$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa File: 0073bbbf-0e5a-3e34-a840-8c081704c58a.roa (raw, json) Hash identifier: jkC9G2Mr3AELGs4ff+ozkGq/n1nRwNgINimAsW2JYc4= Subject key identifier: 21:EC:05:89:81:74:1A:E2:92:32:A6:67:2E:59:00:C9:BE:CA:83:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD10BB3F83DD6051EC6480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.31.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:10:bb:3f:83:dd:60:51:ec:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=5f90d3a0-b473-48cd-a60b-f1913a3f1c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:95:2d:53:93:d7:a5:00:d5:94:f6:77:2f: 50:e8:cf:54:2a:9d:3f:84:15:9c:f6:60:33:0b:62: d2:ea:af:9f:bd:47:e4:ef:7f:92:d2:2c:3c:cd:64: 77:09:81:50:cd:7a:25:5e:ca:92:02:65:48:4e:72: 8f:12:72:8a:be:1e:85:22:f4:33:0a:c0:a0:d4:2a: 97:9c:f5:30:3f:0e:3d:7f:d1:18:f2:b6:b4:5a:7f: 81:f8:ab:7c:83:84:d2:06:e5:8c:0d:97:8c:ee:ab: 38:73:5d:55:cf:3a:4f:c6:13:ff:3d:b9:33:c8:8d: 9d:40:9f:a3:f3:df:53:0f:37:37:2d:bf:3e:d4:b7: ef:b1:bb:a4:ca:73:a9:7c:bc:3c:a3:52:99:6b:5b: 28:27:2f:59:05:f8:0a:9c:12:d7:60:36:38:7c:7c: bf:83:4b:33:9e:22:a6:d6:21:3e:b9:69:20:7e:49: 4f:80:81:e2:7d:f0:5f:b1:43:ed:83:b2:17:a5:9e: 4e:e3:63:ff:d9:ba:92:22:6c:3a:5a:6a:50:3c:23: 90:98:a7:e6:5c:42:80:17:bc:9c:f5:0f:b5:01:d1: 61:1e:b1:c0:c4:a7:38:d0:d0:63:2e:0a:bf:03:a7: 8f:dc:ba:e4:b0:8e:6b:13:8c:2f:d2:4f:7d:47:9e: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EC:05:89:81:74:1A:E2:92:32:A6:67:2E:59:00:C9:BE:CA:83:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a5:33:cc:31:dd:aa:e3:e0:a5:e0:65:26:71:12:ce:a1:67: 42:6f:0d:a2:f4:82:c6:5b:31:50:92:a0:aa:12:5b:1b:1f:34: a6:0f:7c:e4:96:83:3d:02:f2:25:0e:2e:ce:03:a0:9d:6a:68: 2f:42:be:01:1c:04:b9:c9:ac:c1:f2:cf:21:bc:68:ab:bd:96: 76:b8:71:1c:ce:f8:c0:a9:78:35:84:18:aa:83:58:ff:79:fa: 3b:88:66:74:39:e8:ab:2b:eb:6b:88:41:b5:1a:44:34:9e:95: 7a:a8:b0:d4:5d:d3:0b:dc:56:83:a6:e5:56:c7:2f:9c:36:33: 81:c5:43:29:3b:13:dc:e4:6e:61:17:f9:6b:2d:da:c3:86:cf: 61:87:cb:8f:23:cc:ad:96:56:53:f5:81:21:af:14:39:a2:40: 6a:93:fc:2e:2d:cc:31:52:fd:fa:81:ab:b0:7b:9a:9b:36:ab: 0f:b4:5a:df:91:7a:9c:a5:d9:ac:26:1c:6a:21:d6:e3:73:6d: cf:f0:b2:1d:c6:b8:7f:13:01:c9:ed:03:86:65:57:de:05:78: 67:e1:1b:90:c7:3b:74:d7:c7:4a:18:4f:2f:74:88:c9:8e:d1: e7:de:e6:90:4e:ee:e4:c1:77:1f:29:bb:c9:88:b6:2b:ec:da: 8d:c0:88:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRC7P4PdYFHsZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NWY5MGQzYTAtYjQ3My00OGNkLWE2MGItZjE5MTNhM2YxYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FKVLVOT16UA1ZT2dy9Q6M9UKp0/hBWc9mAz C2LS6q+fvUfk73+S0iw8zWR3CYFQzXolXsqSAmVITnKPEnKKvh6FIvQzCsCg1CqX nPUwPw49f9EY8ra0Wn+B+Kt8g4TSBuWMDZeM7qs4c11VzzpPxhP/PbkzyI2dQJ+j 899TDzc3Lb8+1LfvsbukynOpfLw8o1KZa1soJy9ZBfgKnBLXYDY4fHy/g0szniKm 1iE+uWkgfklPgIHiffBfsUPtg7IXpZ5O42P/2bqSImw6WmpQPCOQmKfmXEKAF7yc 9Q+1AdFhHrHAxKc40NBjLgq/A6eP3LrksI5rE4wv0k99R55BvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHsBYmBdBrikjKmZy5ZAMm+yoOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDA3M2JiYmYtMGU1YS0z ZTM0LWE4NDAtOGMwODE3MDRjNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAylM8wx3arj4KXgZSZxEs6hZ0JvDaL0gsZbMVCSoKoSWxsfNKYPfOSW gz0C8iUOLs4DoJ1qaC9CvgEcBLnJrMHyzyG8aKu9lna4cRzO+MCpeDWEGKqDWP95 +juIZnQ56Ksr62uIQbUaRDSelXqosNRd0wvcVoOm5VbHL5w2M4HFQyk7E9zkbmEX +Wst2sOGz2GHy48jzK2WVlP1gSGvFDmiQGqT/C4tzDFS/fqBq7B7mps2qw+0Wt+R epyl2awmHGoh1uNzbc/wsh3GuH8TAcntA4ZlV94FeGfhG5DHO3TXx0oYTy90iMmO 0efe5pBO7uTBdx8pu8mItivs2o3AiCk= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:43 2025 by rpki-client