$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa File: 02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa (raw, json) Hash identifier: ev2GlSGVaggBrd2wGgLT0H0SE8Csi1B1aU+g+hkyM2I= Subject key identifier: A1:52:B7:5F:64:06:90:C4:A1:CA:28:5E:6C:07:5B:62:85:57:6B:BE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD10402E9A7A2479A8D080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.31.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:10:40:2e:9a:7a:24:79:a8:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=7e8d5513-a895-4d78-9f59-ca2ecd281a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:a0:85:65:eb:60:69:48:b9:d2:0c:f4:fd: 1b:ff:c7:78:64:c5:cd:95:1c:20:66:dd:b6:01:2a: 11:c1:4f:6d:66:f7:0e:a7:1b:6e:62:f9:1b:64:5d: e2:18:3d:64:b1:8e:ec:43:56:9b:b2:79:6b:ff:ff: 4f:9c:c9:0c:6f:96:d0:39:a7:5f:8d:34:d2:d8:3e: 9a:00:07:57:0b:16:66:77:b4:c1:a0:6d:1c:86:92: cd:0b:b3:4d:ec:0f:f4:42:e4:62:2d:50:bc:27:85: f1:0d:f8:8b:99:d2:b8:c1:7a:63:4d:de:a1:cd:95: e3:35:08:84:04:f0:7e:55:e4:3e:a4:04:ca:e7:64: ff:98:a6:a2:5a:80:f8:fe:d3:65:2c:41:92:07:5f: 7f:4c:28:45:a2:81:f7:2c:8d:19:29:25:7b:f9:b1: 88:f6:90:f0:fc:c1:96:28:32:90:b8:bd:cd:31:e3: b3:92:d6:31:a4:03:2e:13:99:d7:cb:30:59:78:e2: f2:77:ca:a0:f4:da:2d:5c:d6:8d:b3:1d:03:42:e2: ad:43:4b:ec:7e:ad:0e:a3:73:54:e0:ac:3e:f4:eb: ba:40:73:12:2a:e0:36:7f:73:e8:df:df:71:c8:a8: ef:f7:a8:01:50:b4:38:44:b1:81:39:a2:ea:8d:89: 87:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:B7:5F:64:06:90:C4:A1:CA:28:5E:6C:07:5B:62:85:57:6B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d3:0b:d4:9d:03:8f:4f:76:a9:e6:33:1e:64:3c:7d:e2:2c: b6:3d:ae:5b:76:05:a1:6c:8a:94:69:b0:99:50:7c:86:f4:6f: d8:4f:80:5a:f1:d2:2c:26:1f:b8:69:ba:20:35:e7:66:13:8f: c6:0b:ee:b4:3b:c8:e5:bd:3b:ad:96:58:28:b3:6f:02:e8:56: 4d:7c:1a:3d:ef:a1:0d:74:49:66:59:f5:da:32:9b:b6:bd:d5: 71:e0:58:ea:76:77:f3:91:ab:eb:49:1b:ac:0a:1e:1f:8d:9d: 01:b6:f6:51:15:cb:1d:17:90:f6:ce:81:bc:30:ee:1a:13:af: b6:52:58:05:d4:83:b6:40:46:21:a2:3a:09:b9:12:1f:e2:f9: 90:e5:5c:9f:f2:92:0e:b7:24:ad:f1:ab:82:99:b0:0b:40:c0: bf:fe:86:80:5b:a8:2d:d9:01:7f:4d:c5:67:74:7b:67:f3:90: bb:ac:f6:c9:50:62:5c:38:db:94:c4:8a:38:ca:bd:df:a1:f9: bd:0a:27:5d:a8:76:9b:71:3b:e0:d4:74:22:3d:d0:95:e7:2e: 26:0d:2f:d9:0c:92:55:34:f3:ce:77:c9:09:e2:7e:14:72:c3: f6:36:33:29:d9:f6:9f:4e:af:a6:03:4e:ed:38:a3:12:43:26: c1:f3:f3:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRBALpp6JHmo0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk N2U4ZDU1MTMtYTg5NS00ZDc4LTlmNTktY2EyZWNkMjgxYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb+ghWXrYGlIudIM9P0b/8d4ZMXNlRwgZt22 ASoRwU9tZvcOpxtuYvkbZF3iGD1ksY7sQ1absnlr//9PnMkMb5bQOadfjTTS2D6a AAdXCxZmd7TBoG0chpLNC7NN7A/0QuRiLVC8J4XxDfiLmdK4wXpjTd6hzZXjNQiE BPB+VeQ+pATK52T/mKaiWoD4/tNlLEGSB19/TChFooH3LI0ZKSV7+bGI9pDw/MGW KDKQuL3NMeOzktYxpAMuE5nXyzBZeOLyd8qg9NotXNaNsx0DQuKtQ0vsfq0Oo3NU 4Kw+9Ou6QHMSKuA2f3Po399xyKjv96gBULQ4RLGBOaLqjYmHOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFSt19kBpDEocooXmwHW2KFV2u+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDJkMTY0MjAtYTQxYi0z NGM1LThlZDAtZjJkMTFjYmQ4NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfTC9SdA49PdqnmMx5kPH3iLLY9rlt2BaFsipRpsJlQfIb0b9hPgFrx 0iwmH7hpuiA152YTj8YL7rQ7yOW9O62WWCizbwLoVk18Gj3voQ10SWZZ9doym7a9 1XHgWOp2d/ORq+tJG6wKHh+NnQG29lEVyx0XkPbOgbww7hoTr7ZSWAXUg7ZARiGi Ogm5Eh/i+ZDlXJ/ykg63JK3xq4KZsAtAwL/+hoBbqC3ZAX9NxWd0e2fzkLus9slQ Ylw425TEijjKvd+h+b0KJ12odptxO+DUdCI90JXnLiYNL9kMklU08853yQnifhRy w/Y2MynZ9p9Or6YDTu04oxJDJsHz8zg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:14 2025 by rpki-client