$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9678d797-0bde-3845-afab-260a1b366edc.roa File: 9678d797-0bde-3845-afab-260a1b366edc.roa (raw, json) Hash identifier: LleI7xIAHsxEQDxn33MPSTIZS11mghxG3UYQ5AfA5H4= Subject key identifier: 17:B8:2A:2C:17:94:36:32:E8:A3:29:C3:32:85:2D:CF:75:6A:66:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A14ADA4B71C4CCC2235B04F38 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9678d797-0bde-3845-afab-260a1b366edc.roa Signing time: Wed 04 Jun 2025 15:26:48 +0000 ROA not before: Wed 04 Jun 2025 15:26:48 +0000 ROA not after: Tue 02 Sep 2025 15:26:48 +0000 asID: 13335 IP address blocks: 104.23.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:ad:a4:b7:1c:4c:cc:22:35:b0:4f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 4 15:26:48 2025 GMT Not After : Sep 2 15:26:48 2025 GMT Subject: CN=4d328340-98e6-41eb-973f-5646d8ea3a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:97:81:a7:34:d8:50:26:99:29:cf:d9:cb:80: 1d:1f:52:c8:79:e5:fb:39:b2:e6:ff:47:25:9f:ed: 37:ed:74:88:b3:66:f5:d6:ba:77:8b:88:15:b7:aa: 86:23:35:0c:d6:6e:ea:e5:f9:03:cb:77:d4:70:87: 54:fa:d9:7f:1c:74:88:99:6f:8d:1a:ba:84:f4:cf: b0:3e:3b:78:32:43:d9:97:e0:d2:92:24:d3:8e:ba: ce:89:d2:fa:79:7a:18:85:10:f4:29:df:3c:e4:0d: bc:b3:f2:94:e2:64:14:da:b2:4a:f0:2b:ef:07:e4: be:ac:dc:d4:44:12:15:77:ac:c1:62:cb:67:29:22: 6e:d5:67:c0:b2:36:36:54:56:e4:50:96:fb:ab:aa: 65:75:ad:87:ac:4e:0a:0e:de:6e:5a:8d:f2:8f:df: b5:ff:0f:82:ba:24:fc:92:be:26:38:79:12:ab:2f: ee:11:cd:e9:29:78:f2:02:b2:cd:a1:54:e4:65:a3: 87:eb:c1:19:72:8d:17:43:13:f6:39:22:34:69:56: db:57:5c:70:73:20:9e:ab:2a:3b:43:1a:bc:97:bd: b9:a2:81:a7:0a:fa:69:2e:d4:65:1c:87:81:d3:60: 77:53:c2:d0:a2:8b:cd:d0:ac:50:d5:75:37:1e:60: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:2A:2C:17:94:36:32:E8:A3:29:C3:32:85:2D:CF:75:6A:66:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9678d797-0bde-3845-afab-260a1b366edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:24:00:b8:f0:8f:66:1f:b4:9a:c0:e6:f2:59:11:99:c1:5b: a9:09:7f:3f:db:0a:30:2a:5a:4f:85:c0:60:fb:c7:84:ed:0d: 67:6e:fa:49:9b:d2:f1:35:5d:c1:94:c1:31:01:51:df:3e:11: 9f:ef:77:45:2a:02:46:ad:a8:dd:46:d7:dd:86:80:d0:f8:7d: dc:bb:95:46:ed:22:7a:b3:fb:51:91:c3:98:ee:5d:e3:a2:35: 45:f4:d7:9a:bc:ff:3b:c2:7c:21:79:71:d7:87:da:e5:09:3e: 23:a3:a1:cd:a4:90:5c:83:a1:70:ea:fb:7f:4b:21:54:8c:0f: 11:c7:d7:37:78:bf:09:32:19:06:37:a3:13:d5:f6:5b:3d:e6: 48:b9:5f:2f:b5:b2:e9:33:77:0d:d8:de:df:d9:80:0c:c3:4c: b5:12:ec:c5:64:c3:b3:56:4a:a2:e5:80:5d:b6:81:54:fa:30: e2:da:db:c3:a3:42:28:53:01:b4:08:12:2d:3d:2c:00:aa:ff: fd:c7:40:20:21:c9:53:33:4d:ce:5a:f5:15:ad:ee:12:80:a3: 4b:21:13:db:75:b0:22:8a:f1:7a:28:cc:5c:ac:6d:16:6c:f0: f6:59:c8:19:4a:ac:4f:42:5c:45:ff:5a:f0:72:66:71:7d:2e: 8a:f9:f0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUraS3HEzMIjWwTzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDYwNDE1MjY0OFoXDTI1MDkwMjE1MjY0OFowLzEtMCsGA1UEAxMk NGQzMjgzNDAtOThlNi00MWViLTk3M2YtNTY0NmQ4ZWEzYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5eBpzTYUCaZKc/Zy4AdH1LIeeX7ObLm/0cl n+037XSIs2b11rp3i4gVt6qGIzUM1m7q5fkDy3fUcIdU+tl/HHSImW+NGrqE9M+w Pjt4MkPZl+DSkiTTjrrOidL6eXoYhRD0Kd885A28s/KU4mQU2rJK8CvvB+S+rNzU RBIVd6zBYstnKSJu1WfAsjY2VFbkUJb7q6plda2HrE4KDt5uWo3yj9+1/w+CuiT8 kr4mOHkSqy/uEc3pKXjyArLNoVTkZaOH68EZco0XQxP2OSI0aVbbV1xwcyCeqyo7 Qxq8l725ooGnCvppLtRlHIeB02B3U8LQoovN0KxQ1XU3HmBGpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe4KiwXlDYy6KMpwzKFLc91ambdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY3OGQ3OTctMGJkZS0z ODQ1LWFmYWItMjYwYTFiMzY2ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYkALjwj2YftJrA5vJZEZnBW6kJfz/bCjAqWk+FwGD7x4TtDWdu+kmb 0vE1XcGUwTEBUd8+EZ/vd0UqAkatqN1G192GgND4fdy7lUbtInqz+1GRw5juXeOi NUX015q8/zvCfCF5cdeH2uUJPiOjoc2kkFyDoXDq+39LIVSMDxHH1zd4vwkyGQY3 oxPV9ls95ki5Xy+1sukzdw3Y3t/ZgAzDTLUS7MVkw7NWSqLlgF22gVT6MOLa28Oj QihTAbQIEi09LACq//3HQCAhyVMzTc5a9RWt7hKAo0shE9t1sCKK8XoozFysbRZs 8PZZyBlKrE9CXEX/WvByZnF9Lor58Jw= -----END CERTIFICATE-----Generated at Mon Jun 16 08:58:24 2025 by rpki-client