$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa File: 689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa (raw, json) Hash identifier: De6i8t68s0UDe6noUXEbYz/sb/4X/IaaWTEJnj0fch4= Subject key identifier: 7E:21:75:3F:B2:A6:BD:4C:94:10:3E:3C:3D:A0:CB:F7:A7:AF:27:4B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B245A0722287CD16CD80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.17.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b2:45:a0:72:22:87:cd:16:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=06c80e6d-ff95-402d-a45c-c2c16c1e33be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:12:4a:73:bd:e9:46:8c:39:32:ca:84:92: 97:36:e5:ab:61:07:6f:ce:1a:f4:e3:07:ce:20:9f: 66:ed:9f:1b:01:88:8d:75:42:0e:18:db:d0:5f:b9: f4:d1:aa:2e:de:f2:6e:48:47:38:f0:f0:fc:17:58: b3:34:33:68:88:82:17:85:b5:93:6b:30:ef:d2:51: 06:d8:6f:77:50:ea:bb:13:73:b2:ee:68:25:bd:a3: 5c:14:3b:7e:44:9f:bf:30:dd:cb:01:bc:61:98:89: 2f:2b:1d:6c:57:75:c5:3d:b0:2e:60:2e:a8:03:1b: 15:c8:b5:f6:e5:f3:3f:87:c2:2d:c1:38:8e:85:ce: 6e:92:13:2b:39:1f:4f:3c:ea:37:e0:83:d9:75:08: 47:d7:70:4d:12:ea:74:af:cd:6b:aa:27:92:01:6b: 24:86:99:ab:cf:bd:25:e9:23:3d:10:d3:f8:6e:6b: 7f:f1:52:9e:0d:09:90:e6:81:82:9d:6e:f5:17:f6: 48:ee:bb:88:9f:81:68:3a:0b:bb:42:61:6a:7f:8a: 68:af:f2:7a:c9:87:a0:85:c6:eb:6d:68:9c:c1:c5: cf:46:3c:1f:59:b6:dd:85:b3:35:fb:18:ac:a0:4e: e4:a2:81:da:7d:02:ad:ac:f4:7e:f5:86:a0:08:8a: 0c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:21:75:3F:B2:A6:BD:4C:94:10:3E:3C:3D:A0:CB:F7:A7:AF:27:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:60:9c:46:fd:10:f3:86:da:9c:cb:1c:dc:70:89:45:ea:56: 6c:5a:11:35:ed:a5:a1:fa:61:b6:74:a1:91:0a:3a:c8:33:d2: 30:ce:1d:7c:33:83:39:06:42:76:cb:e0:7f:b0:aa:50:98:4e: c4:e3:7a:d7:e3:bb:b1:00:c4:7c:5f:f8:cb:f6:b5:a3:ab:91: 2a:a9:d2:18:88:a0:e8:b6:fd:6f:80:57:b7:95:c9:05:e3:19: 45:d9:d4:3e:07:54:fe:c0:ef:88:16:08:7e:38:e5:48:f2:a7: 38:09:8e:c9:22:cc:56:79:72:6c:97:36:69:43:84:8d:14:87: 43:60:f3:fe:b9:b3:44:9f:aa:5a:c8:d9:3f:07:42:61:5e:2c: 78:8a:72:2f:a5:6b:41:76:92:0e:d8:ad:88:c9:a7:a8:40:5b: 68:e4:5d:72:be:f0:c1:fd:3e:9a:6a:aa:9e:da:f9:0d:24:40: 8b:1a:d7:e3:16:9d:78:b2:8e:e0:99:39:38:0b:46:c0:ea:cb: 7b:5f:4a:77:ad:fc:7e:9c:a3:e1:8b:3e:67:a6:b7:28:9c:52: 52:c3:74:a9:d1:5a:df:c6:98:61:f7:62:97:c5:91:b1:69:88: 2b:34:8f:cd:19:8d:44:e4:1d:6e:2a:81:bf:58:55:96:00:d3: 85:dc:3f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7JFoHIih80WzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MDZjODBlNmQtZmY5NS00MDJkLWE0NWMtYzJjMTZjMWUzM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKkSSnO96UaMOTLKhJKXNuWrYQdvzhr04wfO IJ9m7Z8bAYiNdUIOGNvQX7n00aou3vJuSEc48PD8F1izNDNoiIIXhbWTazDv0lEG 2G93UOq7E3Oy7mglvaNcFDt+RJ+/MN3LAbxhmIkvKx1sV3XFPbAuYC6oAxsVyLX2 5fM/h8ItwTiOhc5ukhMrOR9PPOo34IPZdQhH13BNEup0r81rqieSAWskhpmrz70l 6SM9ENP4bmt/8VKeDQmQ5oGCnW71F/ZI7ruIn4FoOgu7QmFqf4por/J6yYeghcbr bWicwcXPRjwfWbbdhbM1+xisoE7kooHafQKtrPR+9YagCIoMewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4hdT+ypr1MlBA+PD2gy/enrydLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjg5ZWEwZTMtZGM5ZC0z YTJkLTliYzAtMmJmZjM1ZGZkYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9gnEb9EPOG2pzLHNxwiUXqVmxaETXtpaH6YbZ0oZEKOsgz0jDOHXwz gzkGQnbL4H+wqlCYTsTjetfju7EAxHxf+Mv2taOrkSqp0hiIoOi2/W+AV7eVyQXj GUXZ1D4HVP7A74gWCH445UjypzgJjskizFZ5cmyXNmlDhI0Uh0Ng8/65s0SfqlrI 2T8HQmFeLHiKci+la0F2kg7YrYjJp6hAW2jkXXK+8MH9Pppqqp7a+Q0kQIsa1+MW nXiyjuCZOTgLRsDqy3tfSnet/H6co+GLPmemtyicUlLDdKnRWt/GmGH3YpfFkbFp iCs0j80ZjUTkHW4qgb9YVZYA04XcPwg= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:16 2025 by rpki-client