$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa File: 211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa (raw, json) Hash identifier: xrtaheynny52wdqF+QVqZk81qHVP2om0zqS1+njMI6o= Subject key identifier: C1:74:B7:38:56:5D:AF:CE:1D:D7:DD:37:CE:2D:15:56:06:1C:E8:97 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C1699EE6579C00D04D68 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.20.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c1:69:9e:e6:57:9c:00:d0:4d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=deaa620f-8f17-4570-a816-fba5d3cccb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:ac:83:d5:93:42:0c:12:ef:be:6d:26:e8: da:48:6a:87:2b:60:e0:9f:31:79:49:50:4e:47:82: 62:f3:4d:3f:ed:db:0a:38:4d:be:d8:ba:78:89:77: c3:cb:52:56:85:1d:e8:f9:28:d9:ea:d2:25:f7:36: 63:a6:dc:ad:d0:61:5d:ff:55:bb:23:36:d1:5c:11: 55:ec:a6:9a:70:31:eb:04:d9:10:a0:a8:f9:31:b5: 92:12:06:65:d6:3d:4d:48:f1:19:0b:0b:54:7f:8d: 15:d1:71:75:5a:08:eb:5a:0d:02:b9:b6:af:2a:a7: 15:b3:3e:5e:14:b3:ee:f2:73:f4:91:de:dd:70:2f: 1e:a4:7e:ac:4c:24:76:df:95:26:41:de:e8:a9:e5: 09:15:a6:19:45:57:4f:cd:d9:e5:ca:c1:53:98:eb: 72:5b:2c:7d:39:b5:c8:f1:3f:a0:35:dc:09:31:5e: db:bf:fa:80:2c:d4:d8:5f:70:c3:74:13:d0:f6:27: 9e:ec:fe:78:8a:2e:45:d9:d5:4c:a9:e6:a7:7c:15: dd:1a:db:c9:25:b0:b6:1b:e3:09:29:b6:14:46:2f: b3:9d:dd:6e:ea:88:0e:45:e0:0d:e9:bf:94:c1:4d: 21:a8:11:fe:dd:1c:f4:88:3e:89:43:48:6c:78:59: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:74:B7:38:56:5D:AF:CE:1D:D7:DD:37:CE:2D:15:56:06:1C:E8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0d:54:65:7e:2c:08:c0:ea:7f:50:c5:b0:f9:8d:32:f6:51: e0:47:5d:0a:a6:67:57:f8:08:a6:d8:a0:f5:97:49:a3:f6:8b: 79:4b:bb:8e:24:ec:e2:f6:a8:41:c5:67:88:6e:0b:8b:74:f4: 4c:d0:82:cc:99:0d:92:58:ef:48:00:48:f8:63:36:fd:11:d6: 5c:2f:74:10:04:9a:ce:13:84:40:9f:cb:13:63:12:c0:c1:32: 0e:ae:31:77:a5:95:ce:fd:50:b2:3d:f8:43:7c:32:94:02:97: a0:de:59:16:8c:21:d3:48:47:96:06:c2:7d:bb:73:a0:f0:de: ba:d6:3c:03:19:6b:d0:54:c7:08:d3:a9:fb:ba:1a:2c:5f:4c: ad:09:35:e8:ca:a7:53:50:e6:ff:28:b9:49:c3:0c:8a:05:12: 08:dd:4f:22:14:f8:a6:48:47:6f:a3:db:4f:1a:50:4a:20:d3: 7e:4d:3e:c4:ee:5b:d3:98:29:73:e6:0b:a4:e9:4c:60:9f:e0: f2:1a:0c:2d:1f:1d:fc:8b:85:71:64:ae:3c:48:21:9a:00:0c: c8:c0:fa:0e:93:13:e9:60:f9:7c:c3:f8:b2:e8:69:80:fb:ee: f9:36:ef:b9:74:f1:9c:e7:ea:80:8d:5c:27:2b:1c:a3:0d:da: 6d:64:84:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8FpnuZXnADQTWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZGVhYTYyMGYtOGYxNy00NTcwLWE4MTYtZmJhNWQzY2NjYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKusg9WTQgwS775tJujaSGqHK2DgnzF5SVBO R4Ji800/7dsKOE2+2Lp4iXfDy1JWhR3o+SjZ6tIl9zZjptyt0GFd/1W7IzbRXBFV 7KaacDHrBNkQoKj5MbWSEgZl1j1NSPEZCwtUf40V0XF1WgjrWg0CubavKqcVsz5e FLPu8nP0kd7dcC8epH6sTCR235UmQd7oqeUJFaYZRVdPzdnlysFTmOtyWyx9ObXI 8T+gNdwJMV7bv/qALNTYX3DDdBPQ9iee7P54ii5F2dVMqeanfBXdGtvJJbC2G+MJ KbYURi+znd1u6ogOReAN6b+UwU0hqBH+3Rz0iD6JQ0hseFkegwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF0tzhWXa/OHdfdN84tFVYGHOiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjExZmEzZGEtY2RmYS0z MDRjLWE4ZmItYzBlZDgzMjUxYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYNVGV+LAjA6n9QxbD5jTL2UeBHXQqmZ1f4CKbYoPWXSaP2i3lLu44k 7OL2qEHFZ4huC4t09EzQgsyZDZJY70gASPhjNv0R1lwvdBAEms4ThECfyxNjEsDB Mg6uMXellc79ULI9+EN8MpQCl6DeWRaMIdNIR5YGwn27c6Dw3rrWPAMZa9BUxwjT qfu6GixfTK0JNejKp1NQ5v8ouUnDDIoFEgjdTyIU+KZIR2+j208aUEog035NPsTu W9OYKXPmC6TpTGCf4PIaDC0fHfyLhXFkrjxIIZoADMjA+g6TE+lg+XzD+LLoaYD7 7vk277l08Zzn6oCNXCcrHKMN2m1khDo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:42 2025 by rpki-client