$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa File: 811e6a88-0d78-38d1-8165-7cff3dcc8978.roa (raw, json) Hash identifier: psT4SKEHDlZtxuysIv/V8DGZpBmBz8vqa9ZZ6O+NJy4= Subject key identifier: 9A:90:F9:0D:7F:AD:D0:FE:1B:D6:87:62:EB:8E:0E:FC:47:FF:A3:55 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C179E6349A0328882440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.21.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c1:79:e6:34:9a:03:28:88:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=e8c81002-dbfa-4db9-9609-5839948a6cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:44:b0:00:cc:56:28:bc:29:59:8f:04:7d: 68:57:c2:e2:d1:f6:68:95:1b:06:1f:d0:a1:0b:58: b3:47:23:31:7e:64:d1:9f:36:81:30:cb:ab:a7:1b: a4:50:31:57:d4:ff:af:a7:93:49:43:23:3f:cf:d5: 22:5d:18:86:96:87:27:5c:2b:27:0e:f8:da:9d:d6: d6:8e:2c:51:b2:e3:8b:ca:c7:e6:b0:8c:ad:6d:d3: 3f:64:16:50:36:67:8c:a5:33:df:cf:19:13:fe:89: 21:6c:6b:c8:99:38:90:42:26:c0:5a:fa:cd:14:ef: 97:aa:4e:bd:35:b8:94:c0:1b:53:25:ca:46:4e:5a: e3:1e:6d:b2:ec:c9:9c:f0:3d:d3:3b:e9:af:94:9f: 3a:49:4d:17:27:e5:e9:9a:29:3c:b4:4e:e4:90:88: d8:27:77:3c:ff:22:52:06:21:61:68:b2:37:a9:ea: d0:32:fb:c7:ce:fd:12:59:c2:13:f9:67:16:96:8e: 47:55:c9:11:57:b6:04:90:14:3c:2a:38:66:71:ea: 4e:0b:39:57:0e:5d:d5:77:74:ff:cd:7e:97:8b:fb: c7:8c:c8:c7:9a:18:c6:40:f7:b3:8a:e0:05:3b:a9: ed:88:78:5d:47:7f:d1:c5:44:16:4f:c9:4e:af:00: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:90:F9:0D:7F:AD:D0:FE:1B:D6:87:62:EB:8E:0E:FC:47:FF:A3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9a:ff:1f:30:8b:03:f8:25:9b:a8:f4:d4:97:29:7e:c9:2a: d3:ab:16:2d:60:51:3c:58:a8:48:41:f2:db:cb:e4:ad:ca:96: 58:15:1f:92:2d:10:f0:ab:26:a7:57:f6:5a:01:d2:ff:1e:ed: 2a:95:a8:fa:f2:65:e7:dd:09:a9:a1:a1:d2:7f:b8:77:94:23: 7c:22:8b:93:4e:9e:bb:01:b7:7c:d9:cb:fd:8f:eb:c2:98:fd: 8c:26:7e:31:04:41:87:a3:35:37:a8:4a:e5:e4:7e:3c:1d:bd: 90:10:87:c3:39:9a:cf:73:0f:f3:b7:01:37:a4:99:68:b0:9b: d4:94:c2:aa:a7:7f:2d:ad:a6:01:ac:16:22:5c:8a:8b:f9:d9: 9e:d8:ca:da:25:bd:0b:63:ff:28:cc:63:ee:9d:01:7e:05:af: be:8b:46:f7:3f:28:8f:c7:22:bd:50:7c:68:ce:70:a3:b1:a3: 8e:14:49:b2:be:d4:cc:72:ed:52:e3:bc:25:02:70:60:fe:48: 80:01:f1:1b:f2:11:7e:d5:bc:e7:a2:bc:50:d0:48:46:eb:58: 64:93:7e:1f:d0:28:e5:39:b5:56:89:f3:a7:80:47:af:87:ab: be:37:9f:40:4e:87:bc:ac:60:b6:7d:84:57:3b:d9:61:bc:77: 69:e3:d8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8F55jSaAyiIJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZThjODEwMDItZGJmYS00ZGI5LTk2MDktNTgzOTk0OGE2Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaBEsADMVii8KVmPBH1oV8Li0fZolRsGH9Ch C1izRyMxfmTRnzaBMMurpxukUDFX1P+vp5NJQyM/z9UiXRiGlocnXCsnDvjandbW jixRsuOLysfmsIytbdM/ZBZQNmeMpTPfzxkT/okhbGvImTiQQibAWvrNFO+Xqk69 NbiUwBtTJcpGTlrjHm2y7Mmc8D3TO+mvlJ86SU0XJ+Xpmik8tE7kkIjYJ3c8/yJS BiFhaLI3qerQMvvHzv0SWcIT+WcWlo5HVckRV7YEkBQ8KjhmcepOCzlXDl3Vd3T/ zX6Xi/vHjMjHmhjGQPeziuAFO6ntiHhdR3/RxUQWT8lOrwAkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqQ+Q1/rdD+G9aHYuuODvxH/6NVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODExZTZhODgtMGQ3OC0z OGQxLTgxNjUtN2NmZjNkY2M4OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIya/x8wiwP4JZuo9NSXKX7JKtOrFi1gUTxYqEhB8tvL5K3KllgVH5It EPCrJqdX9loB0v8e7SqVqPryZefdCamhodJ/uHeUI3wii5NOnrsBt3zZy/2P68KY /YwmfjEEQYejNTeoSuXkfjwdvZAQh8M5ms9zD/O3ATekmWiwm9SUwqqnfy2tpgGs FiJciov52Z7YytolvQtj/yjMY+6dAX4Fr76LRvc/KI/HIr1QfGjOcKOxo44USbK+ 1Mxy7VLjvCUCcGD+SIAB8RvyEX7VvOeivFDQSEbrWGSTfh/QKOU5tVaJ86eAR6+H q743n0BOh7ysYLZ9hFc72WG8d2nj2Kc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:00 2025 by rpki-client