$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c13e0ab-b609-3af3-87ab-068c06e8be8d.roa File: 7c13e0ab-b609-3af3-87ab-068c06e8be8d.roa (raw, json) Hash identifier: XRRkkaFuuK3dmTHniNbJCABm0CepJrM/ptOpyyqOkXY= Subject key identifier: 06:CF:71:19:5F:A0:A4:D2:65:E7:B2:92:ED:84:C0:AD:62:C6:CE:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C463D85710D13A8D3900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c13e0ab-b609-3af3-87ab-068c06e8be8d.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.27.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c4:63:d8:57:10:d1:3a:8d:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b8c4b7a3-2c37-45c9-a8ea-b969729549bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:2a:62:93:71:5a:7b:f5:a1:fe:55:3c:f0: bf:24:8e:cd:4b:9f:48:e8:f1:6d:4f:2c:87:36:00: 19:e2:f8:7f:f0:c7:79:0b:c0:b1:3b:f0:5c:41:34: 6a:50:77:e8:e8:e4:d6:c8:ee:5e:9b:ac:d6:55:96: ea:38:70:a0:35:c1:8e:c4:7d:a1:3b:d7:74:3a:88: be:93:60:85:44:5e:9a:19:03:8a:29:51:60:7e:79: 8f:be:0e:ba:85:38:dc:c6:33:62:21:41:82:07:90: 84:0d:0b:a7:71:d0:31:c0:a8:37:2b:2f:c7:9f:5d: 79:26:62:14:82:20:d0:05:66:a8:a0:d4:7e:ca:07: 78:a1:ef:02:9f:b9:50:d4:f7:53:cf:e2:58:76:93: ff:88:09:cd:9e:b3:63:fb:53:d0:61:db:14:70:0c: 83:6b:ad:16:4e:8e:a7:14:cb:e8:02:37:e9:b4:ca: ea:81:63:c3:c1:b9:62:5b:b0:e3:7c:44:07:54:13: 0e:98:9b:1d:87:ec:26:d6:75:ec:06:e9:9d:25:32: 0f:24:8f:04:5a:66:d5:35:6a:ab:23:b4:d0:94:f4: bc:5f:85:f9:f9:c6:8d:e0:a4:18:d2:e9:c7:75:97: 36:89:4e:21:59:9e:a1:c2:fe:89:79:e2:d8:49:62: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CF:71:19:5F:A0:A4:D2:65:E7:B2:92:ED:84:C0:AD:62:C6:CE:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c13e0ab-b609-3af3-87ab-068c06e8be8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:74:ec:0b:a8:8c:21:72:42:75:7e:4a:35:e1:89:44:0a:d8: fc:fe:c4:46:78:17:a1:a1:44:dd:17:ca:ce:d3:79:65:0c:47: 19:f8:0e:c6:59:a6:58:80:6a:a9:04:93:6e:c8:eb:69:7c:de: 83:30:5d:4d:ce:a2:cd:b7:0b:9d:12:94:a0:ba:31:b1:87:44: 88:ad:c8:35:eb:26:9a:ab:1a:f6:58:33:40:4d:91:61:4d:59: 4b:6d:af:82:00:9f:67:77:28:d4:53:23:57:41:1c:31:e9:f9: a8:11:6f:c6:3c:2e:cb:9e:0b:db:3f:e3:3e:00:f7:81:39:46: 21:00:15:14:7a:9b:fd:74:94:84:25:87:db:86:f9:4e:1b:e5: 0d:84:05:05:ef:96:1b:3f:78:1b:9c:72:bc:db:23:06:9b:0e: 65:49:0d:2e:42:c4:7d:69:64:1a:a9:31:63:59:bc:bf:06:02: f1:7f:06:f4:a3:45:4a:ba:75:41:eb:ed:0a:c7:34:38:b0:d0: 0f:9f:83:16:4d:65:51:6d:cf:8e:4f:3b:6d:68:2d:28:f1:bc: 01:25:0b:52:98:f9:a6:a6:6e:8f:c2:ec:79:8f:bd:e8:5b:5d: fc:e4:9f:99:ca:e1:32:a4:22:0e:34:b6:9b:49:c4:45:d3:f1: 3e:5a:d2:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8Rj2FcQ0TqNOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjhjNGI3YTMtMmMzNy00NWM5LWE4ZWEtYjk2OTcyOTU0OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp8qYpNxWnv1of5VPPC/JI7NS59I6PFtTyyH NgAZ4vh/8Md5C8CxO/BcQTRqUHfo6OTWyO5em6zWVZbqOHCgNcGOxH2hO9d0Ooi+ k2CFRF6aGQOKKVFgfnmPvg66hTjcxjNiIUGCB5CEDQuncdAxwKg3Ky/Hn115JmIU giDQBWaooNR+ygd4oe8Cn7lQ1PdTz+JYdpP/iAnNnrNj+1PQYdsUcAyDa60WTo6n FMvoAjfptMrqgWPDwbliW7DjfEQHVBMOmJsdh+wm1nXsBumdJTIPJI8EWmbVNWqr I7TQlPS8X4X5+caN4KQY0unHdZc2iU4hWZ6hwv6JeeLYSWKDzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbPcRlfoKTSZeeyku2EwK1ixs69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2MxM2UwYWItYjYwOS0z YWYzLTg3YWItMDY4YzA2ZThiZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp07AuojCFyQnV+SjXhiUQK2Pz+xEZ4F6GhRN0Xys7TeWUMRxn4DsZZ pliAaqkEk27I62l83oMwXU3Oos23C50SlKC6MbGHRIityDXrJpqrGvZYM0BNkWFN WUttr4IAn2d3KNRTI1dBHDHp+agRb8Y8LsueC9s/4z4A94E5RiEAFRR6m/10lIQl h9uG+U4b5Q2EBQXvlhs/eBuccrzbIwabDmVJDS5CxH1pZBqpMWNZvL8GAvF/BvSj RUq6dUHr7QrHNDiw0A+fgxZNZVFtz45PO21oLSjxvAElC1KY+aambo/C7HmPvehb Xfzkn5nK4TKkIg40tptJxEXT8T5a0h0= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:22 2025 by rpki-client