$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2f1cbd-8084-3998-8963-ecebf0bf4416.roa File: 5e2f1cbd-8084-3998-8963-ecebf0bf4416.roa (raw, json) Hash identifier: R1E1wM4RxOf+4WZMvI9QCiQtoHKEu4zv4zPZwBmbPmc= Subject key identifier: AC:4E:09:4C:7D:70:DB:85:07:29:A1:8F:2D:E4:21:33:8B:8E:D5:1D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B489AA9A8EE997231C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2f1cbd-8084-3998-8963-ecebf0bf4416.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b4:89:aa:9a:8e:e9:97:23:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=2e4e6b49-9157-45d6-802d-097650c4769c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:08:42:3d:2e:c7:13:04:9b:a8:f4:dd:b3: f3:21:62:80:12:33:b3:11:22:ec:a9:11:7f:17:c7: ad:5a:17:ed:09:d0:3e:66:2f:0a:50:4f:67:30:da: fa:05:88:5c:90:37:05:3b:aa:7c:e1:2b:7c:f1:da: df:6d:97:9a:fb:84:98:be:d8:e4:06:60:9f:9d:97: b5:23:93:4b:c4:1d:67:56:7a:1d:bb:f1:4b:f0:e4: 41:ab:dd:0a:f4:aa:07:b0:b7:43:86:f2:69:ec:bb: 12:0d:63:cd:8c:cb:4c:ba:2c:03:da:5c:d7:95:c4: ba:20:7b:d0:f2:f1:61:76:0c:26:7a:be:77:96:93: 3d:d2:64:92:f0:da:d8:44:62:43:58:8a:4b:bf:e2: d3:e2:5a:9f:9f:4b:fe:06:5c:fe:79:1c:7a:83:1d: 0b:b0:e9:55:f2:9a:47:70:43:40:d0:a4:95:da:7c: 40:19:4d:b3:ea:b3:b1:d9:5b:a8:bd:77:98:c7:6d: 17:84:fd:c6:ea:94:29:4e:94:c6:4a:5e:8f:d6:bf: 5f:16:08:9a:e6:9a:3d:2b:50:e9:0c:82:18:f9:b3: 3e:77:fa:00:1a:ae:26:52:4c:55:e5:97:bd:18:51: 29:3f:2f:3b:d7:e3:e5:cb:c6:94:b4:1e:0c:f7:7c: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4E:09:4C:7D:70:DB:85:07:29:A1:8F:2D:E4:21:33:8B:8E:D5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2f1cbd-8084-3998-8963-ecebf0bf4416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:fa:01:31:48:ec:03:6b:3f:2e:26:10:25:74:00:83:f4:06: 65:64:fa:84:ab:56:c2:dc:f6:9e:c4:40:e5:b2:16:ba:82:be: 9a:a3:56:6e:38:42:79:d1:96:2a:27:98:b9:a6:c8:22:fa:b0: 25:3b:7b:29:da:e1:ae:b4:7c:a1:cc:36:ee:b6:21:ab:e0:e9: e0:6f:1f:2b:75:14:76:97:f1:af:a6:b2:22:a7:15:09:c7:1b: ed:30:21:eb:b7:06:3b:fc:6b:55:28:8c:0e:24:bb:95:9c:8a: 1b:38:91:7d:50:27:e5:a2:3c:36:34:35:da:2a:eb:5f:d5:eb: 07:88:7e:84:d9:04:6b:bd:64:5d:5c:e7:b8:55:49:0f:30:8b: 0d:3b:d1:fa:3d:14:4b:f9:77:6e:c5:07:c6:fb:53:dd:70:12: 84:38:56:20:c1:25:4a:38:29:6e:2a:2c:9e:3b:e1:2d:f8:69: f4:39:63:ea:a6:aa:13:d1:43:a8:7d:be:5c:28:85:49:77:24: 21:70:1a:de:ff:4a:c6:29:a5:d1:78:fd:3a:1d:41:f6:7c:97: 69:c9:af:49:10:d0:3d:5b:7a:4a:7e:a0:8d:96:9a:df:fe:d5: 26:e9:9f:ca:80:56:5d:89:35:7c:f3:42:a9:54:8b:c8:97:96: 9d:c5:15:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7SJqpqO6ZcjHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MmU0ZTZiNDktOTE1Ny00NWQ2LTgwMmQtMDk3NjUwYzQ3NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeEIQj0uxxMEm6j03bPzIWKAEjOzESLsqRF/ F8etWhftCdA+Zi8KUE9nMNr6BYhckDcFO6p84St88drfbZea+4SYvtjkBmCfnZe1 I5NLxB1nVnodu/FL8ORBq90K9KoHsLdDhvJp7LsSDWPNjMtMuiwD2lzXlcS6IHvQ 8vFhdgwmer53lpM90mSS8NrYRGJDWIpLv+LT4lqfn0v+Blz+eRx6gx0LsOlV8ppH cENA0KSV2nxAGU2z6rOx2VuovXeYx20XhP3G6pQpTpTGSl6P1r9fFgia5po9K1Dp DIIY+bM+d/oAGq4mUkxV5Ze9GFEpPy871+Ply8aUtB4M93yAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxOCUx9cNuFBymhjy3kITOLjtUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWUyZjFjYmQtODA4NC0z OTk4LTg5NjMtZWNlYmYwYmY0NDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv6ATFI7ANrPy4mECV0AIP0BmVk+oSrVsLc9p7EQOWyFrqCvpqjVm44 QnnRlionmLmmyCL6sCU7eyna4a60fKHMNu62Iavg6eBvHyt1FHaX8a+msiKnFQnH G+0wIeu3Bjv8a1UojA4ku5Wcihs4kX1QJ+WiPDY0Ndoq61/V6weIfoTZBGu9ZF1c 57hVSQ8wiw070fo9FEv5d27FB8b7U91wEoQ4ViDBJUo4KW4qLJ474S34afQ5Y+qm qhPRQ6h9vlwohUl3JCFwGt7/SsYppdF4/TodQfZ8l2nJr0kQ0D1bekp+oI2Wmt/+ 1Sbpn8qAVl2JNXzzQqlUi8iXlp3FFcE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:55 2025 by rpki-client