$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa File: f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa (raw, json) Hash identifier: lmubK++W5RvkK1Dbr80rtgRiEfmRgVEGqztbGQoS5TA= Subject key identifier: 63:D7:36:1E:B7:6F:64:A2:62:51:30:01:59:57:7D:A3:0F:7F:84:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AA6F628E12564ABFB420B7100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 13335 IP address blocks: 104.23.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:28:e1:25:64:ab:fb:42:0b:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=a82f8097-c37c-48dc-a14f-43ea3918260b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8f:fd:38:03:6e:11:7a:c4:ff:4b:4f:38:a3: 26:c6:e4:9c:29:40:f5:d0:db:6f:0b:da:5f:c7:07: ce:c3:23:59:d5:39:04:b0:30:8e:4c:09:fd:06:31: 5a:bd:a3:d3:9a:72:4c:3a:95:86:e3:0e:07:47:0b: 5b:22:6e:11:61:4e:51:60:b6:9d:d3:7b:e2:32:7f: 0b:66:49:0c:d9:bc:47:93:75:d4:22:61:60:85:33: 87:e8:55:eb:1b:bd:8e:ef:a4:df:e9:49:29:4a:8a: 8f:c1:9f:e0:ab:17:d4:2b:da:44:d9:87:0f:ef:20: 3c:2d:65:17:0b:38:d4:6d:ff:80:46:6b:b4:50:65: cf:37:9e:f4:9a:9b:dc:23:f8:e5:0c:11:08:61:ec: 5b:4e:df:a3:85:07:09:40:5c:2d:04:f5:6e:de:1b: 4c:92:fb:37:e0:e2:80:92:64:72:da:ad:96:07:74: ef:b2:d6:3b:1d:8b:89:fc:ed:28:ed:ef:ac:87:77: d8:58:3b:33:5e:d0:dc:ce:72:8b:65:7a:d9:1e:53: e8:01:27:88:4f:78:46:4b:ba:c8:95:3c:37:76:ac: 40:d0:1d:13:74:7f:a5:4c:15:9e:eb:da:32:af:5d: 5a:2c:f3:99:e2:1a:bb:20:c8:86:e1:df:d2:62:56: 52:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D7:36:1E:B7:6F:64:A2:62:51:30:01:59:57:7D:A3:0F:7F:84:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:de:ea:23:ae:2c:7f:30:26:1a:5a:ba:ae:35:cc:28:25:5c: 71:55:bf:03:95:9b:56:5b:78:ed:e7:5b:36:95:fe:49:c2:38: c7:10:63:fb:24:b9:ef:49:f1:f7:20:16:45:72:7e:56:70:f0: f6:c7:66:eb:8a:33:76:85:ed:1e:25:5c:a5:52:c6:0d:70:28: 00:25:98:d4:73:25:5c:be:0c:b8:d6:57:03:02:36:77:c0:30: 65:a2:66:73:81:72:b6:f9:c7:78:ce:e2:22:f3:ca:43:f0:c2: 18:ed:0b:df:0c:46:b7:f1:f7:de:8c:43:5e:ec:a8:dd:4a:44: 07:01:a5:14:65:86:67:17:5e:dc:af:79:22:b6:83:d3:12:66: 15:b3:cd:45:15:c7:c1:1c:15:98:f9:ee:d8:29:31:e2:1f:2b: f0:a1:b6:7d:c9:af:4c:04:9b:ac:bc:1c:df:bc:10:4f:db:f7: c2:a2:bf:e0:b9:b0:b3:96:22:b4:de:75:e7:6d:67:4c:06:ab: f1:23:44:af:29:9c:b0:8b:b0:c1:be:45:6a:18:0b:e0:46:04: 9c:43:e6:16:da:6a:cb:c9:5f:0a:f7:36:80:77:f3:bd:a7:69: 36:87:3a:25:d0:30:c3:3d:09:21:1c:75:a8:7a:31:41:2b:2f: 97:89:aa:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9ijhJWSr+0ILcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YTgyZjgwOTctYzM3Yy00OGRjLWExNGYtNDNlYTM5MTgyNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY/9OANuEXrE/0tPOKMmxuScKUD10NtvC9pf xwfOwyNZ1TkEsDCOTAn9BjFavaPTmnJMOpWG4w4HRwtbIm4RYU5RYLad03viMn8L ZkkM2bxHk3XUImFghTOH6FXrG72O76Tf6UkpSoqPwZ/gqxfUK9pE2YcP7yA8LWUX CzjUbf+ARmu0UGXPN570mpvcI/jlDBEIYexbTt+jhQcJQFwtBPVu3htMkvs34OKA kmRy2q2WB3TvstY7HYuJ/O0o7e+sh3fYWDszXtDcznKLZXrZHlPoASeIT3hGS7rI lTw3dqxA0B0TdH+lTBWe69oyr11aLPOZ4hq7IMiG4d/SYlZSEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPXNh63b2SiYlEwAVlXfaMPf4T+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjhlNTdjODUtOWYyNy0z NzEyLTgxZWYtZWVjNzRlM2UzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHve6iOuLH8wJhpauq41zCglXHFVvwOVm1ZbeO3nWzaV/knCOMcQY/sk ue9J8fcgFkVyflZw8PbHZuuKM3aF7R4lXKVSxg1wKAAlmNRzJVy+DLjWVwMCNnfA MGWiZnOBcrb5x3jO4iLzykPwwhjtC98MRrfx996MQ17sqN1KRAcBpRRlhmcXXtyv eSK2g9MSZhWzzUUVx8EcFZj57tgpMeIfK/Chtn3Jr0wEm6y8HN+8EE/b98Kiv+C5 sLOWIrTededtZ0wGq/EjRK8pnLCLsMG+RWoYC+BGBJxD5hbaasvJXwr3NoB3872n aTaHOiXQMMM9CSEcdah6MUErL5eJqis= -----END CERTIFICATE-----Generated at Mon Aug 4 01:33:45 2025 by rpki-client