$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cd5f5e-fec2-3d76-8f60-f6e959d3c4ff.roa File: 25cd5f5e-fec2-3d76-8f60-f6e959d3c4ff.roa (raw, json) Hash identifier: uD2YJi+dHLPm17+MGDDGDAuzgybWq2lVDX8dS47zLEU= Subject key identifier: 49:09:BE:19:14:57:8B:D5:E7:9D:E9:5C:68:95:BE:F4:AF:EA:ED:5D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C470D9C48723C379B980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cd5f5e-fec2-3d76-8f60-f6e959d3c4ff.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.27.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c4:70:d9:c4:87:23:c3:79:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=f78ea9fd-440c-4929-8f4d-ff9b779acacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:32:eb:d4:bc:fd:7d:d1:37:bb:15:50:25: 8a:a3:44:d7:71:44:5e:44:e8:b4:43:61:1e:52:ed: 05:4d:cd:fe:3b:01:7d:50:5e:8d:3e:74:b7:d6:bb: 7a:3f:6f:f9:e8:db:bf:1b:1e:0a:a2:37:e4:0d:de: e7:26:f0:4c:dd:78:04:d6:dd:71:95:44:70:2f:04: c7:a9:62:be:92:d0:07:a0:57:b5:67:94:95:bb:bc: 19:e2:57:c5:13:4f:c0:21:f1:0b:e6:04:4c:53:78: 2b:cb:ef:05:c1:5b:95:e8:a4:27:ba:ef:7b:a1:1f: 84:6d:65:b9:9f:cc:c9:29:9a:05:1c:b1:28:34:0e: ac:7e:a5:d5:23:c6:73:38:78:82:0e:88:95:dd:29: b3:0e:c9:c4:04:7b:1f:f9:6b:12:ec:89:20:57:39: ce:45:22:65:b6:3d:18:e1:cb:d0:94:9d:87:45:d9: 01:a3:be:0d:e5:02:ef:ad:90:5e:13:9b:46:0e:6a: a0:32:de:fc:da:19:9c:1d:69:1c:1e:3c:4b:34:14: 6c:23:b7:ca:4b:f8:98:19:ce:3b:23:3f:98:7e:5b: 6a:8b:a3:c8:ac:56:57:bf:4a:8f:3a:8c:35:06:42: 44:2a:43:29:8f:32:7a:5b:b5:7a:dc:a8:ad:11:cf: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:BE:19:14:57:8B:D5:E7:9D:E9:5C:68:95:BE:F4:AF:EA:ED:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cd5f5e-fec2-3d76-8f60-f6e959d3c4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:34:1f:e3:6d:16:aa:4b:ea:72:0f:50:85:6f:e7:f7:ae:be: 66:11:80:a2:64:0e:5f:b5:8c:30:b8:c5:a5:c1:a7:15:9f:08: a9:a3:7e:d9:17:f4:54:1b:ec:6c:35:2a:0a:64:ab:18:50:c8: b4:6c:55:9e:cf:60:3d:77:b0:43:0c:5e:9a:a0:38:e5:dd:80: 87:24:2d:4c:a6:b6:c3:cd:f2:23:ce:9f:ca:df:7d:e9:96:a9: d3:6a:99:f4:02:93:40:e5:52:97:4c:83:1e:19:09:2e:1f:9b: cf:09:04:c1:01:2d:e5:7c:4a:11:d5:64:34:9b:03:7a:9b:9e: 19:ed:88:4c:02:43:ab:ed:a8:16:6e:1a:d3:c0:f7:08:32:16: 55:c8:51:15:b0:d3:92:a4:c6:f0:6f:b2:96:e9:a4:68:a6:4a: e2:d8:b9:4e:d8:1b:63:45:8a:78:88:5e:e3:26:00:26:87:5f: 13:f1:e9:25:d9:4e:1e:ef:8b:1d:76:a6:e5:fe:d1:4a:be:ea: d8:95:4f:35:53:69:96:70:81:92:c0:06:ca:7a:e0:ae:38:5e: 00:cc:7a:61:5e:41:ba:bd:6b:a5:1e:ab:60:cc:fd:b7:ac:96: cc:7d:52:04:72:65:bf:ec:25:25:e0:94:38:5a:91:5a:84:63: ad:17:f1:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8Rw2cSHI8N5uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk Zjc4ZWE5ZmQtNDQwYy00OTI5LThmNGQtZmY5Yjc3OWFjYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5gy69S8/X3RN7sVUCWKo0TXcUReROi0Q2Ee Uu0FTc3+OwF9UF6NPnS31rt6P2/56Nu/Gx4KojfkDd7nJvBM3XgE1t1xlURwLwTH qWK+ktAHoFe1Z5SVu7wZ4lfFE0/AIfEL5gRMU3gry+8FwVuV6KQnuu97oR+EbWW5 n8zJKZoFHLEoNA6sfqXVI8ZzOHiCDoiV3SmzDsnEBHsf+WsS7IkgVznORSJltj0Y 4cvQlJ2HRdkBo74N5QLvrZBeE5tGDmqgMt782hmcHWkcHjxLNBRsI7fKS/iYGc47 Iz+Yfltqi6PIrFZXv0qPOow1BkJEKkMpjzJ6W7V63KitEc/qJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkJvhkUV4vV553pXGiVvvSv6u1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVjZDVmNWUtZmVjMi0z ZDc2LThmNjAtZjZlOTU5ZDNjNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMc0H+NtFqpL6nIPUIVv5/euvmYRgKJkDl+1jDC4xaXBpxWfCKmjftkX 9FQb7Gw1KgpkqxhQyLRsVZ7PYD13sEMMXpqgOOXdgIckLUymtsPN8iPOn8rffemW qdNqmfQCk0DlUpdMgx4ZCS4fm88JBMEBLeV8ShHVZDSbA3qbnhntiEwCQ6vtqBZu GtPA9wgyFlXIURWw05KkxvBvspbppGimSuLYuU7YG2NFiniIXuMmACaHXxPx6SXZ Th7vix12puX+0Uq+6tiVTzVTaZZwgZLABsp64K44XgDMemFeQbq9a6Ueq2DM/bes lsx9UgRyZb/sJSXglDhakVqEY60X8ZA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:53 2025 by rpki-client