$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa File: 3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa (raw, json) Hash identifier: RaxrfWxpFon9wYtw9NTexTMeRgaNs2Uz15kdq5WjmUs= Subject key identifier: 19:D5:0D:B7:F7:1D:8F:96:28:1F:17:25:E9:08:95:4B:9E:A1:EC:B5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C40AEFCB24DF1095CE00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.27.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c4:0a:ef:cb:24:df:10:95:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=2bb86803-e0eb-4cae-a7e9-2ab67bef2adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:ec:2c:3e:70:f1:87:7d:96:00:8a:3b:e2: ca:ea:a6:da:30:61:4e:b9:a2:7e:53:8c:87:bb:9b: 16:31:cb:7b:d3:71:b6:0c:6d:b4:eb:17:c2:a4:ba: 7f:69:08:3d:12:5e:3a:e9:39:9e:25:40:b2:45:70: 8a:ca:db:fe:5f:11:76:7f:3a:de:02:9c:74:43:05: e9:61:b4:59:e8:a8:94:63:f8:ea:23:74:5f:ff:e8: 45:79:5d:49:07:a7:76:2c:7d:a4:5f:cc:82:2b:91: af:42:f4:74:5f:96:b6:9d:1b:5a:43:43:06:cd:cd: 89:d0:d5:21:ff:a2:9e:de:21:c7:0a:20:47:c7:d7: 74:18:df:94:89:29:57:b8:bf:82:e3:7a:4f:bf:01: 58:21:7e:e5:a8:9d:9f:76:95:53:ed:88:5e:a7:fc: bf:0b:77:cd:78:56:c2:bd:8b:f6:c2:9b:bf:5b:c9: 7e:58:c2:3a:d5:a4:b5:0f:1a:e6:41:8f:81:7e:60: 0b:44:b4:90:56:98:b6:d3:f2:4a:84:8a:6a:fd:73: 75:bb:d6:a5:21:6d:f3:f2:07:07:35:88:23:45:8f: b5:62:9a:b6:11:ac:d8:34:8b:6d:52:07:39:5c:83: 48:22:92:aa:1e:1c:f2:4d:54:d7:36:ab:c1:12:ed: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D5:0D:B7:F7:1D:8F:96:28:1F:17:25:E9:08:95:4B:9E:A1:EC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:db:09:9c:fb:98:15:68:c1:fc:5d:61:1c:39:1a:76:3b:1f: 8f:db:f8:f1:bc:f4:b8:ab:87:4d:a9:a3:cf:2e:eb:1e:e2:b0: ea:a8:0b:2f:fd:12:84:14:00:ed:8f:83:a1:fe:58:27:92:81: 0a:3f:91:5c:5d:74:f9:55:4f:66:10:ac:10:a8:e0:ab:cf:44: 8f:53:3e:b5:52:ac:53:94:bb:63:56:94:d4:26:b0:b0:8a:ec: 66:13:2c:3d:59:01:4c:2c:9b:bf:85:0b:16:96:9c:b0:ac:63: 94:7d:e9:3b:2b:d8:2f:1d:d1:c7:5d:2e:c9:3e:cb:1f:f1:c9: 3f:fc:f1:ec:ec:98:e4:92:65:ab:ff:35:a3:a2:bd:9c:de:87: 81:fe:4d:f0:fd:06:7f:1f:7b:d2:4a:31:53:e4:65:49:b4:a9: a5:f9:99:81:53:d4:71:03:dd:86:57:ac:d5:00:42:a4:18:86: 17:df:09:9e:60:3c:8d:41:d9:5b:5a:ce:f9:bf:48:fa:ed:2d: 4b:6b:50:66:cd:2c:dd:56:69:c4:43:72:b6:54:4a:e7:d5:59: e3:0a:85:e6:d0:fe:5c:d9:a6:a8:1d:75:77:5c:e0:7f:6c:ed: fe:67:53:0f:16:1b:a0:d4:d1:2a:11:46:05:3b:40:11:f1:93: 7f:02:51:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8QK78sk3xCVzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MmJiODY4MDMtZTBlYi00Y2FlLWE3ZTktMmFiNjdiZWYyYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu83sLD5w8Yd9lgCKO+LK6qbaMGFOuaJ+U4yH u5sWMct703G2DG206xfCpLp/aQg9El466TmeJUCyRXCKytv+XxF2fzreApx0QwXp YbRZ6KiUY/jqI3Rf/+hFeV1JB6d2LH2kX8yCK5GvQvR0X5a2nRtaQ0MGzc2J0NUh /6Ke3iHHCiBHx9d0GN+UiSlXuL+C43pPvwFYIX7lqJ2fdpVT7Yhep/y/C3fNeFbC vYv2wpu/W8l+WMI61aS1DxrmQY+BfmALRLSQVpi20/JKhIpq/XN1u9alIW3z8gcH NYgjRY+1Ypq2EazYNIttUgc5XINIIpKqHhzyTVTXNqvBEu2lbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnVDbf3HY+WKB8XJekIlUueoey1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2U2ODI3MTQtNWUxYS0z ZjhhLWJhMjQtM2QxMzEwOWRmOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDbCZz7mBVowfxdYRw5GnY7H4/b+PG89Lirh02po88u6x7isOqoCy/9 EoQUAO2Pg6H+WCeSgQo/kVxddPlVT2YQrBCo4KvPRI9TPrVSrFOUu2NWlNQmsLCK 7GYTLD1ZAUwsm7+FCxaWnLCsY5R96Tsr2C8d0cddLsk+yx/xyT/88ezsmOSSZav/ NaOivZzeh4H+TfD9Bn8fe9JKMVPkZUm0qaX5mYFT1HED3YZXrNUAQqQYhhffCZ5g PI1B2Vtazvm/SPrtLUtrUGbNLN1WacRDcrZUSufVWeMKhebQ/lzZpqgddXdc4H9s 7f5nUw8WG6DU0SoRRgU7QBHxk38CUfE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:29 2025 by rpki-client