$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4144f8e9-27b6-3ecf-8035-92073685ed5b.roa File: 4144f8e9-27b6-3ecf-8035-92073685ed5b.roa (raw, json) Hash identifier: pP+xoRN6ARv7yTrUaYt9lXyRuzmn+ZS06+9U2hyHUIc= Subject key identifier: CC:F8:76:0B:EC:6B:80:5A:9B:AF:0D:0B:18:9A:4C:5F:EC:62:BB:D5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BE038FCC07890A226080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4144f8e9-27b6-3ecf-8035-92073685ed5b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:be:03:8f:cc:07:89:0a:22:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=9781dff4-0afc-49fe-8c8c-326e3d551c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:42:d9:c7:f1:94:2b:8b:93:df:12:8f:6d: 05:b9:7e:1b:79:fc:f0:be:f7:a5:f2:87:15:6b:64: 57:de:b3:58:86:86:7e:3f:94:37:5e:52:e3:44:be: af:87:40:80:b4:d2:6c:cf:97:86:42:de:eb:24:ea: 60:50:90:97:d7:cb:91:cd:81:13:f5:48:9f:0d:50: ad:32:f9:1f:f5:93:92:65:b3:4b:7c:f8:4c:33:34: b5:6e:57:ed:fb:53:05:73:a9:38:8d:e4:c9:7d:1e: ed:d2:ec:dc:a3:de:fd:14:8d:17:31:be:6a:77:8d: 03:97:ae:80:a8:f3:ca:a7:f5:0c:7a:bd:f6:8b:71: 64:1a:8b:02:86:8e:7b:e8:16:29:55:7b:2b:91:15: f3:a3:25:c0:b0:a7:81:11:ff:d5:d2:c3:ae:95:ee: f1:0e:29:a1:7e:ed:b5:4a:69:e3:d0:47:b3:ea:c0: 7f:d0:2b:ec:42:98:84:20:9d:84:53:ca:ca:93:97: f5:65:60:65:e9:c2:0a:90:33:d6:19:32:6f:bc:1e: 35:45:b3:94:db:f5:ea:3d:4d:75:6f:73:44:cf:f0: 80:78:f5:34:ea:ec:3f:35:af:70:f2:59:15:20:62: ac:ed:39:f4:d1:2a:b9:7c:9a:f6:96:69:62:13:f0: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F8:76:0B:EC:6B:80:5A:9B:AF:0D:0B:18:9A:4C:5F:EC:62:BB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4144f8e9-27b6-3ecf-8035-92073685ed5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:96:ba:a7:9d:96:e3:38:c2:8b:27:2a:d7:23:c9:b8:d0:d3: 0c:ab:d9:af:bf:78:f5:0f:d0:a1:34:1e:af:46:7d:6e:e2:53: 56:4b:b5:3c:17:47:71:a8:52:34:07:99:2f:85:f6:24:02:05: 97:4f:42:81:1b:ce:89:84:5d:1b:2f:cc:71:d8:a0:dd:97:42: 55:39:75:6f:43:41:00:ae:86:4b:20:2b:69:e6:e8:81:17:92: bb:78:0f:4d:44:98:84:92:f6:cc:9e:cc:a6:31:f3:90:85:03: 5c:06:35:5e:72:14:b9:15:6f:63:ec:5e:71:90:e8:17:38:ff: b7:cc:3d:6f:bb:85:5f:29:a4:ed:7b:79:d4:af:21:8c:64:2d: 0d:ba:48:75:46:2e:f7:f9:75:5c:51:e0:e5:2b:3b:ee:cb:7d: 47:06:76:c6:10:25:cb:c6:d6:bb:27:f4:f6:10:4a:51:f2:6d: 21:55:71:4a:a7:d6:6e:ae:84:e4:2b:cf:cc:1f:9d:48:51:e8: e7:18:43:76:53:7b:9a:bb:aa:6f:f1:31:14:9d:51:d2:e8:61: 57:16:ee:41:d3:1d:09:f9:6d:fc:04:27:50:03:55:e5:f6:ef: 08:e1:f8:93:0a:ad:83:aa:07:42:9c:33:bd:9c:9c:ae:14:ad: ff:2b:1b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ74Dj8wHiQoiYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OTc4MWRmZjQtMGFmYy00OWZlLThjOGMtMzI2ZTNkNTUxYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxORC2cfxlCuLk98Sj20FuX4befzwvvel8ocV a2RX3rNYhoZ+P5Q3XlLjRL6vh0CAtNJsz5eGQt7rJOpgUJCX18uRzYET9UifDVCt Mvkf9ZOSZbNLfPhMMzS1blft+1MFc6k4jeTJfR7t0uzco979FI0XMb5qd40Dl66A qPPKp/UMer32i3FkGosCho576BYpVXsrkRXzoyXAsKeBEf/V0sOule7xDimhfu21 Smnj0Eez6sB/0CvsQpiEIJ2EU8rKk5f1ZWBl6cIKkDPWGTJvvB41RbOU2/XqPU11 b3NEz/CAePU06uw/Na9w8lkVIGKs7Tn00Sq5fJr2lmliE/DBgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz4dgvsa4Bam68NCxiaTF/sYrvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDE0NGY4ZTktMjdiNi0z ZWNmLTgwMzUtOTIwNzM2ODVlZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBInMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmWuqedluM4wosnKtcjybjQ0wyr2a+/ePUP0KE0Hq9GfW7iU1ZLtTwX R3GoUjQHmS+F9iQCBZdPQoEbzomEXRsvzHHYoN2XQlU5dW9DQQCuhksgK2nm6IEX krt4D01EmISS9syezKYx85CFA1wGNV5yFLkVb2PsXnGQ6Bc4/7fMPW+7hV8ppO17 edSvIYxkLQ26SHVGLvf5dVxR4OUrO+7LfUcGdsYQJcvG1rsn9PYQSlHybSFVcUqn 1m6uhOQrz8wfnUhR6OcYQ3ZTe5q7qm/xMRSdUdLoYVcW7kHTHQn5bfwEJ1ADVeX2 7wjh+JMKrYOqB0KcM72cnK4Urf8rG7E= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:48 2025 by rpki-client