$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa File: 8689f776-5658-3cb8-aff0-a810a2806f8b.roa (raw, json) Hash identifier: BxKy+qfSJlYRtJ87y8jxhBDnm6WRynUuaz7ryJ1PJA8= Subject key identifier: 96:3D:D8:42:5A:B3:E7:13:EF:EF:4F:BF:84:74:43:48:FE:CE:F4:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C19EC986195702440080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c1:9e:c9:86:19:57:02:44:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=7d69034d-61d1-4ad4-a980-94d1b531013c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:6d:d4:de:08:73:71:fb:d2:bd:05:c5:6e: 38:7d:21:6f:23:7e:2b:75:a2:bf:28:9e:77:b9:8e: af:f5:64:9e:9f:d3:91:49:da:cb:17:fc:26:e9:f6: ac:9f:aa:42:70:f8:69:ef:47:e9:53:3b:81:83:7d: 27:3d:0c:99:56:8d:42:1c:21:ea:ff:ba:de:26:f3: 10:cf:7b:e2:0d:4a:bf:af:f1:46:e1:ea:91:af:79: 78:43:06:3f:e8:aa:99:cd:c3:17:88:0f:d3:ba:68: 58:80:5c:82:5c:14:2f:22:c0:e0:2e:f5:92:5f:ca: 72:4d:a1:cc:6f:0d:b1:d3:c6:45:98:43:53:4f:7a: 57:2a:6a:ca:14:58:2d:d4:fb:3f:0c:e5:e5:27:f2: ba:48:07:c9:64:70:be:04:93:b0:41:eb:71:ff:da: ad:8f:c1:3a:6b:8e:b4:67:af:2e:a3:4c:e3:06:a1: 3c:c9:f1:51:16:91:bf:e5:f9:07:a1:e2:e2:3a:44: e4:82:4e:6b:60:34:2c:9c:7d:d5:e1:ca:0c:5b:e1: 65:d8:0a:7e:c7:46:27:e2:e3:33:b3:57:ec:1c:a7: e2:0c:a6:1f:20:7f:4b:21:36:9d:6a:2f:c3:7a:b6: fc:a9:1a:88:06:ff:ad:ba:fc:29:79:61:45:69:8c: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:D8:42:5A:B3:E7:13:EF:EF:4F:BF:84:74:43:48:FE:CE:F4:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ce:4a:71:b6:02:fc:34:7b:20:d3:4a:53:40:70:24:e5:b3: 37:8c:be:1c:d3:b8:db:4a:33:4f:a5:60:7f:4d:a3:3e:e0:f5: 1e:41:a5:07:ab:b0:6c:7d:14:c6:32:f1:01:9d:d4:f7:e6:b5: 26:5f:34:e2:ab:1f:25:96:78:b8:e7:71:b3:a9:a0:c2:13:26: 5f:94:95:32:7b:7b:2a:ff:0e:f0:68:78:fd:16:c6:9d:6b:c2: 33:b3:b4:8c:b0:05:a2:0b:f7:2b:1c:2a:02:f3:dd:e5:a5:b3: 8b:07:55:a4:3b:7d:39:d8:6e:04:07:22:da:4e:9e:0a:ee:ca: 5a:f0:40:a8:4d:d1:09:f5:09:5c:00:9e:b8:7f:6f:bd:a7:2e: 93:0f:f1:d8:78:14:d3:5d:1f:10:ab:d7:de:89:d7:aa:a1:09: 68:2b:6b:fd:c7:79:14:e3:0c:cf:db:ed:e9:28:7a:90:a6:c1: be:ea:b3:2a:bd:4d:aa:0a:01:4d:be:7d:ae:fe:ed:9e:2a:ad: 30:c3:25:e8:b0:71:a8:0e:bc:77:16:02:eb:1a:24:87:ec:15: 1a:06:b2:5a:a1:f5:50:7c:df:0e:be:82:09:02:f1:ed:08:94: 2f:42:d1:df:13:43:93:07:2d:50:66:df:ca:f2:85:d7:be:12: 64:d6:99:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8GeyYYZVwJEAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk N2Q2OTAzNGQtNjFkMS00YWQ0LWE5ODAtOTRkMWI1MzEwMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGxt1N4Ic3H70r0FxW44fSFvI34rdaK/KJ53 uY6v9WSen9ORSdrLF/wm6fasn6pCcPhp70fpUzuBg30nPQyZVo1CHCHq/7reJvMQ z3viDUq/r/FG4eqRr3l4QwY/6KqZzcMXiA/TumhYgFyCXBQvIsDgLvWSX8pyTaHM bw2x08ZFmENTT3pXKmrKFFgt1Ps/DOXlJ/K6SAfJZHC+BJOwQetx/9qtj8E6a460 Z68uo0zjBqE8yfFRFpG/5fkHoeLiOkTkgk5rYDQsnH3V4coMW+Fl2Ap+x0Yn4uMz s1fsHKfiDKYfIH9LITadai/Derb8qRqIBv+tuvwpeWFFaYzQkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY92EJas+cT7+9Pv4R0Q0j+zvS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODY4OWY3NzYtNTY1OC0z Y2I4LWFmZjAtYTgxMGEyODA2ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnOSnG2Avw0eyDTSlNAcCTlszeMvhzTuNtKM0+lYH9Noz7g9R5BpQer sGx9FMYy8QGd1PfmtSZfNOKrHyWWeLjncbOpoMITJl+UlTJ7eyr/DvBoeP0Wxp1r wjOztIywBaIL9yscKgLz3eWls4sHVaQ7fTnYbgQHItpOngruylrwQKhN0Qn1CVwA nrh/b72nLpMP8dh4FNNdHxCr196J16qhCWgra/3HeRTjDM/b7ekoepCmwb7qsyq9 TaoKAU2+fa7+7Z4qrTDDJeiwcagOvHcWAusaJIfsFRoGslqh9VB83w6+ggkC8e0I lC9C0d8TQ5MHLVBm38ryhde+EmTWmVI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:56 2025 by rpki-client