$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa File: 385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa (raw, json) Hash identifier: lMzQ77hZfdvSNbR/yA/+otOaBDASoGSFeH4mzwUT72w= Subject key identifier: E8:3D:9E:3C:BE:C6:0B:DE:D2:8B:04:C1:9C:C2:0D:CA:83:51:8C:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD10CD2B0F66F2EB213280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.31.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:10:cd:2b:0f:66:f2:eb:21:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=d0963010-2114-4506-85e2-36091f62bde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:df:4c:2d:bd:bc:08:5d:75:26:87:9f:ce: d3:fd:f3:ee:a1:be:a9:5d:57:05:4e:b8:e8:06:62: d7:68:ff:fa:88:48:34:af:f4:e1:bb:20:b4:72:db: 0d:5a:dd:c5:ef:03:7f:1f:b5:a9:dd:bf:71:27:96: c7:47:9e:21:ad:c4:0a:a5:64:c2:98:87:a7:1e:95: de:98:30:5c:4a:5b:c7:66:b4:c8:eb:41:17:e1:63: 66:98:ea:68:de:27:6e:e6:44:45:f2:79:02:ce:1c: 11:bd:00:49:a7:d4:01:27:79:01:ba:63:c5:fc:12: f1:93:06:a0:a8:e3:1a:78:95:cc:fc:c6:03:75:6c: 8c:f3:c4:59:7c:d3:b1:13:be:03:54:56:f1:ac:90: 5b:b7:52:5b:19:ac:6c:04:d6:02:a5:cf:c9:d5:33: 55:a0:32:22:07:cc:9b:c0:98:29:55:ef:fc:35:4d: 04:15:27:e2:95:48:a6:46:d4:37:78:91:38:0c:e7: b2:44:58:4c:3a:ed:bc:8f:db:07:f4:f8:c3:f0:89: cd:99:01:64:9f:4e:46:c5:d8:21:11:7a:d4:8e:ba: e6:9b:5b:d7:cc:fd:35:d4:06:5b:2b:a9:bc:21:2e: c0:a2:39:cd:fc:ee:9d:d5:f9:9a:b6:b2:12:1c:f9: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3D:9E:3C:BE:C6:0B:DE:D2:8B:04:C1:9C:C2:0D:CA:83:51:8C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/385855ed-3717-32b9-a5ae-b2959f4bcbd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9a:f5:8b:f9:eb:ae:cc:19:c6:51:a3:6a:ff:d5:8c:4f:25: 3f:5f:2e:68:45:a6:9c:bd:d9:87:84:11:eb:b6:19:cd:9e:cb: 49:f2:a5:35:2f:d6:33:78:47:ca:00:b4:b3:7f:75:fd:2f:d8: 84:84:fe:be:b7:2c:91:c2:49:61:a1:76:13:a1:0b:8e:26:b1: b3:62:70:0f:9f:ee:5b:88:60:c7:77:9e:62:59:eb:4a:6c:e1: 37:a4:83:fa:83:75:b5:94:80:ed:7b:92:d0:86:1b:3e:ce:4c: ae:c3:18:2c:04:fe:bf:1f:05:af:b1:62:83:33:35:6c:60:4b: 2e:60:43:b3:45:40:99:eb:90:83:3e:53:14:fb:d0:5e:a6:25: 0a:95:9f:fb:fb:5f:42:de:2f:9f:5a:c7:80:b4:34:89:9b:a3: a0:b5:fb:28:0a:0f:d8:d6:a9:08:c2:6c:b0:58:ef:6d:81:ae: 55:d0:a7:dc:7a:2d:87:fc:81:a2:84:eb:57:49:dc:ba:cf:10: 9a:8c:c9:ec:05:f0:a6:18:95:af:8c:7e:52:f4:38:68:6e:6e: 58:1b:5f:f3:79:72:92:d6:56:23:20:2f:19:61:03:38:47:1d: 9a:c5:98:cb:4f:71:cd:01:09:f0:7b:bd:d8:44:53:f6:7d:88: 8f:f2:4b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRDNKw9m8ushMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDA5NjMwMTAtMjExNC00NTA2LTg1ZTItMzYwOTFmNjJiZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaHfTC29vAhddSaHn87T/fPuob6pXVcFTrjo BmLXaP/6iEg0r/ThuyC0ctsNWt3F7wN/H7Wp3b9xJ5bHR54hrcQKpWTCmIenHpXe mDBcSlvHZrTI60EX4WNmmOpo3idu5kRF8nkCzhwRvQBJp9QBJ3kBumPF/BLxkwag qOMaeJXM/MYDdWyM88RZfNOxE74DVFbxrJBbt1JbGaxsBNYCpc/J1TNVoDIiB8yb wJgpVe/8NU0EFSfilUimRtQ3eJE4DOeyRFhMOu28j9sH9PjD8InNmQFkn05Gxdgh EXrUjrrmm1vXzP011AZbK6m8IS7AojnN/O6d1fmatrISHPlXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg9njy+xgve0osEwZzCDcqDUYzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzg1ODU1ZWQtMzcxNy0z MmI5LWE1YWUtYjI5NTlmNGJjYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGea9Yv5667MGcZRo2r/1YxPJT9fLmhFppy92YeEEeu2Gc2ey0nypTUv 1jN4R8oAtLN/df0v2ISE/r63LJHCSWGhdhOhC44msbNicA+f7luIYMd3nmJZ60ps 4Tekg/qDdbWUgO17ktCGGz7OTK7DGCwE/r8fBa+xYoMzNWxgSy5gQ7NFQJnrkIM+ UxT70F6mJQqVn/v7X0LeL59ax4C0NImbo6C1+ygKD9jWqQjCbLBY722BrlXQp9x6 LYf8gaKE61dJ3LrPEJqMyewF8KYYla+MflL0OGhublgbX/N5cpLWViMgLxlhAzhH HZrFmMtPcc0BCfB7vdhEU/Z9iI/yS2I= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:33 2025 by rpki-client