$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa File: 3ad3404f-e0f0-3545-8701-e9e8495e4652.roa (raw, json) Hash identifier: 9t02QAAPIy4mx01OTQeRUJkMs0gg6tVnSAZGr9tdBKg= Subject key identifier: 89:54:A2:1C:73:15:0E:85:CA:09:B6:12:7D:BF:FE:E2:C7:9A:55:BF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B73292FE61FBD9A92900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.24.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b7:32:92:fe:61:fb:d9:a9:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=0c092fc1-b7cf-4e4d-9bdc-a0609ac55b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:6e:cd:80:6c:44:9e:b7:bc:3e:53:54:6d: 3e:87:09:26:41:46:93:1c:b3:b4:7c:7b:04:82:79: bd:a3:a9:bb:71:eb:a4:80:df:94:1c:5b:00:ef:75: 9a:17:bb:fa:b3:6a:67:fb:b6:ae:0b:62:25:3c:74: 7f:20:1a:2f:b2:e4:e2:bb:22:fe:70:84:c9:37:17: bb:74:96:34:bd:36:c1:e9:4a:0c:9c:bd:4f:5a:bf: e7:0a:48:3a:2c:7f:60:8e:14:48:2d:6f:a3:dd:89: 92:ed:20:3e:d0:fd:67:2a:f3:be:41:fc:c2:3e:fa: e2:a2:c1:c1:66:22:71:cf:8d:8a:2f:80:cd:c9:08: be:58:63:8c:ff:41:c2:10:46:3f:3e:05:ae:d0:f1: f3:bc:74:9a:2c:85:ad:9f:d9:87:eb:dd:cb:d7:f8: 6b:d4:6c:32:4e:a7:a8:a3:b0:0b:d7:55:95:0f:6d: c7:de:d0:b9:48:a2:9d:40:74:1d:56:03:2a:06:2c: 49:ed:dd:8b:30:97:95:f3:ac:24:54:b3:6c:63:d4: 6c:e4:81:5a:95:c8:e6:25:43:dc:34:44:05:30:28: 4c:c9:c7:d8:e1:e7:ec:e3:dd:75:84:6d:f3:b2:76: 26:9e:37:0a:cd:aa:63:d7:30:7d:d7:cb:ea:a9:36: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:54:A2:1C:73:15:0E:85:CA:09:B6:12:7D:BF:FE:E2:C7:9A:55:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:88:18:1a:dc:36:08:73:fb:0d:ab:0c:11:ed:f7:2b:56:99: a2:6d:29:97:f0:c4:4a:95:69:70:d8:64:c2:d6:7b:ec:54:96: 38:86:6a:92:8b:7f:39:db:85:4b:95:a1:88:54:88:e9:4f:a3: 75:46:57:7d:76:07:32:42:35:51:de:31:4f:e5:01:47:6b:ed: 7a:75:e5:c9:74:ca:2d:22:69:37:c0:c7:c4:e1:65:bc:f1:9b: 6b:02:4d:1d:e8:15:c9:e1:74:37:af:15:91:24:71:dc:d3:25: 48:33:e8:d0:fb:d1:0b:38:9e:cd:06:b9:b4:e4:7f:4a:52:2d: d8:e8:37:a9:e9:e0:4f:35:e7:b1:2e:48:52:be:76:e5:11:3c: 1d:f3:a8:bc:b1:a9:f6:e1:3f:ce:14:b4:87:f9:30:51:58:92: ea:6a:e3:80:83:99:d3:8e:d3:4e:4b:8b:f6:3f:35:2e:54:88: 8e:ba:51:37:51:a1:98:3e:c6:5d:42:b0:bc:da:e0:25:58:ec: dc:ec:8c:6e:b7:53:55:c9:4c:02:c5:f9:3f:65:ed:91:9e:f3: 2c:e8:0e:d0:82:b0:d4:d6:e3:66:da:ab:be:53:52:bc:25:11: 94:84:fa:10:10:94:63:7b:2d:8f:23:33:2c:30:0b:85:24:32: ad:b2:e6:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7cykv5h+9mpKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MGMwOTJmYzEtYjdjZi00ZTRkLTliZGMtYTA2MDlhYzU1YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh51uzYBsRJ63vD5TVG0+hwkmQUaTHLO0fHsE gnm9o6m7ceukgN+UHFsA73WaF7v6s2pn+7auC2IlPHR/IBovsuTiuyL+cITJNxe7 dJY0vTbB6UoMnL1PWr/nCkg6LH9gjhRILW+j3YmS7SA+0P1nKvO+QfzCPvriosHB ZiJxz42KL4DNyQi+WGOM/0HCEEY/PgWu0PHzvHSaLIWtn9mH693L1/hr1GwyTqeo o7AL11WVD23H3tC5SKKdQHQdVgMqBixJ7d2LMJeV86wkVLNsY9Rs5IFalcjmJUPc NEQFMChMycfY4efs4911hG3zsnYmnjcKzapj1zB918vqqTbyRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlUohxzFQ6Fygm2En2//uLHmlW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2FkMzQwNGYtZTBmMC0z NTQ1LTg3MDEtZTllODQ5NWU0NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSIGBrcNghz+w2rDBHt9ytWmaJtKZfwxEqVaXDYZMLWe+xUljiGapKL fznbhUuVoYhUiOlPo3VGV312BzJCNVHeMU/lAUdr7Xp15cl0yi0iaTfAx8ThZbzx m2sCTR3oFcnhdDevFZEkcdzTJUgz6ND70Qs4ns0GubTkf0pSLdjoN6np4E8157Eu SFK+duURPB3zqLyxqfbhP84UtIf5MFFYkupq44CDmdOO005Li/Y/NS5UiI66UTdR oZg+xl1CsLza4CVY7NzsjG63U1XJTALF+T9l7ZGe8yzoDtCCsNTW42baq75TUrwl EZSE+hAQlGN7LY8jMywwC4UkMq2y5u8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:59 2025 by rpki-client