$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79258661-bddc-35aa-8b17-6494745925bf.roa File: 79258661-bddc-35aa-8b17-6494745925bf.roa (raw, json) Hash identifier: 4Io2QxlmCE3ZuvoeMRuxs4HeMdxQEIpmO1eHnk2II/k= Subject key identifier: BA:DA:50:0C:07:A5:63:03:AD:BE:17:0B:03:90:33:DB:EA:00:84:90 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C0FE4FE66B5036F5AD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79258661-bddc-35aa-8b17-6494745925bf.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.20.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c0:fe:4f:e6:6b:50:36:f5:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=a796908d-2ad8-412d-84d1-d79189773fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:29:ff:76:7a:9f:32:eb:9d:f2:7b:69:52: f4:83:b7:b1:c0:97:8f:ed:a5:5d:7f:16:00:ae:48: ee:39:a7:43:30:8a:be:56:88:84:06:cf:79:6d:99: 94:45:87:f0:90:db:cb:75:5b:19:83:3b:4e:f1:44: 81:56:59:3c:27:f0:0e:54:ce:45:15:d1:6d:d3:0e: cf:fe:f6:20:bf:19:78:1c:7f:a8:a7:f9:31:42:3f: 70:1c:65:29:37:78:4f:ff:ee:00:e4:8b:9e:be:27: d9:d8:79:cd:70:45:a4:06:ab:d1:bc:10:f6:50:dd: 70:85:d9:61:99:1d:74:49:d7:9b:ac:80:cf:75:fe: 68:75:20:07:06:dc:1b:41:5c:e4:71:02:ae:d8:4c: 61:cd:b0:2f:82:74:26:ec:20:d4:03:f4:f9:7d:65: dd:4f:40:31:57:65:aa:0a:d0:a8:58:8d:41:90:4f: c1:7a:4c:10:f2:75:69:e6:38:6c:d9:3c:68:92:77: 7b:27:cd:f3:83:12:a1:72:b8:9b:61:56:4b:d0:20: d1:e9:5d:10:c3:e5:31:73:9d:79:b0:55:fd:7c:c1: 66:54:be:f9:d8:5e:ca:b8:9e:c0:a4:a2:57:60:9d: 06:c5:34:d1:c8:04:92:91:5d:00:c3:24:65:31:0b: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:50:0C:07:A5:63:03:AD:BE:17:0B:03:90:33:DB:EA:00:84:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79258661-bddc-35aa-8b17-6494745925bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:64:8b:4e:2d:5f:38:12:65:b6:1a:da:d4:af:60:e1:95:a2: da:13:e9:03:33:62:38:38:85:a4:ae:bb:a1:15:7a:e2:ba:e5: 32:30:22:55:e3:db:3d:2a:85:a6:8d:e2:66:26:1b:41:47:92: 2d:bb:6a:a1:90:0c:48:fd:aa:7f:72:32:71:e0:79:f4:9c:cf: 3e:c6:f2:5f:f2:11:2f:b2:74:70:02:54:07:a8:61:1b:6e:59: c4:8e:52:d0:be:f3:28:4d:d4:47:a2:29:7a:6a:13:8a:5f:e2: 30:cc:be:95:37:4e:d3:9e:f9:48:6b:b3:3b:01:f4:21:36:69: 75:0c:be:ae:79:f2:18:d2:7a:c8:a0:1a:7c:d6:06:21:c5:f2: b1:3b:32:3a:72:6e:47:1b:24:39:10:10:48:15:c4:10:ac:39: ba:aa:41:e5:be:20:ae:a7:c9:d0:51:7c:18:7d:2c:49:7c:c6: 68:bd:a0:83:bc:9e:c7:ab:c8:4e:a2:d9:d3:51:93:3c:a8:47: 35:02:f8:f4:ea:b2:44:77:05:d9:0f:f0:d9:23:39:37:4d:64: a6:1c:b8:55:9e:6b:62:06:1c:3c:5d:54:2c:70:aa:62:44:21: ca:2c:8d:69:46:77:fa:c0:f9:32:bc:a5:25:d3:44:95:ef:db: a8:cf:33:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8D+T+ZrUDb1rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YTc5NjkwOGQtMmFkOC00MTJkLTg0ZDEtZDc5MTg5NzczZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNsp/3Z6nzLrnfJ7aVL0g7exwJeP7aVdfxYA rkjuOadDMIq+VoiEBs95bZmURYfwkNvLdVsZgztO8USBVlk8J/AOVM5FFdFt0w7P /vYgvxl4HH+op/kxQj9wHGUpN3hP/+4A5IuevifZ2HnNcEWkBqvRvBD2UN1whdlh mR10SdebrIDPdf5odSAHBtwbQVzkcQKu2ExhzbAvgnQm7CDUA/T5fWXdT0AxV2Wq CtCoWI1BkE/BekwQ8nVp5jhs2Txoknd7J83zgxKhcribYVZL0CDR6V0Qw+Uxc515 sFX9fMFmVL752F7KuJ7ApKJXYJ0GxTTRyASSkV0AwyRlMQsdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLraUAwHpWMDrb4XCwOQM9vqAISQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzkyNTg2NjEtYmRkYy0z NWFhLThiMTctNjQ5NDc0NTkyNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtki04tXzgSZbYa2tSvYOGVotoT6QMzYjg4haSuu6EVeuK65TIwIlXj 2z0qhaaN4mYmG0FHki27aqGQDEj9qn9yMnHgefSczz7G8l/yES+ydHACVAeoYRtu WcSOUtC+8yhN1EeiKXpqE4pf4jDMvpU3TtOe+UhrszsB9CE2aXUMvq558hjSesig GnzWBiHF8rE7MjpybkcbJDkQEEgVxBCsObqqQeW+IK6nydBRfBh9LEl8xmi9oIO8 nseryE6i2dNRkzyoRzUC+PTqskR3BdkP8NkjOTdNZKYcuFWea2IGHDxdVCxwqmJE IcosjWlGd/rA+TK8pSXTRJXv26jPMxE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:41 2025 by rpki-client