$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fbeac43-9ead-3b21-9420-18baa1ee8021.roa File: 6fbeac43-9ead-3b21-9420-18baa1ee8021.roa (raw, json) Hash identifier: 6m7RMplxl1NKXd+3hJ+YaBQpS6350i3dj/qAIMXG3dw= Subject key identifier: 8E:98:51:17:FC:81:C2:1E:2C:8D:E6:E4:D8:33:EE:91:4E:E8:F1:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C092FB3786EA4FA58380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fbeac43-9ead-3b21-9420-18baa1ee8021.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.19.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c0:92:fb:37:86:ea:4f:a5:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=9aa6a696-dbc0-4007-be6b-d63be8385fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2c:89:a4:af:07:57:a8:7e:34:52:8d:55:71: ab:c7:cb:6b:92:3e:d7:40:70:5e:1f:2d:2c:36:28: de:3c:42:f3:f0:ce:5f:a1:2d:38:8f:5c:dc:93:5c: e7:cc:7b:ca:e3:db:18:0c:7e:61:17:78:4b:3c:fe: 57:3a:be:e8:07:7f:53:e6:ff:9e:26:8d:8c:19:b0: 8b:f4:c9:8f:9f:88:5b:a4:6f:5c:5e:aa:1e:a6:8f: ca:b5:40:8e:5b:aa:8b:cb:3a:3f:09:b9:37:ba:06: f6:78:68:c5:23:22:d8:10:96:99:17:77:22:56:e4: 3c:98:07:a9:ff:08:f7:25:71:0b:30:89:c7:45:11: 20:52:87:11:cc:df:6a:82:10:7a:ab:2c:66:31:d0: 78:2a:22:3e:a3:b2:41:b3:33:9f:85:f5:57:ff:7c: 99:87:05:b2:df:0a:dc:2a:ca:85:6e:7e:64:49:28: 05:84:a2:97:a3:4a:ca:4c:64:b7:15:bf:ef:18:8c: 89:6a:6a:37:0b:a1:f2:02:8e:b9:52:bc:e6:fb:1f: 34:b3:a0:a1:01:9e:d7:56:6d:e4:59:cf:01:3b:e2: ab:28:43:21:a2:e0:d3:01:bd:d2:01:9b:93:22:26: f9:5a:e0:f3:31:f0:8a:46:e1:6c:d0:38:15:ff:59: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:51:17:FC:81:C2:1E:2C:8D:E6:E4:D8:33:EE:91:4E:E8:F1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fbeac43-9ead-3b21-9420-18baa1ee8021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:57:d5:5b:6b:b5:5a:1d:50:d0:e4:17:5b:ac:92:eb:cd:0c: 19:e2:c5:81:be:01:71:96:11:cf:52:6e:9b:ff:be:0c:ae:02: b5:ae:03:9a:cc:32:43:c4:9d:15:a5:c4:d1:7c:4e:f1:99:dc: 2a:f5:bc:f3:d6:d9:ac:ce:93:92:3a:69:aa:c2:25:4d:a3:41: 87:f9:9f:d2:27:e7:3b:d2:e4:79:45:4f:b1:db:12:7e:77:7e: 07:8d:6c:ec:91:40:31:5b:26:07:2d:76:5c:05:df:a2:48:70: 3c:1b:d9:14:2c:d8:17:8b:03:41:eb:5e:ad:ee:f0:dc:84:03: 8c:e3:fa:3d:34:7a:89:59:ff:d5:ef:96:8b:92:68:d2:c8:9a: e8:23:af:fc:3b:01:19:f2:9b:4b:98:90:14:d6:12:94:e3:8b: 1d:84:1b:26:48:30:e6:0f:ab:11:a1:bb:2f:f1:41:f4:a9:ef: fc:11:3b:09:4d:4a:e3:80:09:d1:a2:58:3b:a0:4f:88:74:14: c6:cf:49:47:5f:d8:78:fe:ba:1b:42:d5:92:9b:76:dd:84:4f: cd:4e:a9:d9:86:88:c2:b5:03:c9:0a:2a:d2:f4:95:d4:a1:7a: 38:47:5e:a3:81:47:b3:53:c1:3b:d5:69:1f:c3:4c:d4:8f:08: d0:83:1a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8CS+zeG6k+lg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OWFhNmE2OTYtZGJjMC00MDA3LWJlNmItZDYzYmU4Mzg1ZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiyJpK8HV6h+NFKNVXGrx8trkj7XQHBeHy0s NijePELz8M5foS04j1zck1znzHvK49sYDH5hF3hLPP5XOr7oB39T5v+eJo2MGbCL 9MmPn4hbpG9cXqoepo/KtUCOW6qLyzo/Cbk3ugb2eGjFIyLYEJaZF3ciVuQ8mAep /wj3JXELMInHRREgUocRzN9qghB6qyxmMdB4KiI+o7JBszOfhfVX/3yZhwWy3wrc KsqFbn5kSSgFhKKXo0rKTGS3Fb/vGIyJamo3C6HyAo65Urzm+x80s6ChAZ7XVm3k Wc8BO+KrKEMhouDTAb3SAZuTIib5WuDzMfCKRuFs0DgV/1n7qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6YURf8gcIeLI3m5Ngz7pFO6PFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmZiZWFjNDMtOWVhZC0z YjIxLTk0MjAtMThiYWExZWU4MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpX1VtrtVodUNDkF1uskuvNDBnixYG+AXGWEc9Sbpv/vgyuArWuA5rM MkPEnRWlxNF8TvGZ3Cr1vPPW2azOk5I6aarCJU2jQYf5n9In5zvS5HlFT7HbEn53 fgeNbOyRQDFbJgctdlwF36JIcDwb2RQs2BeLA0HrXq3u8NyEA4zj+j00eolZ/9Xv louSaNLImugjr/w7ARnym0uYkBTWEpTjix2EGyZIMOYPqxGhuy/xQfSp7/wROwlN SuOACdGiWDugT4h0FMbPSUdf2Hj+uhtC1ZKbdt2ET81OqdmGiMK1A8kKKtL0ldSh ejhHXqOBR7NTwTvVaR/DTNSPCNCDGlk= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:36 2025 by rpki-client