$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa File: 79b649e5-7d33-3922-8433-6718a2039a8b.roa (raw, json) Hash identifier: HAtKFqoWb+lxurAs9pUmNyJQ0AM0IupP1SePfCqI+aU= Subject key identifier: B4:C0:BF:36:F3:1E:DB:F8:C6:63:C9:DB:23:A1:B1:D4:38:C1:22:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C309FB221AF3F8208180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.24.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c3:09:fb:22:1a:f3:f8:20:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=eeff4f0b-8233-4e2f-84da-f97c60357ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:6f:e3:79:80:18:d7:97:19:2d:44:18:20: 04:bd:d9:43:fc:04:06:cd:62:b0:82:25:08:e0:59: 6b:c3:b6:b8:c2:fb:d0:cd:c8:68:36:f2:b4:c8:e5: 2f:cf:ad:2c:d8:a8:04:11:0b:e2:0d:72:58:92:9d: bb:a3:ff:1b:7d:2e:94:ad:1d:94:be:3c:58:22:fa: 63:c0:9f:9b:f1:71:73:51:94:48:d4:a7:02:d6:b2: 44:fe:ed:39:34:0f:f4:6a:ae:41:d2:e8:d6:68:89: fe:98:18:18:13:88:3b:9c:d5:03:42:bd:15:5e:f5: 49:11:d2:37:45:2f:0d:cd:0a:ab:6b:7f:a9:38:11: 48:87:23:f0:e8:08:8d:f0:2d:b9:2c:b3:1e:30:b1: 85:e7:76:a7:d0:e5:08:97:43:45:b9:d6:5d:cf:61: 1d:33:94:c1:5f:96:98:26:7b:b9:e3:f6:d5:26:e7: 5e:8f:7f:7d:50:7e:62:2b:72:ef:9a:c9:ae:05:47: 61:07:be:ac:79:ef:b5:34:05:a4:c4:09:ff:81:f0: ef:cd:32:39:c8:66:dd:e0:99:d9:a7:99:3c:f3:e5: 8c:7d:a9:09:81:de:1f:fd:52:48:a3:35:50:41:30: 6f:a3:b0:e9:5e:02:49:73:fc:d1:42:c1:e8:dd:12: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C0:BF:36:F3:1E:DB:F8:C6:63:C9:DB:23:A1:B1:D4:38:C1:22:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1b:52:38:a9:4e:b8:b2:47:99:ac:fd:98:20:3d:88:d9:d6: 0c:7f:e1:56:51:cb:67:56:7b:e8:2f:12:b4:35:69:55:22:02: 92:48:62:23:da:a3:f2:97:06:8a:61:33:af:e6:74:48:d4:95: 37:da:cf:87:7b:33:99:e1:6c:53:0c:7d:46:58:65:6d:21:95: 4f:5f:97:74:0c:40:87:71:d8:96:8b:e1:ba:6b:34:72:4b:a6: 57:be:a7:f2:73:34:01:af:5b:f9:ea:d1:cd:78:fa:47:a6:70: 6d:6c:cc:6a:93:26:2f:e1:58:b5:13:74:38:42:e4:57:55:64: 9e:c4:ac:08:13:95:63:16:00:5a:2b:7f:1d:f2:22:7d:4f:ce: 82:13:58:f5:0e:11:bc:51:cd:e3:fe:23:e7:f6:3b:93:ad:e8: ff:de:53:74:30:e4:9b:7d:81:52:cc:65:25:10:db:93:d5:f9: 19:90:db:88:fa:77:ee:20:dc:b6:10:b1:ed:f9:56:c1:13:33: 8e:32:50:34:2e:46:aa:9e:81:e2:29:f6:b8:b6:48:ae:99:42: 43:30:12:ba:80:5c:85:fd:b5:00:42:ea:5d:7f:e8:51:1a:64: a8:cf:cd:b5:7c:42:6d:f3:98:ac:b2:cd:03:21:50:22:d2:2a: cc:0d:5b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8MJ+yIa8/gggYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWVmZjRmMGItODIzMy00ZTJmLTg0ZGEtZjk3YzYwMzU3ZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhhv43mAGNeXGS1EGCAEvdlD/AQGzWKwgiUI 4Flrw7a4wvvQzchoNvK0yOUvz60s2KgEEQviDXJYkp27o/8bfS6UrR2UvjxYIvpj wJ+b8XFzUZRI1KcC1rJE/u05NA/0aq5B0ujWaIn+mBgYE4g7nNUDQr0VXvVJEdI3 RS8NzQqra3+pOBFIhyPw6AiN8C25LLMeMLGF53an0OUIl0NFudZdz2EdM5TBX5aY Jnu54/bVJudej399UH5iK3LvmsmuBUdhB76see+1NAWkxAn/gfDvzTI5yGbd4JnZ p5k88+WMfakJgd4f/VJIozVQQTBvo7DpXgJJc/zRQsHo3RLEIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTAvzbzHtv4xmPJ2yOhsdQ4wSIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzliNjQ5ZTUtN2QzMy0z OTIyLTg0MzMtNjcxOGEyMDM5YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIbUjipTriyR5ms/ZggPYjZ1gx/4VZRy2dWe+gvErQ1aVUiApJIYiPa o/KXBophM6/mdEjUlTfaz4d7M5nhbFMMfUZYZW0hlU9fl3QMQIdx2JaL4bprNHJL ple+p/JzNAGvW/nq0c14+kemcG1szGqTJi/hWLUTdDhC5FdVZJ7ErAgTlWMWAFor fx3yIn1PzoITWPUOEbxRzeP+I+f2O5Ot6P/eU3Qw5Jt9gVLMZSUQ25PV+RmQ24j6 d+4g3LYQse35VsETM44yUDQuRqqegeIp9ri2SK6ZQkMwErqAXIX9tQBC6l1/6FEa ZKjPzbV8Qm3zmKyyzQMhUCLSKswNWwQ= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:39 2025 by rpki-client