$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/153dca45-7f28-34a9-8192-6d742d669544.roa File: 153dca45-7f28-34a9-8192-6d742d669544.roa (raw, json) Hash identifier: fj6kYdR4ovoTU0LxoFsWWxxmx4AgP6GxWBvPsIqFI8Y= Subject key identifier: 5A:6F:15:41:01:4D:51:47:C6:C6:73:6B:87:88:94:B9:91:E9:55:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BF6D2AEB3D535C822680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/153dca45-7f28-34a9-8192-6d742d669544.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bf:6d:2a:eb:3d:53:5c:82:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=0ca13d99-df6b-409b-9f12-f7ca92ac3831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:73:ff:87:76:64:93:df:61:07:c1:01:44:d2: 6e:71:de:88:dd:da:c0:d3:f2:a8:36:ca:05:34:cf: 35:2c:16:b6:1f:c0:4a:5c:af:7b:d0:b6:2b:d1:ca: d8:d7:48:0e:69:70:bc:bc:b9:89:b7:11:16:8f:86: 8f:4a:f6:2f:7e:b2:ac:0f:45:ff:d1:3b:3c:05:29: 60:4c:ea:e5:3b:57:2a:35:26:8c:b4:23:a9:c8:cc: a7:b4:87:0d:4f:01:08:53:39:0a:c0:6a:66:11:87: 0f:b8:0e:de:56:99:01:99:f9:23:af:5a:82:00:13: 03:a2:7f:0d:15:27:58:36:74:36:7d:2b:72:46:6d: 26:18:8a:6f:88:38:5d:b5:26:81:d2:bf:8a:4b:de: a3:9a:d9:0f:88:02:96:65:7d:33:10:d3:6a:bd:fc: 3e:9a:1a:5f:d7:9d:cb:0d:05:ee:ab:40:61:26:50: fe:86:ff:9d:dc:ad:25:74:bb:a3:68:97:83:ac:65: 3f:26:00:8a:0f:9a:fb:29:34:87:61:f2:e8:57:49: 6f:32:7d:70:40:ec:ad:ef:b2:07:25:a1:f3:1e:23: 3f:14:43:f8:d6:a5:18:4a:df:33:64:5c:5d:c3:a0: f6:72:a5:b1:06:32:73:9c:9b:2c:45:a1:fd:f8:da: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6F:15:41:01:4D:51:47:C6:C6:73:6B:87:88:94:B9:91:E9:55:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/153dca45-7f28-34a9-8192-6d742d669544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:84:7b:f4:98:57:25:db:b8:8b:69:df:c7:9a:09:23:30:8e: e4:f7:da:c9:17:c9:40:53:da:a3:55:78:ee:05:de:4c:1d:d9: 99:cc:08:90:97:26:47:31:e7:59:7b:0a:80:b9:ad:65:19:66: f4:2f:7c:ff:da:42:a8:ad:93:c0:41:3e:7b:26:fa:0d:d3:48: 84:64:03:9c:17:03:7e:70:33:ab:ec:29:4b:88:c9:92:36:a5: 0c:a1:eb:00:0f:03:bc:af:2e:77:60:8d:c3:24:a7:e1:c4:1b: f9:44:22:c9:32:c2:1d:ec:8e:f0:fb:56:d5:0a:be:de:e7:76: bf:33:bc:bf:23:1d:e9:85:0c:89:69:2c:27:8e:9c:1f:be:e6: b4:d3:ca:15:36:21:0d:4b:13:d0:d6:84:c7:c7:1a:27:55:e8: 34:77:33:cc:18:83:87:e8:80:95:04:12:61:95:b4:8f:55:a4: 20:1e:e9:4e:91:bf:d0:4d:a9:f3:6c:99:92:d6:41:f0:dc:18: ba:81:99:c8:36:ea:4a:58:bc:64:1b:a7:74:63:dd:b2:dc:58: 6e:39:a4:44:f1:f4:68:d6:f0:c7:a8:46:85:16:cd:e8:69:9e: 06:93:74:c0:28:4d:6a:67:07:a8:f8:87:2a:41:d4:a8:7f:d4: fe:74:cf:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ79tKus9U1yCJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MGNhMTNkOTktZGY2Yi00MDliLTlmMTItZjdjYTkyYWMzODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknP/h3Zkk99hB8EBRNJucd6I3drA0/KoNsoF NM81LBa2H8BKXK970LYr0crY10gOaXC8vLmJtxEWj4aPSvYvfrKsD0X/0Ts8BSlg TOrlO1cqNSaMtCOpyMyntIcNTwEIUzkKwGpmEYcPuA7eVpkBmfkjr1qCABMDon8N FSdYNnQ2fStyRm0mGIpviDhdtSaB0r+KS96jmtkPiAKWZX0zENNqvfw+mhpf153L DQXuq0BhJlD+hv+d3K0ldLujaJeDrGU/JgCKD5r7KTSHYfLoV0lvMn1wQOyt77IH JaHzHiM/FEP41qUYSt8zZFxdw6D2cqWxBjJznJssRaH9+NozMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpvFUEBTVFHxsZza4eIlLmR6VXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTUzZGNhNDUtN2YyOC0z NGE5LTgxOTItNmQ3NDJkNjY5NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBI1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2Ee/SYVyXbuItp38eaCSMwjuT32skXyUBT2qNVeO4F3kwd2ZnMCJCX Jkcx51l7CoC5rWUZZvQvfP/aQqitk8BBPnsm+g3TSIRkA5wXA35wM6vsKUuIyZI2 pQyh6wAPA7yvLndgjcMkp+HEG/lEIskywh3sjvD7VtUKvt7ndr8zvL8jHemFDIlp LCeOnB++5rTTyhU2IQ1LE9DWhMfHGidV6DR3M8wYg4fogJUEEmGVtI9VpCAe6U6R v9BNqfNsmZLWQfDcGLqBmcg26kpYvGQbp3Rj3bLcWG45pETx9GjW8MeoRoUWzehp ngaTdMAoTWpnB6j4hypB1Kh/1P50z+E= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:31 2025 by rpki-client