$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa File: 4d40595a-41f2-3ac1-9657-ddc78350cd29.roa (raw, json) Hash identifier: nrrM1RPHOHMvAreILaad68qaWAXJmYpPA3Ie3oZywYc= Subject key identifier: 4E:82:68:89:97:3F:7F:E1:4F:65:AD:76:9B:39:59:77:7B:E8:2D:2A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B615EEF5AEE663FB4E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.19.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b6:15:ee:f5:ae:e6:63:fb:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=0c9eec0f-724b-47dd-9266-97f512320dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:8f:da:47:98:d5:50:00:42:65:25:58:b3: d7:dd:58:40:c8:56:48:65:12:1f:1f:6b:f6:14:0e: 3a:1e:d9:6f:aa:16:b3:c1:c8:4e:b2:f9:a2:9d:5f: 7a:77:13:f3:29:3a:72:19:32:6e:65:ed:1e:7b:06: 70:37:e8:6e:2e:5e:eb:52:6b:ba:63:9f:2c:08:11: 8b:d0:22:16:5a:e3:14:e3:f7:29:91:13:8b:7e:de: cf:b3:bb:d6:22:b9:bf:0d:40:9e:1c:c5:bd:24:05: 41:22:af:fb:8a:89:bb:fe:73:5a:6f:7f:d2:83:0d: 55:12:8c:19:cf:94:e1:61:6a:85:83:83:83:0b:da: 85:b7:4b:b4:4c:ea:8a:e2:a1:0d:32:3e:94:e4:3f: a3:cf:99:f1:63:13:c1:3b:44:11:9c:93:74:97:d6: ff:6e:c6:bb:d9:76:80:9a:55:91:13:d6:a8:8c:8e: ed:7a:99:ce:6d:2a:b9:37:de:5d:44:0a:b7:cc:bc: 6e:b7:d7:61:04:cf:00:77:a4:8a:34:61:b7:39:26: e0:b0:95:f4:ca:16:2b:05:7b:a8:fa:0b:68:6e:a1: d5:0e:66:53:ab:0a:f0:cf:e6:cc:23:67:b2:4f:4f: ab:b9:e7:e4:1b:91:36:f7:9b:a4:b5:13:bd:97:14: e2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:82:68:89:97:3F:7F:E1:4F:65:AD:76:9B:39:59:77:7B:E8:2D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f1:99:a9:86:76:89:28:6f:41:47:58:f6:ab:af:91:19:ee: 9e:87:68:53:8d:38:10:0d:14:db:68:13:04:66:1a:7f:d4:83: 88:7a:46:df:9a:8b:89:eb:07:1f:45:74:cf:ff:3b:2d:50:c4: b6:6a:b1:2f:a7:fd:fa:e4:60:f2:ab:2b:93:22:33:2d:e0:f1: 8b:a6:3f:59:57:cc:f4:ab:52:ff:b2:80:c2:26:15:35:93:54: 76:e7:5f:a0:9c:00:6a:53:9f:6e:03:4f:3c:e6:4c:bd:70:34: 9f:df:3d:69:fe:f6:9e:94:11:54:f9:22:53:10:e6:af:59:2d: ea:fe:ba:80:57:31:0a:33:4f:6d:c2:aa:8a:7f:ea:bf:c4:0e: 94:f8:f0:9f:0d:17:f5:4a:e3:28:ab:47:0a:63:38:53:19:97: a6:db:cd:ab:e3:16:6f:73:86:1c:2c:9d:b9:be:e8:05:28:b1: 11:7b:fa:d3:3d:a8:85:4f:6b:fa:c3:a5:44:61:e5:64:47:8c: 2f:37:ef:5f:85:16:3f:5a:47:01:84:88:7c:1e:73:25:a8:90: f6:61:2a:db:09:4d:cf:44:d4:34:81:51:e3:92:15:2e:56:af: da:78:f3:e3:83:e3:bf:2a:bd:16:f5:a8:78:47:26:5d:33:41: 3f:ec:21:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7YV7vWu5mP7TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MGM5ZWVjMGYtNzI0Yi00N2RkLTkyNjYtOTdmNTEyMzIwZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd2P2keY1VAAQmUlWLPX3VhAyFZIZRIfH2v2 FA46HtlvqhazwchOsvminV96dxPzKTpyGTJuZe0eewZwN+huLl7rUmu6Y58sCBGL 0CIWWuMU4/cpkROLft7Ps7vWIrm/DUCeHMW9JAVBIq/7iom7/nNab3/Sgw1VEowZ z5ThYWqFg4ODC9qFt0u0TOqK4qENMj6U5D+jz5nxYxPBO0QRnJN0l9b/bsa72XaA mlWRE9aojI7tepnObSq5N95dRAq3zLxut9dhBM8Ad6SKNGG3OSbgsJX0yhYrBXuo +gtobqHVDmZTqwrwz+bMI2eyT0+ruefkG5E295uktRO9lxTizQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6CaImXP3/hT2Wtdps5WXd76C0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGQ0MDU5NWEtNDFmMi0z YWMxLTk2NTctZGRjNzgzNTBjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrxmamGdokob0FHWParr5EZ7p6HaFONOBANFNtoEwRmGn/Ug4h6Rt+a i4nrBx9FdM//Oy1QxLZqsS+n/frkYPKrK5MiMy3g8YumP1lXzPSrUv+ygMImFTWT VHbnX6CcAGpTn24DTzzmTL1wNJ/fPWn+9p6UEVT5IlMQ5q9ZLer+uoBXMQozT23C qop/6r/EDpT48J8NF/VK4yirRwpjOFMZl6bbzavjFm9zhhwsnbm+6AUosRF7+tM9 qIVPa/rDpURh5WRHjC8371+FFj9aRwGEiHwecyWokPZhKtsJTc9E1DSBUeOSFS5W r9p48+OD478qvRb1qHhHJl0zQT/sIZc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:59 2025 by rpki-client