$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a41608f-93f7-3c08-bb80-5c677844ee5d.roa File: 4a41608f-93f7-3c08-bb80-5c677844ee5d.roa (raw, json) Hash identifier: SkIr2YCyegPJpk6GuNdk5jGhS9Be52dRYqWNCkA3gcs= Subject key identifier: CF:44:F3:52:58:70:83:56:46:DA:63:9D:8B:80:D6:A4:C7:26:96:06 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BD0F12DC49D8B1D29D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a41608f-93f7-3c08-bb80-5c677844ee5d.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.17.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bd:0f:12:dc:49:d8:b1:d2:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=baccab12-9e29-42c1-980f-8bb1d535f982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:3d:fb:1c:88:68:ea:f3:88:3b:0a:8e:cf: 01:87:52:22:f4:b5:04:81:5f:19:63:d8:74:01:69: c5:ce:ff:4a:90:ae:6f:3c:99:a3:ff:e4:93:1c:66: c9:4d:70:b3:94:53:04:23:50:db:81:9c:19:48:8b: ab:35:55:f7:9f:9d:a2:df:85:e1:ff:ca:ed:02:6c: ca:2d:c0:ad:10:26:92:e9:7a:e0:de:6b:5f:08:6e: 48:39:ec:fe:ae:34:e5:31:c7:d2:96:46:fe:c7:39: 95:a7:b9:3e:e0:37:a7:06:56:f6:a8:4a:11:aa:9e: b2:a7:55:e7:bf:59:83:e3:8a:f7:9e:fd:ec:2e:26: 80:fd:62:11:8e:01:de:c2:96:e9:ae:ff:fe:dd:fc: 66:dc:0a:7b:59:bb:60:f0:a3:e8:a9:92:fc:e4:04: df:b7:ba:e7:15:36:53:57:b2:4e:64:3a:83:51:50: d6:43:f9:15:4a:88:b9:67:45:0c:5e:a3:36:63:6f: ea:ec:6e:12:ab:6a:47:42:1b:21:47:cf:f4:aa:79: 84:83:42:ad:78:3f:f9:6f:0f:d7:44:a5:e6:f4:1c: 38:53:5e:a4:31:5c:e7:da:45:b2:ad:d3:ce:b7:80: fe:28:b2:46:2c:5d:f8:dc:f6:86:43:d6:85:89:c0: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:F3:52:58:70:83:56:46:DA:63:9D:8B:80:D6:A4:C7:26:96:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a41608f-93f7-3c08-bb80-5c677844ee5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:42:19:59:cb:8d:67:3b:3c:ba:96:2d:06:40:81:e1:29:c1: b9:e4:26:05:ab:70:6e:98:b1:52:e6:a7:a1:80:b9:70:1d:78: 45:c0:3c:03:c1:35:bf:b3:54:f8:6c:a5:ed:4c:29:e1:38:aa: 48:2c:26:26:c2:ce:ba:45:19:4d:b5:f4:e7:bc:47:45:c7:60: b0:11:df:12:90:89:41:aa:4f:a7:dd:59:bb:1d:bc:4e:22:1f: 7e:75:92:ee:9a:47:12:4d:f3:04:10:d3:57:1a:01:cb:df:3d: 44:85:f2:bf:9e:5f:97:6c:ac:e5:45:fa:be:0c:04:5a:54:79: 0a:08:24:0e:8d:3b:22:4e:17:33:b1:2f:77:35:fd:88:33:4e: d2:ef:2e:01:07:99:27:bb:46:1b:af:6f:c4:3d:53:79:cb:a5: 22:29:35:ce:e7:c5:ec:06:67:36:76:6f:2e:85:7f:14:30:fd: d7:f2:a9:9e:13:93:af:58:9c:e3:d2:88:b2:80:b2:26:9b:78: a3:f2:d3:64:ad:8a:66:31:2e:a3:93:cb:53:0a:8c:bf:f9:8f: 05:5a:d2:0d:0b:e9:d2:34:d8:f1:e4:0f:a3:ac:3c:f1:b1:78: ae:6e:62:e3:eb:35:22:f6:c3:12:3f:69:6e:24:8b:2f:d8:1e: 86:f2:17:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ70PEtxJ2LHSnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YmFjY2FiMTItOWUyOS00MmMxLTk4MGYtOGJiMWQ1MzVmOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOo9+xyIaOrziDsKjs8Bh1Ii9LUEgV8ZY9h0 AWnFzv9KkK5vPJmj/+STHGbJTXCzlFMEI1DbgZwZSIurNVX3n52i34Xh/8rtAmzK LcCtECaS6Xrg3mtfCG5IOez+rjTlMcfSlkb+xzmVp7k+4DenBlb2qEoRqp6yp1Xn v1mD44r3nv3sLiaA/WIRjgHewpbprv/+3fxm3Ap7Wbtg8KPoqZL85ATft7rnFTZT V7JOZDqDUVDWQ/kVSoi5Z0UMXqM2Y2/q7G4Sq2pHQhshR8/0qnmEg0KteD/5bw/X RKXm9Bw4U16kMVzn2kWyrdPOt4D+KLJGLF343PaGQ9aFicCoJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9E81JYcINWRtpjnYuA1qTHJpYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGE0MTYwOGYtOTNmNy0z YzA4LWJiODAtNWM2Nzc4NDRlZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxCGVnLjWc7PLqWLQZAgeEpwbnkJgWrcG6YsVLmp6GAuXAdeEXAPAPB Nb+zVPhspe1MKeE4qkgsJibCzrpFGU219Oe8R0XHYLAR3xKQiUGqT6fdWbsdvE4i H351ku6aRxJN8wQQ01caAcvfPUSF8r+eX5dsrOVF+r4MBFpUeQoIJA6NOyJOFzOx L3c1/YgzTtLvLgEHmSe7Rhuvb8Q9U3nLpSIpNc7nxewGZzZ2by6FfxQw/dfyqZ4T k69YnOPSiLKAsiabeKPy02StimYxLqOTy1MKjL/5jwVa0g0L6dI02PHkD6OsPPGx eK5uYuPrNSL2wxI/aW4kiy/YHobyF90= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:01 2025 by rpki-client