$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80a25e7a-1a21-3f44-9f33-a1f575981051.roa File: 80a25e7a-1a21-3f44-9f33-a1f575981051.roa (raw, json) Hash identifier: ra3rYQaxKUl+3Qhk3d0GNIiUltMIqkuct182qpT4XKc= Subject key identifier: CD:02:F6:84:E0:C6:75:9A:7C:50:5D:5F:E9:7E:13:EB:76:22:90:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD00FB1C98A790AECEF880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80a25e7a-1a21-3f44-9f33-a1f575981051.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.31.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:00:fb:1c:98:a7:90:ae:ce:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=3d698738-70bc-4a2f-87bd-6790704f4fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:0b:ea:4f:2e:10:6a:86:45:65:bf:ea:f5: 39:54:d5:19:bf:28:40:8f:94:6a:57:4a:7c:3e:62: ad:cc:91:b9:48:a7:08:90:4b:6a:50:8a:96:98:d6: 40:2f:ee:79:8d:ba:2d:fc:af:34:33:1e:57:c5:b5: c0:23:9c:88:b8:ce:a4:5d:93:91:6a:95:d3:7b:49: 46:9c:45:ab:64:50:dd:03:3a:c7:31:14:4d:52:e0: 9e:0b:c7:25:2f:68:20:97:cb:58:f6:4e:9c:70:2a: c0:37:a4:ad:b7:7b:a8:f7:a3:6d:46:88:86:39:a9: cc:d4:05:7a:e8:1c:54:af:76:1f:7f:4e:a5:20:ce: 1d:59:4e:c9:ef:fd:46:c4:2c:49:63:2e:c5:35:a6: 86:18:13:88:3d:d3:aa:a2:21:10:2d:c7:4d:5d:1f: f9:f0:7b:ba:08:a8:77:8d:79:c0:92:0a:ca:9b:90: 13:0f:5f:d8:2f:b2:b7:14:b5:12:08:e9:a4:26:ff: 71:b0:91:78:27:4d:64:0a:b8:3d:2d:03:e1:c9:0c: d4:d2:ec:8c:d9:a1:c8:d5:6c:5e:18:f0:f0:da:c2: 6e:7f:4d:b2:57:cc:46:8d:29:b5:42:7f:c7:6c:e2: f2:2a:73:eb:c1:c6:c2:1b:af:db:92:7a:b8:bb:7a: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:02:F6:84:E0:C6:75:9A:7C:50:5D:5F:E9:7E:13:EB:76:22:90:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80a25e7a-1a21-3f44-9f33-a1f575981051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:18:ca:d9:65:13:68:37:46:44:b4:73:61:f8:97:9a:38:2b: 42:d7:b2:4f:91:c7:11:d1:fb:a3:b6:58:22:af:a0:7a:9d:6f: a5:62:d4:5f:8a:af:3b:96:65:00:8d:fc:19:66:ef:d6:25:8b: 84:62:63:17:8a:6e:a0:0f:c8:e8:9a:a1:32:a1:c2:66:d4:e1: 14:25:af:3a:92:a8:71:68:84:58:1d:a5:0c:2e:19:4a:17:b7: 5b:a8:c8:d1:a8:44:7c:37:8c:c0:28:e6:56:88:e7:c7:b1:64: af:b7:e8:31:28:2c:72:93:8a:a5:a0:bf:be:84:04:a1:80:82: ba:78:b5:58:11:af:dc:95:3a:7a:ab:2c:0b:b9:83:05:1b:46: 0e:78:fa:f0:71:b4:e0:67:40:98:44:83:da:fd:97:e5:7b:26: 2f:76:6b:b9:3d:b7:e9:eb:0c:15:ed:e0:d4:f8:49:58:27:91: 0f:6f:1b:fa:3c:1d:bc:1d:eb:f2:52:d2:be:5f:98:3e:27:9c: 60:e1:9f:29:03:5a:c9:d0:3e:d4:68:06:9f:77:43:2a:65:17: f8:02:7d:c8:a8:32:32:27:18:7f:26:96:7e:a6:c5:21:fe:d4: a3:2a:0e:4d:fd:20:b7:16:73:79:20:81:4c:f5:96:6e:24:49: 83:48:3b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQD7HJinkK7O+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk M2Q2OTg3MzgtNzBiYy00YTJmLTg3YmQtNjc5MDcwNGY0ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq8L6k8uEGqGRWW/6vU5VNUZvyhAj5RqV0p8 PmKtzJG5SKcIkEtqUIqWmNZAL+55jbot/K80Mx5XxbXAI5yIuM6kXZORapXTe0lG nEWrZFDdAzrHMRRNUuCeC8clL2ggl8tY9k6ccCrAN6Stt3uo96NtRoiGOanM1AV6 6BxUr3Yff06lIM4dWU7J7/1GxCxJYy7FNaaGGBOIPdOqoiEQLcdNXR/58Hu6CKh3 jXnAkgrKm5ATD1/YL7K3FLUSCOmkJv9xsJF4J01kCrg9LQPhyQzU0uyM2aHI1Wxe GPDw2sJuf02yV8xGjSm1Qn/HbOLyKnPrwcbCG6/bknq4u3pfwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0C9oTgxnWafFBdX+l+E+t2IpAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODBhMjVlN2EtMWEyMS0z ZjQ0LTlmMzMtYTFmNTc1OTgxMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUYytllE2g3RkS0c2H4l5o4K0LXsk+RxxHR+6O2WCKvoHqdb6Vi1F+K rzuWZQCN/Blm79Yli4RiYxeKbqAPyOiaoTKhwmbU4RQlrzqSqHFohFgdpQwuGUoX t1uoyNGoRHw3jMAo5laI58exZK+36DEoLHKTiqWgv76EBKGAgrp4tVgRr9yVOnqr LAu5gwUbRg54+vBxtOBnQJhEg9r9l+V7Ji92a7k9t+nrDBXt4NT4SVgnkQ9vG/o8 Hbwd6/JS0r5fmD4nnGDhnykDWsnQPtRoBp93QyplF/gCfcioMjInGH8mln6mxSH+ 1KMqDk39ILcWc3kggUz1lm4kSYNIO6Y= -----END CERTIFICATE-----Generated at Sat Nov 1 15:27:29 2025 by rpki-client