$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa File: 2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa (raw, json) Hash identifier: /q4Xx3KsPSo7B6qMJE0sSiDClxc3EKnLEYpp7A8e5T8= Subject key identifier: 5A:E2:67:EA:8F:D2:61:77:C0:00:8B:7D:56:B6:62:0B:55:6D:3C:54 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B200C9A9D494EDC23F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.16.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b2:00:c9:a9:d4:94:ed:c2:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=cb85c0c3-e551-4dc9-bb77-ed53e89a2750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:13:fb:f1:ba:3e:3b:8a:66:db:c6:86:ae:af: 6f:75:d1:7f:6c:0c:cb:41:4d:44:af:93:9c:82:95: 54:60:58:5a:0d:7e:43:73:9d:54:4d:b5:fe:dc:84: 4b:7c:37:6f:e4:13:2b:db:2e:c7:0b:fc:eb:ff:01: 90:e3:7a:65:c4:2d:16:a6:cd:8c:d8:f1:e5:82:cf: 7d:75:02:cc:b6:65:f4:3a:77:25:c7:4f:c0:6f:4e: 04:d6:91:3f:b0:9e:d2:a7:79:52:b3:fa:5b:1c:51: 97:20:22:ca:5b:57:cc:e3:a5:e0:cd:dd:f2:d5:35: 17:e1:a0:c8:fe:99:18:6d:92:a4:06:e0:c6:04:07: ef:f1:07:84:b0:1f:0c:76:d1:bc:3c:3e:8d:f9:9b: 31:cd:27:fd:63:e4:58:02:24:c3:ea:74:f4:75:29: f0:32:cc:73:4e:4c:94:c5:8a:44:ab:34:b3:fe:ff: 72:53:60:16:73:99:78:ce:94:7c:af:bc:20:3d:2d: e2:e6:02:31:83:b2:34:db:a0:27:f2:5f:9c:74:b6: 7f:03:ed:ac:b7:9a:3c:ae:9d:c8:6c:9c:d8:61:19: 9d:b2:fb:dc:d3:48:88:ec:c2:6f:df:b5:22:52:7b: fa:59:32:40:1a:5e:ed:c7:53:54:21:3f:03:22:19: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:67:EA:8F:D2:61:77:C0:00:8B:7D:56:B6:62:0B:55:6D:3C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d7:cc:a8:b3:85:9d:ab:28:07:71:b1:57:88:c7:01:fc:3b: d4:39:c6:a0:87:a1:41:49:ee:56:0a:e7:af:b4:44:e7:66:a2: c0:3f:35:53:3b:5f:71:76:e4:54:88:91:ae:9c:86:6b:d9:a5: b8:93:0c:24:7f:f6:73:6c:45:2a:b8:dd:b6:38:ba:5d:1e:1d: 7a:1b:96:c9:dd:54:16:f4:8c:44:e4:dd:c3:29:6b:42:77:10: f5:ef:cb:c4:72:af:74:00:60:16:47:6f:57:46:d5:b6:43:6c: d9:63:07:04:a1:2f:b2:72:36:b4:48:43:28:d4:15:39:00:2b: d9:af:91:87:f3:24:63:f9:38:17:23:4d:58:43:a2:44:9a:1b: 28:80:18:4f:c0:f3:62:6c:d8:61:10:03:ca:5a:81:bf:61:95: 5d:14:06:6b:77:64:60:bd:bc:59:2c:cb:22:5f:2e:35:e4:79: bd:e9:a2:59:e6:47:e9:51:76:d0:2a:e5:4c:bc:8d:3b:22:0d: f4:91:2b:8a:fb:44:5f:81:14:6d:d9:49:dc:6a:4a:1e:81:1f: 0d:d4:a8:9c:fe:30:77:c8:04:ff:da:f8:9a:d1:1e:89:15:fd: 90:18:cc:13:46:51:8a:93:94:31:aa:cc:03:89:27:a3:fe:76: ea:16:c4:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7IAyanUlO3CP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk Y2I4NWMwYzMtZTU1MS00ZGM5LWJiNzctZWQ1M2U4OWEyNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhP78bo+O4pm28aGrq9vddF/bAzLQU1Er5Oc gpVUYFhaDX5Dc51UTbX+3IRLfDdv5BMr2y7HC/zr/wGQ43plxC0Wps2M2PHlgs99 dQLMtmX0Onclx0/Ab04E1pE/sJ7Sp3lSs/pbHFGXICLKW1fM46Xgzd3y1TUX4aDI /pkYbZKkBuDGBAfv8QeEsB8MdtG8PD6N+ZsxzSf9Y+RYAiTD6nT0dSnwMsxzTkyU xYpEqzSz/v9yU2AWc5l4zpR8r7wgPS3i5gIxg7I026An8l+cdLZ/A+2st5o8rp3I bJzYYRmdsvvc00iI7MJv37UiUnv6WTJAGl7tx1NUIT8DIhl+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFriZ+qP0mF3wACLfVa2YgtVbTxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmYzZGMxN2UtNjJiNS0z ZmU2LWE5ZjAtNGNhODc5ZTA2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLXzKizhZ2rKAdxsVeIxwH8O9Q5xqCHoUFJ7lYK56+0ROdmosA/NVM7 X3F25FSIka6chmvZpbiTDCR/9nNsRSq43bY4ul0eHXoblsndVBb0jETk3cMpa0J3 EPXvy8Ryr3QAYBZHb1dG1bZDbNljBwShL7JyNrRIQyjUFTkAK9mvkYfzJGP5OBcj TVhDokSaGyiAGE/A82Js2GEQA8pagb9hlV0UBmt3ZGC9vFksyyJfLjXkeb3polnm R+lRdtAq5Uy8jTsiDfSRK4r7RF+BFG3ZSdxqSh6BHw3UqJz+MHfIBP/a+JrRHokV /ZAYzBNGUYqTlDGqzAOJJ6P+duoWxHE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:00 2025 by rpki-client