$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa File: 5733aaff-6788-3f49-afa1-3260b9ee26bc.roa (raw, json) Hash identifier: qilO6XfaOWh5SfhdZQquMDckXB4L7LnwWLrfVApCVu4= Subject key identifier: F0:5D:6D:89:5F:18:1F:CD:65:ED:4F:EA:D7:A1:BF:2F:42:8F:BA:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B5DC7BA88F63470ABE00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.19.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b5:dc:7b:a8:8f:63:47:0a:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=bcd4ade2-21b0-4e98-8808-1f781ce2386f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:99:ba:ee:d2:76:e9:23:d1:99:4c:5b:c1: 8e:37:91:28:76:26:6d:06:7d:6d:1e:91:9e:ee:dc: a3:b4:96:dd:5f:b4:0a:71:ac:a9:b2:8f:13:c0:64: 16:a5:72:72:36:72:99:2d:08:f9:47:84:4d:5e:be: 59:20:ae:6e:af:f2:ce:d7:35:20:d2:bf:15:71:59: 23:f7:5e:9d:33:37:c3:fa:97:18:2d:aa:ed:7f:ef: ce:b7:14:ca:32:fa:ca:d2:12:06:09:2c:a0:5a:4b: f9:4f:66:11:0a:cc:27:ac:45:6f:ff:92:ce:ed:eb: 02:85:48:53:b1:66:eb:5b:f3:de:6e:d8:1b:e7:b0: 4e:82:b6:f8:0d:9f:59:53:f9:9b:19:51:b2:47:77: 2b:33:1d:14:c4:01:af:48:34:24:0f:f5:ea:40:59: d7:64:b6:ec:af:93:27:94:6c:0f:37:19:96:31:39: 02:31:8e:cc:2d:62:45:7e:fc:3b:20:e6:86:9e:b1: e2:1b:05:11:5c:03:f8:f7:40:3e:8c:05:84:d1:8c: 6b:55:64:45:f3:07:b3:11:36:83:d0:c1:44:68:4d: 48:d3:79:4b:08:4e:5b:23:0e:6d:f7:84:66:10:df: b7:0a:7b:74:57:19:db:47:c0:b6:a4:30:61:5b:a7: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5D:6D:89:5F:18:1F:CD:65:ED:4F:EA:D7:A1:BF:2F:42:8F:BA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f4:5b:37:52:ff:2c:ec:0d:d3:28:d7:95:b5:ab:2f:d3:41: a9:a7:d4:ff:c6:15:8f:5f:b7:7f:67:6f:a0:35:a0:b9:b5:39: 05:37:f4:49:e9:20:bf:57:c0:a4:52:79:af:4f:db:a3:71:93: fe:04:e4:09:52:46:1a:07:14:f5:55:27:3a:73:90:69:1b:4f: 14:5e:02:17:d2:75:32:62:87:b2:c3:c7:b0:15:2e:c5:9f:ed: 96:86:ae:4c:6a:ad:fe:9a:fe:06:ef:72:6d:46:aa:8c:06:f7: e5:af:4c:89:c0:98:84:b4:32:77:fd:7a:e3:f9:a9:fa:96:e5: e8:55:67:ef:c3:5a:02:4f:ae:12:81:7a:4c:38:ef:51:99:55: 4e:06:4f:ea:42:c8:fe:3a:dc:18:d5:df:df:96:f0:f1:f8:44: 50:03:0f:88:70:85:9a:51:dc:fe:72:f2:62:64:8a:f5:a9:a8: 11:d1:82:fd:2e:54:28:f0:40:a3:6e:cd:55:35:d7:5f:97:d5: 35:fa:e7:fb:3d:ed:65:63:fc:23:56:0b:ee:35:b5:05:cc:be: 3f:d2:0e:0b:6a:0e:41:91:51:de:65:c3:24:07:da:7a:26:55: 2f:8a:75:a2:51:84:1c:12:c3:2e:47:90:92:67:98:b6:46:64: 1b:2d:03:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7Xce6iPY0cKvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YmNkNGFkZTItMjFiMC00ZTk4LTg4MDgtMWY3ODFjZTIzODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4OZuu7Sdukj0ZlMW8GON5EodiZtBn1tHpGe 7tyjtJbdX7QKcaypso8TwGQWpXJyNnKZLQj5R4RNXr5ZIK5ur/LO1zUg0r8VcVkj 916dMzfD+pcYLartf+/OtxTKMvrK0hIGCSygWkv5T2YRCswnrEVv/5LO7esChUhT sWbrW/Pebtgb57BOgrb4DZ9ZU/mbGVGyR3crMx0UxAGvSDQkD/XqQFnXZLbsr5Mn lGwPNxmWMTkCMY7MLWJFfvw7IOaGnrHiGwURXAP490A+jAWE0YxrVWRF8wezETaD 0MFEaE1I03lLCE5bIw5t94RmEN+3Cnt0VxnbR8C2pDBhW6e/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBdbYlfGB/NZe1P6tehvy9Cj7r/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTczM2FhZmYtNjc4OC0z ZjQ5LWFmYTEtMzI2MGI5ZWUyNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf0WzdS/yzsDdMo15W1qy/TQamn1P/GFY9ft39nb6A1oLm1OQU39Enp IL9XwKRSea9P26Nxk/4E5AlSRhoHFPVVJzpzkGkbTxReAhfSdTJih7LDx7AVLsWf 7ZaGrkxqrf6a/gbvcm1GqowG9+WvTInAmIS0Mnf9euP5qfqW5ehVZ+/DWgJPrhKB ekw471GZVU4GT+pCyP463BjV39+W8PH4RFADD4hwhZpR3P5y8mJkivWpqBHRgv0u VCjwQKNuzVU111+X1TX65/s97WVj/CNWC+41tQXMvj/SDgtqDkGRUd5lwyQH2nom VS+KdaJRhBwSwy5HkJJnmLZGZBstAxM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:35 2025 by rpki-client