$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa File: 0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa (raw, json) Hash identifier: q755rj4OoKju0Ooj5WsxxpJcsyeNt9mVnHGZk+ULxU8= Subject key identifier: 65:84:D4:9A:B3:2D:04:46:33:90:85:CB:F1:BB:0F:25:FD:F2:17:2C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C03B2B4C26AAD0593C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c0:3b:2b:4c:26:aa:d0:59:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=6a37b16e-9af3-4884-bddb-86c91180d61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:0e:5c:b3:f3:40:00:66:d8:05:26:24:06: e9:03:c3:f5:4f:82:fd:81:da:6c:fe:d4:c6:21:3d: 91:49:b3:dc:0a:51:65:12:85:02:04:e2:5c:33:24: bd:77:6b:43:e4:67:b7:a5:b7:33:b5:eb:ba:dc:d0: 39:ea:00:61:36:76:7a:40:0c:7b:5b:cc:32:4f:3d: 38:68:99:74:61:a7:21:fa:f2:01:43:58:e0:a8:77: 47:94:76:ed:81:df:8f:1c:15:59:98:cc:35:5c:9e: 52:5c:44:35:1c:c6:ac:e9:aa:b7:fb:c7:e4:5e:fa: 72:bf:90:54:27:d1:7b:b3:bc:00:c2:a9:93:13:db: e5:6b:54:fc:33:bd:c2:1c:6a:75:d3:27:e4:45:20: 46:c6:56:47:a8:0d:84:f8:7d:4b:14:8f:7a:7e:08: dc:cb:56:16:8a:ae:33:ec:1d:3f:e4:14:bb:84:2d: 2d:c4:42:c5:18:df:e2:2f:7f:77:76:22:b5:2d:df: 32:32:65:68:15:32:cd:82:a2:f9:47:36:db:eb:e0: 26:93:14:e3:11:a8:fc:62:ac:c4:a5:f8:fb:42:d7: b9:1b:c6:53:4a:a6:ca:70:e5:96:28:67:41:21:3f: a3:bd:e5:2f:96:e7:ae:c5:3b:e2:1b:67:08:2f:85: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:84:D4:9A:B3:2D:04:46:33:90:85:CB:F1:BB:0F:25:FD:F2:17:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:ad:20:d0:24:87:54:b3:f0:55:29:6e:ab:b0:8a:1a:bb:b3: a5:2d:4e:60:ae:23:e1:8c:2c:d3:0d:d1:a0:b6:04:25:33:24: d2:97:83:8e:f0:8a:2c:72:5a:b9:bd:d6:f3:5b:96:3a:e9:a5: 28:17:90:7b:a6:10:94:3a:80:40:38:ea:8d:b4:64:9a:55:db: 41:90:b0:47:1a:a8:29:35:0e:d4:bb:4e:b5:a5:b1:74:4c:c3: f7:25:9d:0f:2a:b9:7d:e2:d3:bf:2e:4c:0c:a5:94:64:05:f3: 9b:b6:df:55:e3:bb:07:38:84:2b:20:ce:c1:a2:b0:00:a5:46: 39:62:08:c5:7e:69:3f:a4:ca:b3:1d:9a:ca:96:82:7b:66:ec: 1a:7f:77:c8:04:0c:6f:22:64:88:04:7d:83:19:2d:25:16:9c: 82:29:2c:cc:dd:32:25:c3:33:af:9e:34:58:53:80:8b:78:62: bf:c9:34:d3:20:97:a0:5e:74:75:97:be:bd:ad:4d:ba:a9:0e: b7:ba:0d:38:dc:03:30:12:6a:22:83:c5:bf:90:c0:1f:1e:b4: 42:5b:0a:18:9f:d4:d5:0a:48:7d:7e:e5:2c:50:ba:65:f1:5b: bc:9e:72:13:f2:ad:7a:80:14:a1:82:d0:e5:75:82:d4:3b:3c: 63:ee:62:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8A7K0wmqtBZPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NmEzN2IxNmUtOWFmMy00ODg0LWJkZGItODZjOTExODBkNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkcOXLPzQABm2AUmJAbpA8P1T4L9gdps/tTG IT2RSbPcClFlEoUCBOJcMyS9d2tD5Ge3pbczteu63NA56gBhNnZ6QAx7W8wyTz04 aJl0Yach+vIBQ1jgqHdHlHbtgd+PHBVZmMw1XJ5SXEQ1HMas6aq3+8fkXvpyv5BU J9F7s7wAwqmTE9vla1T8M73CHGp10yfkRSBGxlZHqA2E+H1LFI96fgjcy1YWiq4z 7B0/5BS7hC0txELFGN/iL393diK1Ld8yMmVoFTLNgqL5Rzbb6+AmkxTjEaj8YqzE pfj7Qte5G8ZTSqbKcOWWKGdBIT+jveUvlueuxTviG2cIL4UvAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWE1JqzLQRGM5CFy/G7DyX98hcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGY4NDNmMjUtYmRmNS0z Y2YyLWFiNWItMmM1NGQ1ZDMwOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGtINAkh1Sz8FUpbquwihq7s6UtTmCuI+GMLNMN0aC2BCUzJNKXg47w iixyWrm91vNbljrppSgXkHumEJQ6gEA46o20ZJpV20GQsEcaqCk1DtS7TrWlsXRM w/clnQ8quX3i078uTAyllGQF85u231Xjuwc4hCsgzsGisAClRjliCMV+aT+kyrMd msqWgntm7Bp/d8gEDG8iZIgEfYMZLSUWnIIpLMzdMiXDM6+eNFhTgIt4Yr/JNNMg l6BedHWXvr2tTbqpDre6DTjcAzASaiKDxb+QwB8etEJbChif1NUKSH1+5SxQumXx W7yechPyrXqAFKGC0OV1gtQ7PGPuYiE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:44 2025 by rpki-client