$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a2064d-7789-3a4e-8c04-364473913f32.roa File: 85a2064d-7789-3a4e-8c04-364473913f32.roa (raw, json) Hash identifier: 58ynJ2qGQ6SyD82zgxR7ziffmQ6SfaZBxAXwREaWzkU= Subject key identifier: 70:17:B2:03:B6:2C:C3:65:50:7F:05:A3:18:EF:33:AF:70:E6:20:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B7A4634A4D9D15A918C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a2064d-7789-3a4e-8c04-364473913f32.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.24.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b7:a4:63:4a:4d:9d:15:a9:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=c01cb1d2-6c0d-4405-9e0a-626a82338786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:52:2e:f4:43:58:38:da:f7:3f:b5:4d:cb: 4b:db:e2:23:6c:ac:a4:68:30:9e:a3:25:c7:a5:b8: b3:4c:dd:a0:f5:10:c8:9c:63:c0:12:94:f7:0e:6e: 18:f6:c3:fe:8d:53:98:41:b9:0d:62:41:75:de:1b: 31:74:69:3d:92:1d:ed:71:79:98:8d:f1:85:10:91: 03:1f:5e:ab:c9:75:60:9c:44:e6:e4:9b:16:db:df: 5c:f5:7a:53:05:b7:70:e7:d6:48:0d:b9:51:b4:40: 38:97:f0:43:b9:7b:07:cd:1f:bf:37:6c:c9:ed:61: d9:cf:0c:aa:18:0c:c1:67:6d:66:14:f7:05:89:48: 89:96:d7:f4:8a:6f:41:4c:f6:b9:1d:22:d8:48:af: 79:8d:22:46:54:4b:e1:39:23:b7:9a:49:ae:66:0a: 64:c9:2a:a0:44:ea:cd:1d:5b:81:20:d6:9e:a9:f3: bd:c0:3a:61:d2:f1:01:37:79:22:99:17:4c:5d:fc: 64:34:03:bb:d8:a8:f8:d8:a9:e9:9a:f8:37:ba:0a: fa:60:47:44:93:f7:22:d8:a1:53:0a:99:da:fe:64: 20:88:7a:74:ba:57:07:e5:b7:3b:8f:7e:44:a5:83: 04:82:4b:99:bd:e5:84:94:7d:e5:5c:2e:72:69:a2: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:17:B2:03:B6:2C:C3:65:50:7F:05:A3:18:EF:33:AF:70:E6:20:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a2064d-7789-3a4e-8c04-364473913f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:1b:1c:e9:4e:38:73:c4:a8:43:99:ca:91:76:06:35:e2:67: b3:23:6a:76:3c:72:00:50:30:85:cc:b2:fb:2f:a7:15:29:c1: 03:e0:7c:57:76:82:f4:7e:75:48:44:82:e8:3f:d4:20:8a:24: c7:c2:03:24:54:c9:2e:35:1b:a4:b4:db:ba:52:37:5a:60:b6: 2c:b6:34:30:f3:cf:24:1d:df:2b:1e:3f:22:78:98:0c:ac:19: 27:cd:1d:c2:d0:71:21:14:93:e8:37:47:2b:51:39:6e:e5:ab: 13:bd:2f:20:44:9b:c6:f0:b1:1d:be:c2:0c:62:34:61:24:0f: 6c:d9:a6:12:0b:e7:07:7d:4c:6a:1b:26:23:23:56:de:7c:8d: 29:58:61:0a:90:c3:ed:eb:42:c5:52:f7:22:a9:d7:b8:09:b9: 70:fe:df:24:84:e0:8d:10:86:68:5e:5b:5a:9c:b3:4f:ef:08: bf:c9:3d:32:6c:9c:c1:e6:cf:f7:ec:62:e3:68:01:d0:e3:de: 04:ae:4d:87:44:9d:e6:6e:0b:de:fb:3b:f8:4d:14:76:82:0d: 08:91:7d:7d:f3:c4:e7:3d:99:cb:e1:d1:42:af:68:4d:4a:84: 95:8f:fc:22:33:40:b1:ce:43:77:d5:74:b2:a2:2b:0f:2e:bb: 8a:a2:95:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7ekY0pNnRWpGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YzAxY2IxZDItNmMwZC00NDA1LTllMGEtNjI2YTgyMzM4Nzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbNSLvRDWDja9z+1TctL2+IjbKykaDCeoyXH pbizTN2g9RDInGPAEpT3Dm4Y9sP+jVOYQbkNYkF13hsxdGk9kh3tcXmYjfGFEJED H16ryXVgnETm5JsW299c9XpTBbdw59ZIDblRtEA4l/BDuXsHzR+/N2zJ7WHZzwyq GAzBZ21mFPcFiUiJltf0im9BTPa5HSLYSK95jSJGVEvhOSO3mkmuZgpkySqgROrN HVuBINaeqfO9wDph0vEBN3kimRdMXfxkNAO72Kj42Knpmvg3ugr6YEdEk/ci2KFT Cpna/mQgiHp0ulcH5bc7j35EpYMEgkuZveWElH3lXC5yaaKmLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAXsgO2LMNlUH8FoxjvM69w5iAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODVhMjA2NGQtNzc4OS0z YTRlLThjMDQtMzY0NDczOTEzZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgbHOlOOHPEqEOZypF2BjXiZ7MjanY8cgBQMIXMsvsvpxUpwQPgfFd2 gvR+dUhEgug/1CCKJMfCAyRUyS41G6S027pSN1pgtiy2NDDzzyQd3ysePyJ4mAys GSfNHcLQcSEUk+g3RytROW7lqxO9LyBEm8bwsR2+wgxiNGEkD2zZphIL5wd9TGob JiMjVt58jSlYYQqQw+3rQsVS9yKp17gJuXD+3ySE4I0QhmheW1qcs0/vCL/JPTJs nMHmz/fsYuNoAdDj3gSuTYdEneZuC977O/hNFHaCDQiRfX3zxOc9mcvh0UKvaE1K hJWP/CIzQLHOQ3fVdLKiKw8uu4qilQo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:40 2025 by rpki-client