$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa File: 1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa (raw, json) Hash identifier: iUwQYfN86OUCePGxlEsFk2GKmTQ9YKdqrS4Gliv0em8= Subject key identifier: 6B:A5:6E:A7:A0:2E:55:AC:2E:9B:ED:DB:BC:6B:F9:FD:D3:52:45:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BE16015E8881E5B47540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:be:16:01:5e:88:81:e5:b4:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=d8a434e6-6ba4-4b30-9aa8-8a8eb1f7ef19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:10:41:c5:84:3b:6b:2b:2b:e9:b6:4b:41:ef: fb:21:7a:8b:93:6e:d4:30:d9:0c:0c:01:3d:6b:bf: d9:90:8b:d9:b1:8a:e9:c8:cd:3b:27:2a:33:fd:ee: 29:a8:df:44:1c:9a:fd:9c:e0:cd:77:9b:2b:46:c9: 9a:63:ce:7e:36:b2:b7:6e:10:74:aa:82:ed:af:e1: 92:74:0c:9e:81:53:52:cf:a2:80:98:2b:b2:77:99: 0a:88:2b:91:0f:69:35:e1:5e:64:57:32:f6:f5:0b: 40:80:ec:f3:d9:16:d9:37:0b:f3:2c:60:06:cc:ef: 87:df:bc:0c:35:bd:ae:55:79:d2:d8:cf:41:36:f8: 37:8d:ed:65:2b:c1:e9:ea:f5:88:ce:03:39:da:d8: 1b:ef:69:57:cf:12:b2:38:e0:36:61:3f:34:00:e9: e3:a5:41:57:ea:52:fb:59:fa:4c:72:f6:75:5c:53: 8f:7d:3c:00:63:db:5b:1f:f8:6e:f4:4a:b1:d9:b8: 67:84:83:70:5e:8f:fa:48:8e:b9:d9:cc:f9:21:94: 37:9a:9c:85:00:eb:a2:6f:8f:6a:f7:9a:8d:31:40: b0:8f:fc:2b:93:88:26:6e:22:36:c5:c8:ea:4f:6a: 46:05:05:fc:0a:ad:29:59:3b:29:32:9a:52:e6:58: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A5:6E:A7:A0:2E:55:AC:2E:9B:ED:DB:BC:6B:F9:FD:D3:52:45:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:62:8c:b0:9f:e2:e2:67:0f:19:6c:63:2f:f9:d5:56:7d:48: 0a:7a:9b:d6:57:35:d8:f1:29:36:a1:d7:ba:e0:03:10:16:f5: 44:c8:c2:46:c7:c0:a3:4f:11:14:70:c4:9a:cd:39:f1:8c:0c: ed:0d:60:a5:08:6c:ec:67:5b:84:0c:b9:a6:61:7e:59:70:c5: 35:14:29:c3:5e:58:dd:39:46:e4:5b:d4:0c:2f:1c:4f:ea:79: 77:05:fa:ed:e2:7f:a2:e1:3a:a9:3a:41:07:ca:77:d9:ab:dd: a4:c2:99:e9:6c:82:0c:bd:91:55:b6:3f:91:ab:38:a8:59:b2: 25:84:77:16:18:57:cb:a2:d7:eb:15:ee:9f:f1:f0:a2:c4:b2: 97:24:0b:39:f1:8d:69:92:9e:ad:47:10:f7:af:87:f7:59:47: f9:bd:ac:27:90:d4:92:0d:8b:19:f1:2e:08:8d:69:14:ab:8a: c8:23:bf:32:3e:da:80:47:b2:21:24:fd:51:d4:8a:3d:1d:0d: f8:1f:d2:e3:f1:59:a8:ba:d5:20:32:b4:9f:31:9c:fd:e4:9b: e2:bf:c5:95:91:6e:15:72:0e:16:54:dd:54:1b:c1:17:9b:98: 4a:51:a2:c2:d4:db:b1:ed:1a:31:65:41:31:04:d3:9a:d1:9d: ee:97:03:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ74WAV6IgeW0dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDhhNDM0ZTYtNmJhNC00YjMwLTlhYTgtOGE4ZWIxZjdlZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBBBxYQ7aysr6bZLQe/7IXqLk27UMNkMDAE9 a7/ZkIvZsYrpyM07Jyoz/e4pqN9EHJr9nODNd5srRsmaY85+NrK3bhB0qoLtr+GS dAyegVNSz6KAmCuyd5kKiCuRD2k14V5kVzL29QtAgOzz2RbZNwvzLGAGzO+H37wM Nb2uVXnS2M9BNvg3je1lK8Hp6vWIzgM52tgb72lXzxKyOOA2YT80AOnjpUFX6lL7 WfpMcvZ1XFOPfTwAY9tbH/hu9Eqx2bhnhINwXo/6SI652cz5IZQ3mpyFAOuib49q 95qNMUCwj/wrk4gmbiI2xcjqT2pGBQX8Cq0pWTspMppS5lhcswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGulbqegLlWsLpvt27xr+f3TUkXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWZlNWI1OGMtNWUwZS0z YzBlLWE2M2QtZDJkNzE2YjhkNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5ijLCf4uJnDxlsYy/51VZ9SAp6m9ZXNdjxKTah17rgAxAW9UTIwkbH wKNPERRwxJrNOfGMDO0NYKUIbOxnW4QMuaZhfllwxTUUKcNeWN05RuRb1AwvHE/q eXcF+u3if6LhOqk6QQfKd9mr3aTCmelsggy9kVW2P5GrOKhZsiWEdxYYV8ui1+sV 7p/x8KLEspckCznxjWmSnq1HEPevh/dZR/m9rCeQ1JINixnxLgiNaRSrisgjvzI+ 2oBHsiEk/VHUij0dDfgf0uPxWai61SAytJ8xnP3km+K/xZWRbhVyDhZU3VQbwReb mEpRosLU27HtGjFlQTEE05rRne6XA1M= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:50 2025 by rpki-client