$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02db180e-bb79-3961-a2c7-f6b99fa07eb3.roa File: 02db180e-bb79-3961-a2c7-f6b99fa07eb3.roa (raw, json) Hash identifier: J09gMvdSp7cHEWDQPYBqDuPFumqQBCE7AZTCz0kNrME= Subject key identifier: 89:8D:60:BE:2B:35:98:9E:12:90:C3:80:D7:F8:90:88:FD:29:28:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C31CEF56128EA31C11E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02db180e-bb79-3961-a2c7-f6b99fa07eb3.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.24.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c3:1c:ef:56:12:8e:a3:1c:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=ec97f308-30df-4e7d-845b-b72b11f82227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:75:c1:1c:35:19:86:dc:0f:df:18:20:b6: da:ea:ac:01:40:15:12:dc:d2:39:af:25:ef:c0:8f: 12:ac:7b:7a:af:f3:6d:ab:63:0b:94:ca:e9:a4:f3: de:a1:61:84:41:ca:a5:d1:95:cd:d2:38:bc:8a:03: e1:94:ea:56:29:42:c7:67:0e:d3:0d:98:21:3b:52: 69:d9:66:b6:bb:22:29:de:b9:9a:56:2e:4b:8d:97: ae:72:0f:63:25:3a:cd:26:7e:41:dd:f7:b7:e2:25: 2e:af:48:cf:e5:01:2e:90:4d:b5:6b:95:bd:2a:5e: d9:be:b3:31:3b:68:2b:4f:50:29:0e:74:6f:0b:f9: ae:9b:e5:86:14:45:33:1d:11:63:97:76:45:96:3f: 12:73:02:5c:b6:c3:d5:56:e9:76:a3:8a:ee:b1:9b: e2:31:df:4b:39:c8:96:82:4c:15:f1:c7:cb:78:4c: fd:e0:29:8d:c7:8a:2c:e8:36:c5:62:29:d1:66:61: 52:0f:bc:e3:70:b7:e5:5c:79:6c:f4:cd:43:16:bf: f3:43:23:fb:1d:bc:ac:59:61:11:3c:34:66:13:7c: c0:0c:87:89:c3:a0:03:ef:68:97:2a:f6:c5:84:f9: e4:1f:3c:ac:84:f2:5c:73:4c:e2:51:ae:b6:8b:0e: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8D:60:BE:2B:35:98:9E:12:90:C3:80:D7:F8:90:88:FD:29:28:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02db180e-bb79-3961-a2c7-f6b99fa07eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e6:1c:ba:23:da:29:a6:e4:80:3c:60:dc:bb:21:7e:4a:59: 3c:c6:e9:a5:fc:49:7a:21:d1:d4:ec:5c:f4:c3:71:8a:d2:28: 86:53:0b:c6:e5:e3:55:9f:92:f0:fb:fb:20:c3:97:f2:9b:6f: ff:df:fc:88:9b:22:51:f2:fa:93:38:ea:2d:90:08:6b:d9:5c: f6:96:29:6e:60:7f:22:8a:b7:52:bc:c9:ef:1e:39:2a:fd:66: 27:d6:80:4e:c1:7a:db:12:4a:00:13:61:e8:39:9d:3c:90:8c: 84:c2:f8:fd:59:ca:ec:89:0d:c3:c5:40:09:74:cf:2e:ed:e4: 09:26:97:8f:8e:31:40:e0:5e:b8:d0:d1:af:84:ff:b3:a7:6c: 1d:ff:72:65:39:c8:1c:76:97:29:7f:f3:fa:cb:15:a1:4b:c9: 81:c8:6f:dd:d1:6f:cb:83:2c:22:59:58:10:ba:32:d4:33:6b: b4:1d:5f:42:24:3b:e5:00:aa:b5:58:fd:8d:84:8b:95:27:64: 50:57:b1:06:5c:23:a8:f2:c9:7f:34:32:ca:9c:f8:47:9a:d9: e2:d2:4c:ab:33:b4:fa:57:19:c8:6d:c6:9c:b4:4a:53:fb:ac: 74:f5:47:29:3f:a2:92:3f:9a:2c:76:b9:d9:68:ab:b4:ce:21: b6:10:cb:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8Mc71YSjqMcEeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWM5N2YzMDgtMzBkZi00ZTdkLTg0NWItYjcyYjExZjgyMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosZ1wRw1GYbcD98YILba6qwBQBUS3NI5ryXv wI8SrHt6r/Ntq2MLlMrppPPeoWGEQcql0ZXN0ji8igPhlOpWKULHZw7TDZghO1Jp 2Wa2uyIp3rmaVi5LjZeucg9jJTrNJn5B3fe34iUur0jP5QEukE21a5W9Kl7ZvrMx O2grT1ApDnRvC/mum+WGFEUzHRFjl3ZFlj8ScwJctsPVVul2o4rusZviMd9LOciW gkwV8cfLeEz94CmNx4os6DbFYinRZmFSD7zjcLflXHls9M1DFr/zQyP7HbysWWER PDRmE3zADIeJw6AD72iXKvbFhPnkHzyshPJcc0ziUa62iw7s3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImNYL4rNZieEpDDgNf4kIj9KShuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDJkYjE4MGUtYmI3OS0z OTYxLWEyYzctZjZiOTlmYTA3ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzmHLoj2imm5IA8YNy7IX5KWTzG6aX8SXoh0dTsXPTDcYrSKIZTC8bl 41WfkvD7+yDDl/Kbb//f/IibIlHy+pM46i2QCGvZXPaWKW5gfyKKt1K8ye8eOSr9 ZifWgE7BetsSSgATYeg5nTyQjITC+P1ZyuyJDcPFQAl0zy7t5Akml4+OMUDgXrjQ 0a+E/7OnbB3/cmU5yBx2lyl/8/rLFaFLyYHIb93Rb8uDLCJZWBC6MtQza7QdX0Ik O+UAqrVY/Y2Ei5UnZFBXsQZcI6jyyX80Msqc+Eea2eLSTKsztPpXGchtxpy0SlP7 rHT1Ryk/opI/mix2udloq7TOIbYQyx4= -----END CERTIFICATE-----Generated at Sat Nov 1 15:27:28 2025 by rpki-client