$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3903b2fb-38e9-378a-883f-e3c388339a4b.roa File: 3903b2fb-38e9-378a-883f-e3c388339a4b.roa (raw, json) Hash identifier: mrI4xSgHBzf3dtZdQkT1Osun35V+YCw8N6xV/sNbKxw= Subject key identifier: 6E:14:73:D5:B0:B6:C5:66:B9:28:79:EE:5B:1F:54:2B:E8:67:08:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BE39C9B57387632F6F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3903b2fb-38e9-378a-883f-e3c388339a4b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:be:39:c9:b5:73:87:63:2f:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=5502432e-f0a2-4edb-a450-df78e260282a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:fc:5d:6e:d2:c5:c6:18:8f:33:04:17:3d: 8e:21:ba:b5:3a:ea:79:59:b2:28:2d:8d:1d:64:ab: 14:14:db:12:12:46:12:7a:ec:db:37:46:99:ec:d2: 66:6f:c8:e3:8a:47:2e:1b:45:e7:62:96:b4:02:fe: b4:de:40:94:24:8a:93:f8:19:dd:7e:29:c6:1b:55: 51:35:01:ab:65:6a:71:32:75:e9:db:89:e0:90:ad: 3a:04:b0:20:26:99:6e:d4:af:6b:88:b9:52:eb:6a: d7:20:d6:20:9e:9e:33:38:b4:3d:0a:d7:36:37:9e: d4:2a:74:b5:b6:86:b6:dd:05:a1:ff:68:92:df:0e: 21:27:2a:79:82:8c:73:a7:c1:fb:ce:df:82:16:26: 2c:2d:7b:c3:02:07:12:b8:41:66:59:2a:60:3a:d8: 80:02:94:61:38:bf:9c:b7:24:b2:52:34:9e:41:04: c5:e9:44:ad:30:4b:2a:01:3a:aa:8b:b5:a8:8d:6f: 32:c5:f3:cc:d9:97:e8:f1:0a:43:ab:34:2a:f0:f1: 81:60:f6:2c:d5:81:e7:cc:17:3e:ea:b2:51:3c:f8: da:69:20:65:db:2a:b6:a1:94:65:0f:88:65:b8:43: 96:6b:5a:d0:a7:04:5d:2c:11:c8:ee:3c:8f:72:93: a4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:14:73:D5:B0:B6:C5:66:B9:28:79:EE:5B:1F:54:2B:E8:67:08:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3903b2fb-38e9-378a-883f-e3c388339a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0c:68:3f:80:07:41:a3:4c:64:c1:0a:fb:4c:b9:c9:9b:05: 2a:b6:20:c0:f0:21:08:e5:8f:24:19:fa:d7:1a:1c:0e:63:8e: 0d:c5:05:91:9f:39:bc:77:15:2f:1d:8f:fd:bb:c2:c8:0c:0c: 81:10:41:95:7b:4b:0a:b5:64:3f:73:15:69:8d:f4:55:57:a8: 40:5a:22:a6:85:14:47:92:1c:fb:26:af:65:b6:6b:1e:dd:b1: 9e:4e:68:8b:10:0c:4a:39:9a:a3:db:1f:4b:7c:9b:f6:07:30: 30:ce:b6:b1:af:09:ed:66:45:e7:19:18:a0:34:f7:55:6f:9a: 42:5b:b1:e7:73:df:40:6b:2d:0e:81:e4:66:64:7d:6c:06:29: c0:09:95:63:d2:fe:e8:94:d4:e9:e9:7d:ff:ff:9c:3e:a0:60: e1:19:5e:68:8d:8a:32:e7:a6:9d:0c:f8:79:b5:36:91:19:29: b1:c0:7a:49:22:1b:fb:95:85:8f:55:56:9f:40:6d:ef:11:5a: a3:32:11:54:fe:58:69:a5:d6:d8:d6:b5:a6:f4:8d:74:80:1f: f2:25:63:28:fb:cd:05:fb:ed:1a:e0:b4:e7:dd:88:15:3f:dd: 21:7b:66:37:e7:74:9d:e7:99:78:f4:b4:89:b0:32:fe:9d:e3: 98:d8:ac:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ745ybVzh2Mvb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NTUwMjQzMmUtZjBhMi00ZWRiLWE0NTAtZGY3OGUyNjAyODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJX8XW7SxcYYjzMEFz2OIbq1Oup5WbIoLY0d ZKsUFNsSEkYSeuzbN0aZ7NJmb8jjikcuG0XnYpa0Av603kCUJIqT+BndfinGG1VR NQGrZWpxMnXp24ngkK06BLAgJplu1K9riLlS62rXINYgnp4zOLQ9Ctc2N57UKnS1 toa23QWh/2iS3w4hJyp5goxzp8H7zt+CFiYsLXvDAgcSuEFmWSpgOtiAApRhOL+c tySyUjSeQQTF6UStMEsqATqqi7WojW8yxfPM2Zfo8QpDqzQq8PGBYPYs1YHnzBc+ 6rJRPPjaaSBl2yq2oZRlD4hluEOWa1rQpwRdLBHI7jyPcpOkCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4Uc9WwtsVmuSh57lsfVCvoZwi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzkwM2IyZmItMzhlOS0z NzhhLTg4M2YtZTNjMzg4MzM5YTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0MaD+AB0GjTGTBCvtMucmbBSq2IMDwIQjljyQZ+tcaHA5jjg3FBZGf Obx3FS8dj/27wsgMDIEQQZV7Swq1ZD9zFWmN9FVXqEBaIqaFFEeSHPsmr2W2ax7d sZ5OaIsQDEo5mqPbH0t8m/YHMDDOtrGvCe1mRecZGKA091VvmkJbsedz30BrLQ6B 5GZkfWwGKcAJlWPS/uiU1Onpff//nD6gYOEZXmiNijLnpp0M+Hm1NpEZKbHAekki G/uVhY9VVp9Abe8RWqMyEVT+WGml1tjWtab0jXSAH/IlYyj7zQX77RrgtOfdiBU/ 3SF7ZjfndJ3nmXj0tImwMv6d45jYrCo= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:26 2025 by rpki-client