$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa File: 3db74c7f-b12e-365d-bcb7-4530665d4a02.roa (raw, json) Hash identifier: SvyQo8mo2PFWkpm9hP63poWN7bqjWFvZ4hEV5FUTnoU= Subject key identifier: D8:0C:32:6D:18:07:D3:B3:46:35:44:77:2D:CE:C7:60:58:B1:6A:AD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD1051860470D84D92DBE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.31.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:10:51:86:04:70:d8:4d:92:db:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=d827fbb6-db66-4144-bbce-915715d59a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:2c:87:4c:36:d7:d8:66:65:4f:93:ee:cd: 77:3d:42:e9:db:65:85:03:84:3d:e1:ed:52:c3:dc: 41:69:0a:ea:2d:fc:c7:df:76:f3:38:74:dd:fc:6b: ae:ab:9f:0e:2a:32:34:b3:37:dd:6f:e3:32:56:b3: df:7a:ea:77:4d:60:3b:94:d7:ed:f9:33:1b:6c:a7: 04:76:08:b9:3f:fc:10:e2:92:17:a5:4d:03:6c:5b: 73:95:d9:27:ab:68:ef:4f:4d:f7:34:29:2c:a9:6d: 44:4f:3d:57:b9:fd:17:c6:5b:c0:c7:59:46:f4:12: 31:58:f6:a5:d8:ce:2b:25:a3:f2:45:54:8b:a4:fc: 19:51:1d:ec:83:1b:da:03:fe:fc:c3:f7:9c:36:9a: b8:2e:be:6d:c8:7c:eb:6e:35:89:e9:96:82:d6:1d: 5d:b0:f3:8d:05:db:ae:0c:cd:00:4e:22:ef:ba:82: 53:df:79:f9:a5:6a:3d:56:db:1d:68:d2:e0:fd:a2: 82:01:2d:c3:af:79:99:6d:c7:3d:4e:44:c7:9e:9c: 6c:42:4f:b2:8f:bf:a6:76:39:f2:26:3e:3d:d4:7d: 38:31:ce:64:1b:66:16:3c:52:ea:53:8b:68:b3:2f: 2b:06:73:bb:88:5f:8b:fe:1d:2c:3d:57:f7:18:e2: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0C:32:6D:18:07:D3:B3:46:35:44:77:2D:CE:C7:60:58:B1:6A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:09:d2:c3:94:57:65:5b:3b:05:fe:62:59:9e:a8:7a:1f:26: 5a:ff:58:ba:c3:56:a1:1c:88:27:ee:f1:11:8e:0f:fd:9d:fe: 74:f6:84:7c:76:af:57:ad:c5:43:f9:11:e3:ab:c1:49:bf:98: c3:4c:86:56:34:cc:23:19:69:e0:4f:b6:84:2e:f4:b8:3c:55: e2:09:11:ef:8b:08:45:a2:9f:77:5d:6a:0b:7c:a1:09:86:90: 5f:fb:4a:15:d7:9d:f5:9c:be:5c:d3:00:8a:aa:21:4a:ee:3b: e8:df:34:44:b6:3f:79:20:78:ec:07:2e:a6:b9:a9:b9:26:d7: dd:cf:e9:2a:d3:12:c5:28:de:58:12:7e:6c:96:29:a1:61:8e: 49:8d:42:3c:0e:04:e8:db:4f:68:8c:35:f8:aa:dd:6c:60:a8: da:da:ea:67:67:3e:41:61:b4:12:1d:ab:29:ad:d4:d8:a6:8d: b7:8e:df:7a:87:5d:fb:fe:41:9e:43:84:f2:29:fc:40:0d:68: a9:05:e7:50:7c:49:8f:92:d5:96:bb:d5:90:bd:da:aa:b1:82: 8c:ff:f1:ca:78:cc:e5:39:6b:4e:05:e6:44:2b:82:25:35:ea: 03:2c:94:e5:9d:fc:58:65:6f:09:ad:bf:2d:29:f7:9e:38:af: 75:b5:53:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRBRhgRw2E2S2+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDgyN2ZiYjYtZGI2Ni00MTQ0LWJiY2UtOTE1NzE1ZDU5YTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/gsh0w219hmZU+T7s13PULp22WFA4Q94e1S w9xBaQrqLfzH33bzOHTd/Guuq58OKjI0szfdb+MyVrPfeup3TWA7lNft+TMbbKcE dgi5P/wQ4pIXpU0DbFtzldknq2jvT033NCksqW1ETz1Xuf0XxlvAx1lG9BIxWPal 2M4rJaPyRVSLpPwZUR3sgxvaA/78w/ecNpq4Lr5tyHzrbjWJ6ZaC1h1dsPONBduu DM0ATiLvuoJT33n5pWo9VtsdaNLg/aKCAS3Dr3mZbcc9TkTHnpxsQk+yj7+mdjny Jj491H04Mc5kG2YWPFLqU4tosy8rBnO7iF+L/h0sPVf3GOJpLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgMMm0YB9OzRjVEdy3Ox2BYsWqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RiNzRjN2YtYjEyZS0z NjVkLWJjYjctNDUzMDY2NWQ0YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0J0sOUV2VbOwX+YlmeqHofJlr/WLrDVqEciCfu8RGOD/2d/nT2hHx2 r1etxUP5EeOrwUm/mMNMhlY0zCMZaeBPtoQu9Lg8VeIJEe+LCEWin3ddagt8oQmG kF/7ShXXnfWcvlzTAIqqIUruO+jfNES2P3kgeOwHLqa5qbkm193P6SrTEsUo3lgS fmyWKaFhjkmNQjwOBOjbT2iMNfiq3WxgqNra6mdnPkFhtBIdqymt1NimjbeO33qH Xfv+QZ5DhPIp/EANaKkF51B8SY+S1Za71ZC92qqxgoz/8cp4zOU5a04F5kQrgiU1 6gMslOWd/Fhlbwmtvy0p9544r3W1U1s= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:15 2025 by rpki-client