$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f873ee2-9278-3ea2-9c5c-e581f058d0e7.roa File: 2f873ee2-9278-3ea2-9c5c-e581f058d0e7.roa (raw, json) Hash identifier: 3ITd6C+9G7CoeAOI9Rv+mncB5ow9mJm/3lfHU2F0rbM= Subject key identifier: 6A:50:76:1A:C3:09:44:CD:D5:5A:2A:B8:12:0D:E6:C6:B3:54:9D:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C29F2C2178AA06FDBFC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f873ee2-9278-3ea2-9c5c-e581f058d0e7.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.24.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c2:9f:2c:21:78:aa:06:fd:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=58de5d26-da00-4654-a81c-5ad9977aa28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:a6:ba:49:f1:66:f5:b8:8d:9f:20:18:83: 0d:ac:d3:58:38:8d:c4:e7:a7:b8:c4:7a:f3:53:58: be:18:33:ce:a8:73:51:dc:0d:47:d5:c7:2d:0e:4b: 62:29:cb:1b:b5:1b:86:0f:cc:81:44:4d:3a:6b:18: 93:2b:87:e3:3c:99:f7:92:fd:6d:ec:5c:17:2a:f2: a8:af:05:fb:44:2d:a8:9f:b7:63:0f:ab:7e:c9:0c: 23:d7:8a:dc:ff:8c:99:79:5d:18:7b:65:d9:01:b0: 10:9d:f9:99:3d:0d:f6:a3:92:2f:1e:ba:a6:0c:3f: 6a:b5:9b:40:55:2b:dc:9a:07:33:a9:6c:95:f3:90: 07:d2:3f:7d:c8:58:e0:53:2d:0f:8d:e3:c5:71:33: 80:64:d1:77:05:71:a4:81:b9:e6:b2:13:6e:99:0d: e2:c0:00:cd:e9:db:fd:32:66:52:7c:08:e0:8e:ef: f1:51:21:87:ef:64:b5:67:58:8a:0f:4a:94:cb:69: 83:c6:2e:32:eb:f8:d8:f2:66:18:a0:d1:83:b6:6d: 37:6f:31:7a:17:d8:01:fa:db:3d:65:c9:cd:6d:25: 09:9d:ec:aa:26:34:63:44:2e:85:36:d3:13:ff:fa: bd:35:fa:dc:00:0d:02:39:df:cd:c2:e5:3e:cb:c3: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:50:76:1A:C3:09:44:CD:D5:5A:2A:B8:12:0D:E6:C6:B3:54:9D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f873ee2-9278-3ea2-9c5c-e581f058d0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b9:83:ab:12:53:55:18:8f:5a:8e:ee:d4:6d:25:bd:91:ae: 4b:d5:1e:b4:3a:7d:b5:0a:d2:02:20:63:e8:a2:35:75:30:39: 4d:4a:0c:44:c6:38:d9:da:19:89:86:f9:5a:15:ea:8e:6d:76: f5:43:a9:ed:3e:44:4f:88:95:7c:82:0b:ef:2e:e7:ca:70:38: 83:a0:93:65:05:cb:9d:07:07:15:75:60:86:56:a4:2b:35:7b: cf:98:04:6f:a4:19:db:f8:5c:80:ea:3d:f2:05:27:26:0c:fa: 4a:d6:4b:44:02:c3:30:ed:2a:f2:f7:9c:23:c6:68:da:ad:a1: 5e:69:d6:05:07:3b:f2:7f:e6:cd:dc:7f:8e:86:5b:07:4d:1c: ce:ec:01:6f:42:6e:86:55:6d:d4:5a:b6:7e:a8:1f:93:49:05: 7f:3b:77:36:47:cb:50:7d:1c:71:67:4b:3f:e6:7e:23:d3:32: 43:78:ff:9d:be:83:b8:54:90:1e:8c:13:9e:67:d0:f2:fe:5c: dd:83:5f:7e:48:11:61:12:d8:7b:2d:41:2e:be:a9:29:e5:1a: a9:07:de:29:8d:d0:2c:6c:52:4e:c5:44:df:67:4d:d1:36:08: b1:79:6a:69:8b:94:37:44:e0:32:9d:74:ab:bf:ab:05:75:e1: 90:57:5d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8KfLCF4qgb9v8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NThkZTVkMjYtZGEwMC00NjU0LWE4MWMtNWFkOTk3N2FhMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKimuknxZvW4jZ8gGIMNrNNYOI3E56e4xHrz U1i+GDPOqHNR3A1H1cctDktiKcsbtRuGD8yBRE06axiTK4fjPJn3kv1t7FwXKvKo rwX7RC2on7djD6t+yQwj14rc/4yZeV0Ye2XZAbAQnfmZPQ32o5IvHrqmDD9qtZtA VSvcmgczqWyV85AH0j99yFjgUy0PjePFcTOAZNF3BXGkgbnmshNumQ3iwADN6dv9 MmZSfAjgju/xUSGH72S1Z1iKD0qUy2mDxi4y6/jY8mYYoNGDtm03bzF6F9gB+ts9 ZcnNbSUJneyqJjRjRC6FNtMT//q9NfrcAA0COd/NwuU+y8PejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpQdhrDCUTN1VoquBIN5sazVJ3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmY4NzNlZTItOTI3OC0z ZWEyLTljNWMtZTU4MWYwNThkMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD25g6sSU1UYj1qO7tRtJb2RrkvVHrQ6fbUK0gIgY+iiNXUwOU1KDETG ONnaGYmG+VoV6o5tdvVDqe0+RE+IlXyCC+8u58pwOIOgk2UFy50HBxV1YIZWpCs1 e8+YBG+kGdv4XIDqPfIFJyYM+krWS0QCwzDtKvL3nCPGaNqtoV5p1gUHO/J/5s3c f46GWwdNHM7sAW9CboZVbdRatn6oH5NJBX87dzZHy1B9HHFnSz/mfiPTMkN4/52+ g7hUkB6ME55n0PL+XN2DX35IEWES2HstQS6+qSnlGqkH3imN0CxsUk7FRN9nTdE2 CLF5ammLlDdE4DKddKu/qwV14ZBXXcM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:17 2025 by rpki-client