$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa File: 5390d515-f56d-3bfc-9fdd-f680b36665ae.roa (raw, json) Hash identifier: G4e7HkCEHUyFVrX2BgmaZATzYEKRxRoByQ+ECIT9Z24= Subject key identifier: E8:5B:19:08:C7:6C:C9:0D:1F:D6:A1:CE:66:39:50:23:69:1D:FB:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B64DCB8577C2F70A6600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.20.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b6:4d:cb:85:77:c2:f7:0a:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=21fb2fc2-3889-4699-98ba-f4c962cd4a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:66:5f:0c:4f:b0:2b:dc:1f:1e:fa:34:41: 7a:55:ae:bd:d2:0e:5c:12:72:32:22:71:d4:b8:7f: 90:cf:ea:49:ff:1f:26:1b:19:63:ed:84:d5:4d:fb: a1:70:4f:b6:67:ce:45:0b:5f:d6:ce:86:f2:0b:ab: a5:47:e8:1b:6f:ff:7c:fd:ff:04:8f:59:79:8f:f8: 43:e1:cb:a2:48:41:5f:d4:42:ac:d2:4d:d6:3b:5b: 6b:a9:0c:c9:37:e8:56:24:69:b9:18:d1:dc:61:5e: 3f:03:87:9c:c4:f2:b0:fd:8a:07:59:64:9a:31:dc: fd:3b:4b:3b:76:f8:56:10:cd:6b:8b:d3:e9:bd:09: a8:a7:25:59:eb:1d:cd:f2:97:9c:a6:fe:84:aa:ec: e8:cb:15:01:df:1b:c5:0f:ab:43:eb:d2:8f:d5:96: 11:c8:e6:7c:b9:30:4c:1d:f9:ea:72:cf:51:da:68: af:6b:82:44:a6:ff:ec:38:0b:04:12:d8:d3:e0:6c: f4:02:21:ac:a4:a1:50:3a:de:96:fb:ba:62:a2:43: df:16:23:43:e0:e0:8e:60:29:55:59:37:9b:70:0b: 92:31:f0:5b:cf:fc:82:4e:aa:2a:1c:53:20:ec:81: 9c:d6:05:16:3c:45:77:0a:ee:da:58:bc:08:d5:5f: be:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:19:08:C7:6C:C9:0D:1F:D6:A1:CE:66:39:50:23:69:1D:FB:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:05:5f:1b:05:68:4c:11:a4:7a:a4:6c:44:8f:31:4f:e1:5c: 41:2a:f2:73:69:11:78:a3:be:3d:b9:54:81:6c:c3:f2:3b:17: 7f:ee:4b:62:96:4b:cc:ed:e4:22:62:b7:5c:9e:46:3d:b8:a3: 4f:26:31:96:d1:3e:13:2e:d8:b9:e7:17:9d:c2:94:b2:39:92: 7b:71:a9:2e:94:8e:32:32:f3:10:94:4a:79:9d:22:f8:bd:03: da:4d:7b:fc:f8:6b:73:6e:30:f4:d6:50:45:b7:ef:43:fc:85: c9:39:58:66:79:82:97:fe:97:21:45:87:e4:32:84:66:2f:a1: e6:a5:18:db:25:6c:c2:3c:f6:5d:13:1b:93:43:62:73:78:f3: 02:0d:da:7e:7c:77:7f:8e:a4:fb:39:73:9e:73:c5:99:e7:32: fb:0c:94:5c:e1:d5:14:c2:14:5a:2c:c2:74:7b:c4:93:ef:3e: a0:4c:70:6b:b5:38:ce:36:85:97:53:fb:3c:23:ed:d6:ad:51: 23:ab:0f:d8:1f:9d:65:69:89:5b:2e:be:da:0c:c0:e4:7f:ca: 16:34:05:d9:31:d6:23:58:63:15:04:57:f6:1f:f5:fb:0e:58: 3d:ba:f0:8e:ff:5b:2c:8a:43:1e:0c:70:92:17:ee:f5:00:af: 18:d9:7b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7ZNy4V3wvcKZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MjFmYjJmYzItMzg4OS00Njk5LTk4YmEtZjRjOTYyY2Q0YTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVpmXwxPsCvcHx76NEF6Va690g5cEnIyInHU uH+Qz+pJ/x8mGxlj7YTVTfuhcE+2Z85FC1/WzobyC6ulR+gbb/98/f8Ej1l5j/hD 4cuiSEFf1EKs0k3WO1trqQzJN+hWJGm5GNHcYV4/A4ecxPKw/YoHWWSaMdz9O0s7 dvhWEM1ri9PpvQmopyVZ6x3N8pecpv6EquzoyxUB3xvFD6tD69KP1ZYRyOZ8uTBM Hfnqcs9R2miva4JEpv/sOAsEEtjT4Gz0AiGspKFQOt6W+7piokPfFiND4OCOYClV WTebcAuSMfBbz/yCTqoqHFMg7IGc1gUWPEV3Cu7aWLwI1V++swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhbGQjHbMkNH9ahzmY5UCNpHfvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTM5MGQ1MTUtZjU2ZC0z YmZjLTlmZGQtZjY4MGIzNjY2NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEFXxsFaEwRpHqkbESPMU/hXEEq8nNpEXijvj25VIFsw/I7F3/uS2KW S8zt5CJit1yeRj24o08mMZbRPhMu2LnnF53ClLI5kntxqS6UjjIy8xCUSnmdIvi9 A9pNe/z4a3NuMPTWUEW370P8hck5WGZ5gpf+lyFFh+QyhGYvoealGNslbMI89l0T G5NDYnN48wIN2n58d3+OpPs5c55zxZnnMvsMlFzh1RTCFFoswnR7xJPvPqBMcGu1 OM42hZdT+zwj7datUSOrD9gfnWVpiVsuvtoMwOR/yhY0Bdkx1iNYYxUEV/Yf9fsO WD268I7/WyyKQx4McJIX7vUArxjZe5M= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:33 2025 by rpki-client