$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa File: 2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa (raw, json) Hash identifier: rsIwJogc0kr+8wcSLG/kBbcUJlfVCWEheDVvInUkKtk= Subject key identifier: A2:6E:59:33:44:32:B4:FB:0E:55:7F:AB:35:E7:F8:50:51:FC:03:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C00579B346A9E756FA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c0:05:79:b3:46:a9:e7:56:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=008818d3-a6d1-4ed0-bac7-86212bcd1f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:96:ee:d2:84:7d:fd:40:8b:26:34:99:f5: 88:d6:2f:09:81:ef:8b:a9:0b:1c:97:87:c1:f5:ae: 1e:bc:3e:d2:d1:2a:23:c2:4e:94:f7:8b:b0:d0:77: ec:cb:7d:54:7a:44:7f:8c:08:46:d9:96:55:04:29: 69:af:d1:0e:9a:fe:cd:ac:0b:5d:69:56:86:f1:c8: 35:c3:d0:42:7d:ce:e7:e0:0b:8d:80:6e:25:71:ea: d9:00:a7:ba:ea:f0:c1:b6:7d:e4:89:51:8c:d8:07: 2f:1e:e8:8a:9d:56:d0:85:a6:7d:f6:f7:b5:31:1a: 74:9a:79:ca:b2:b8:dd:cc:b4:d9:fe:6b:f4:87:3d: 3b:49:35:c1:e2:22:d4:b4:e2:f9:13:9d:0c:ae:87: 6f:95:66:fa:13:21:f2:e5:68:94:53:86:b8:9e:5e: 3b:61:a6:6e:c4:03:3a:e2:2e:8a:4c:e4:d0:59:f0: 76:fc:38:54:c4:60:50:84:35:46:8f:f5:ae:be:38: ac:09:56:8b:33:1f:82:0f:18:d8:96:52:35:56:e8: 7f:4c:1f:bd:66:74:dc:fe:fa:2a:4c:0a:80:84:11: 6d:6c:4e:72:1a:5c:89:f6:bb:52:22:ca:5e:9e:df: a7:71:e7:15:9a:05:3c:22:05:ae:a1:ab:87:8e:a2: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:59:33:44:32:B4:FB:0E:55:7F:AB:35:E7:F8:50:51:FC:03:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8a:2a:be:f2:5f:5d:6d:da:99:55:e7:50:bd:45:e7:c2:06: bc:89:07:c9:3c:85:35:c0:38:3c:dd:b5:54:be:8b:33:7a:a6: 79:5e:f5:5e:8a:ad:2d:f2:4b:3c:98:dd:c5:5e:74:78:bb:3a: ec:f8:47:46:4c:cf:71:3e:6a:dd:ca:9d:26:1c:b3:2b:57:62: 79:b3:88:f8:db:cf:b1:70:c7:cc:ca:72:e7:a2:09:b0:c0:d2: f7:97:6f:87:ec:36:53:07:8d:5b:a8:d2:91:a9:93:f7:ab:af: a1:64:fc:73:d4:a3:52:3e:0b:cb:08:53:40:44:24:21:4a:87: 90:17:ab:f2:e3:b2:19:d1:cd:02:fb:d5:62:83:5e:5e:0e:08: c1:d0:20:e9:44:12:cb:d0:4d:28:1d:17:40:c1:c1:58:20:f3: fd:49:88:24:67:ae:c9:e9:40:cd:9e:b3:81:47:ae:5e:09:7a: f7:5a:fa:64:13:1a:dc:be:dd:d0:e1:75:99:e2:e2:40:f7:0d: 79:ab:e3:98:f8:77:32:f2:2a:be:2d:28:8e:8a:ef:7b:f2:b7: 8d:c2:99:8f:34:32:f5:df:a2:86:bf:c1:ff:89:bc:f9:13:65: de:f9:da:3b:aa:94:e2:70:d0:9c:13:91:2e:dd:5e:44:55:1b: e6:5a:fc:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8AFebNGqedW+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MDA4ODE4ZDMtYTZkMS00ZWQwLWJhYzctODYyMTJiY2QxZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO2W7tKEff1AiyY0mfWI1i8Jge+LqQscl4fB 9a4evD7S0Sojwk6U94uw0Hfsy31UekR/jAhG2ZZVBClpr9EOmv7NrAtdaVaG8cg1 w9BCfc7n4AuNgG4lcerZAKe66vDBtn3kiVGM2AcvHuiKnVbQhaZ99ve1MRp0mnnK srjdzLTZ/mv0hz07STXB4iLUtOL5E50MrodvlWb6EyHy5WiUU4a4nl47YaZuxAM6 4i6KTOTQWfB2/DhUxGBQhDVGj/WuvjisCVaLMx+CDxjYllI1Vuh/TB+9ZnTc/voq TAqAhBFtbE5yGlyJ9rtSIspent+ncecVmgU8IgWuoauHjqK26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJuWTNEMrT7DlV/qzXn+FBR/AMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM3ZTBiMjktODY0OC0z MWNjLTllNTAtY2U5NzJjMmFiMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSKKr7yX11t2plV51C9RefCBryJB8k8hTXAODzdtVS+izN6pnle9V6K rS3ySzyY3cVedHi7Ouz4R0ZMz3E+at3KnSYcsytXYnmziPjbz7Fwx8zKcueiCbDA 0veXb4fsNlMHjVuo0pGpk/err6Fk/HPUo1I+C8sIU0BEJCFKh5AXq/LjshnRzQL7 1WKDXl4OCMHQIOlEEsvQTSgdF0DBwVgg8/1JiCRnrsnpQM2es4FHrl4Jevda+mQT Gty+3dDhdZni4kD3DXmr45j4dzLyKr4tKI6K73vyt43CmY80MvXfooa/wf+JvPkT Zd752juqlOJw0JwTkS7dXkRVG+Za/A0= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:42 2025 by rpki-client