fa:61:58:57:a6:be:47:08:9f:5a:1c:b8:4c: aa:e8:96:a3:d8:4a:cd:94:6e:6f:39:1f:0e:cc:d7:06:06:40: 60:a5:ba:8b:53:67:55:44:45:ef:e6:8f:2a:f3:37:23:f2:37: b0:19:d5:9e:83:1f:22:d6:21:e5:75:92:6a:3a:05:1b:20:90: da:a4:92:dd:c0:b8:95:d5:ae:64:95:a5:37:f6:a4:91:ec:b5: 23:e9:8c:20:63:2d:99:9c:83:66:8c:c0:c7:37:05:9d:1b:54: 09:60:c0:fe:45:a6:61:ed:ac:36:3f:58:59:1d:22:bf:0f:fe: 72:9f:8e:36:8d:31:56:ea:9a:f0:21:34:af:9b:54:4a:fe:dc: ef:c9:3c:42:35:39:7e:c6:29:b0:7b:76:92:c2:b5:56:ab:e4: c3:c2:3a:13:94:09:f2:57:af:03:fd:8b:ef:78:5b:71:af:d3: 33:59:cb:9b:f0:2b:09:86:f0:5b:1b:b1:9a:7c:d9:8f:7f:d7: 72:30:8c:26:af:06:da:1d:96:d0:06:1d:a0:88:a0:2e:1a:16: fb:fd:c5:e5:aa:a1:7e:5b:be:ef:88:f5:ee:70:e8:24:ab:8c: a0:d6:1b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQqEY1gkKPvoxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk M2FlMWQ2NjktODMzNy00YWUyLWJlNjUtY2U2ODM1N2JmMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47dL3gP4gaT7MTpQlETpcSLeOqnK23xpcX1Q GRrwcbzMN6hu+Aw6tHc0EQBrFUJ3Mm+m3KYwTTuCJxdcov390m10DMdG3QYnWdR1 Va/vIsVEbJ5lwGzjuGa6ga+rxlCZc2SaVmGkxdDboo/IijQsvidxSb/qOFsIQwAp dI8OkIBxisyq061/shpcFPy9j2owFDZ4OSBfbOFfyE7/2jL4Yapm9qeFNT/iZ7RP kL1xBVScL3KPwVeXFft7Ene/JUK1GphiZ+UZlm9zLvnv67vZlePMLWojLbhRIcAk o4DFXuK6/svIu8nwnx5aSTmUyfpHoDUrCRYKdNI65S26UoWhWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRZOqrAhDgQLBJGaXPy6lAfBnzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjdlYmE2MjQtYTU5Yy0z ZmNjLThhZDEtNzc5ODUxOWRjM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg5CeDGIiYcilRZ6H3JsipGtZramaci+mFYV6a+RwifWhy4TKrolqPY Ss2Ubm85Hw7M1wYGQGCluotTZ1VERe/mjyrzNyPyN7AZ1Z6DHyLWIeV1kmo6BRsg kNqkkt3AuJXVrmSVpTf2pJHstSPpjCBjLZmcg2aMwMc3BZ0bVAlgwP5FpmHtrDY/ WFkdIr8P/nKfjjaNMVbqmvAhNK+bVEr+3O/JPEI1OX7GKbB7dpLCtVar5MPCOhOU CfJXrwP9i+94W3Gv0zNZy5vwKwmG8FsbsZp82Y9/13IwjCavBtodltAGHaCIoC4a Fvv9xeWqoX5bvu+I9e5w6CSrjKDWG+8= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:55 2025 by rpki-client