$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32e07b25-4460-3a5d-9c9c-2f8bbb0c418d.roa File: 32e07b25-4460-3a5d-9c9c-2f8bbb0c418d.roa (raw, json) Hash identifier: 3i2EEz2hw0LlrAvK1aPSenAxAjswl22zAljtYnRk7Fg= Subject key identifier: 9B:E9:36:AD:17:A3:04:5E:FA:40:18:11:C6:E0:E8:76:BD:AD:B5:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C0293D4D117B6F4F0FE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32e07b25-4460-3a5d-9c9c-2f8bbb0c418d.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c0:29:3d:4d:11:7b:6f:4f:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=651df377-692a-4fdb-a599-4f9ba75f8789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:3a:37:70:80:aa:40:85:82:3e:ff:00:32: b2:75:8f:96:6e:74:64:34:50:1b:ed:44:60:6a:68: c0:c0:d6:a3:93:cd:83:2b:cd:4a:64:10:16:4a:4e: 99:e5:e1:a8:be:94:75:e1:22:51:c7:e4:d1:48:75: 0b:78:3f:50:00:21:0d:99:a1:2d:55:eb:9c:a6:30: 97:f7:a5:b2:e4:1c:67:7c:3b:91:7a:d6:57:08:6a: 16:85:20:5a:6c:4f:97:28:26:18:90:1a:c5:bb:af: 4f:7f:60:89:55:37:3e:e8:f1:d4:99:10:31:85:8d: ee:4f:53:b2:99:ea:4e:32:a9:e0:ae:bf:72:6d:4c: d5:ca:d4:1d:78:8e:42:45:2b:dc:8f:2d:ef:58:08: b6:e6:9b:9d:1d:85:b9:9c:92:3e:72:74:9c:fa:34: b4:81:e9:54:6d:86:f2:e4:d4:74:53:a4:1e:ed:c1: f6:ee:1d:10:fc:7a:27:15:90:03:16:8d:fb:5a:02: 0f:f9:38:fc:f5:78:63:91:2b:55:57:b3:29:35:d3: 80:7f:68:4b:a0:e1:94:6e:3d:c6:6a:fc:62:16:6a: 5b:5b:cd:2e:9e:ef:d2:1c:22:59:7b:4c:eb:93:f2: 02:3e:b0:91:eb:d6:25:03:2d:34:de:73:bd:19:1b: d4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E9:36:AD:17:A3:04:5E:FA:40:18:11:C6:E0:E8:76:BD:AD:B5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32e07b25-4460-3a5d-9c9c-2f8bbb0c418d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:41:cc:da:8a:d9:71:f9:e4:78:8f:b1:53:ab:86:0a:7e:40: d8:75:d2:69:6f:af:3e:4e:d3:3e:51:b1:28:33:c9:ae:8c:58: 34:16:e5:ff:22:60:d3:19:c8:e2:47:de:c8:4b:ba:f6:9f:b6: 19:d6:92:a1:52:2f:f9:b4:53:45:73:c7:88:ec:3b:b7:19:8a: 6b:47:7e:d3:68:5f:dc:37:66:4b:b9:46:fb:7c:74:d4:2d:47: 71:a4:a7:87:9d:d0:14:c4:85:4d:8e:30:80:d7:a9:cf:5e:26: bd:5b:7b:20:8f:7e:dc:1f:5b:20:c0:b0:99:46:56:92:bb:03: 79:f2:f0:02:60:01:5b:9b:0b:d7:dd:5c:17:b1:ac:20:77:15: 86:91:4c:25:63:76:fd:84:aa:d4:d2:64:d2:13:1d:e6:1e:f6: 61:d7:51:1c:68:33:69:73:d7:41:a6:1e:d4:ec:4e:22:f9:5a: b8:57:5b:b0:45:9e:bc:f2:8a:30:4d:f5:26:41:19:cc:63:05: 06:9a:9e:d4:92:f6:89:a5:b9:f9:cf:1e:74:4e:03:9a:7f:d2: aa:3a:3a:be:7a:30:15:17:2e:f3:e6:0b:b2:b2:1f:8c:54:c6: 06:c7:94:74:e7:4b:ed:fd:0b:89:85:e1:8e:c1:15:72:9c:47: 24:ea:11:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8ApPU0Re29PD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NjUxZGYzNzctNjkyYS00ZmRiLWE1OTktNGY5YmE3NWY4Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jg6N3CAqkCFgj7/ADKydY+WbnRkNFAb7URg amjAwNajk82DK81KZBAWSk6Z5eGovpR14SJRx+TRSHULeD9QACENmaEtVeucpjCX 96Wy5BxnfDuRetZXCGoWhSBabE+XKCYYkBrFu69Pf2CJVTc+6PHUmRAxhY3uT1Oy mepOMqngrr9ybUzVytQdeI5CRSvcjy3vWAi25pudHYW5nJI+cnSc+jS0gelUbYby 5NR0U6Qe7cH27h0Q/HonFZADFo37WgIP+Tj89XhjkStVV7MpNdOAf2hLoOGUbj3G avxiFmpbW80unu/SHCJZe0zrk/ICPrCR69YlAy003nO9GRvU0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvpNq0XowRe+kAYEcbg6Ha9rbWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzJlMDdiMjUtNDQ2MC0z YTVkLTljOWMtMmY4YmJiMGM0MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFBzNqK2XH55HiPsVOrhgp+QNh10mlvrz5O0z5RsSgzya6MWDQW5f8i YNMZyOJH3shLuvafthnWkqFSL/m0U0Vzx4jsO7cZimtHftNoX9w3Zku5Rvt8dNQt R3Gkp4ed0BTEhU2OMIDXqc9eJr1beyCPftwfWyDAsJlGVpK7A3ny8AJgAVubC9fd XBexrCB3FYaRTCVjdv2EqtTSZNITHeYe9mHXURxoM2lz10GmHtTsTiL5WrhXW7BF nrzyijBN9SZBGcxjBQaantSS9omlufnPHnROA5p/0qo6Or56MBUXLvPmC7KyH4xU xgbHlHTnS+39C4mF4Y7BFXKcRyTqEV0= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:00 2025 by rpki-client