$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a14972c-288e-3bdc-acb3-6bd643c9298f.roa File: 8a14972c-288e-3bdc-acb3-6bd643c9298f.roa (raw, json) Hash identifier: /lqlNi9G9bMMoFbKObCi+bT7Et4jWnyV5czOpUehxxU= Subject key identifier: C4:00:3A:5F:1C:86:80:54:A3:53:9D:FB:34:11:F1:A0:8C:71:FC:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BDDD1703FD0A5BDE3280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a14972c-288e-3bdc-acb3-6bd643c9298f.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bd:dd:17:03:fd:0a:5b:de:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=5d7f168a-3c88-44fe-8fbe-8d1eb19f82d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:51:59:0e:1e:6c:e0:ec:13:a7:cf:91:94: d1:a8:1d:5a:0f:20:ce:b2:33:5e:c9:19:5d:e6:04: 89:b5:b0:03:8f:6e:27:60:b5:66:9d:b1:b3:03:df: 97:77:80:46:c0:c1:ee:8f:d9:42:f7:25:3f:e4:26: e6:ee:82:56:bf:59:44:31:43:7b:99:5e:6b:9d:78: 09:18:bd:f8:19:81:92:30:8e:dc:10:b9:c2:e3:a0: a0:50:e4:30:2d:8f:a4:50:2a:84:7a:55:cc:c7:92: d3:1a:b9:e2:21:e0:46:21:f5:d5:b3:36:50:60:ab: 1a:34:6e:86:5d:c2:be:50:44:bb:4c:0b:b6:2b:51: ee:29:49:50:29:1d:9b:7c:0f:38:72:65:8f:bb:30: c4:ea:99:f0:b2:0b:25:e5:a6:f0:89:af:37:b8:bf: fc:ec:40:b2:e6:f3:78:ac:81:7f:77:4e:6a:c2:dd: c2:41:03:0a:2c:90:26:b7:92:02:c5:90:4e:cd:09: a4:0b:e8:c5:40:e5:2a:35:b2:86:c4:4c:dd:cf:9e: 35:70:5f:f4:f6:1e:4c:c0:40:2e:40:a5:b6:ab:e1: a8:ea:6f:a1:9d:ed:6d:09:db:7d:a8:8f:50:2c:03: b2:4d:64:57:df:df:62:c4:dd:83:7e:99:4e:ff:e5: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:00:3A:5F:1C:86:80:54:A3:53:9D:FB:34:11:F1:A0:8C:71:FC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a14972c-288e-3bdc-acb3-6bd643c9298f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3a:cb:8f:b4:56:29:bb:ac:86:47:f6:70:59:a3:b9:9b:ce: 12:2e:77:06:ee:cf:99:a6:0c:83:92:bf:88:7f:1b:c6:ef:71: f9:4c:88:c6:2d:22:3e:5c:21:55:49:87:a1:16:09:26:b6:6c: 1e:07:06:95:53:c3:92:71:dd:e0:66:4f:37:39:7c:ac:af:32: e4:10:6c:de:7f:43:de:45:ff:03:41:a4:f8:58:9b:33:a2:0d: 1a:4d:5b:ac:74:e2:36:53:a4:b7:ec:fb:1e:c6:69:10:e0:6f: 69:ce:5d:99:6e:e0:20:4a:03:2c:40:3a:62:cc:f1:59:99:55: ee:c0:90:e1:72:84:45:a4:36:e4:a9:4a:1c:df:04:ea:8b:9d: 87:37:0a:e8:50:5d:d8:af:58:04:57:e4:6c:36:90:26:ce:d0: f6:b0:53:ae:2c:1e:a6:b4:2d:ad:c0:ed:85:b1:54:a6:c6:a0: 05:52:d2:4a:d5:32:32:8e:e8:67:8e:09:2a:3a:53:30:4a:b2: d3:3b:c6:f3:80:fe:bc:73:b2:4b:6f:26:81:b8:2e:c5:93:2f: ff:fd:0e:80:fb:79:67:44:cd:38:55:5e:cd:8d:72:4b:70:8a: 36:a6:55:c8:67:1a:da:7f:ce:45:13:cf:a3:1e:c1:cb:b2:3d: 3e:74:bd:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ73dFwP9ClveMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NWQ3ZjE2OGEtM2M4OC00NGZlLThmYmUtOGQxZWIxOWY4MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO1RWQ4ebODsE6fPkZTRqB1aDyDOsjNeyRld 5gSJtbADj24nYLVmnbGzA9+Xd4BGwMHuj9lC9yU/5Cbm7oJWv1lEMUN7mV5rnXgJ GL34GYGSMI7cELnC46CgUOQwLY+kUCqEelXMx5LTGrniIeBGIfXVszZQYKsaNG6G XcK+UES7TAu2K1HuKUlQKR2bfA84cmWPuzDE6pnwsgsl5abwia83uL/87ECy5vN4 rIF/d05qwt3CQQMKLJAmt5ICxZBOzQmkC+jFQOUqNbKGxEzdz541cF/09h5MwEAu QKW2q+Go6m+hne1tCdt9qI9QLAOyTWRX399ixN2DfplO/+VSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQAOl8choBUo1Od+zQR8aCMcfxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGExNDk3MmMtMjg4ZS0z YmRjLWFjYjMtNmJkNjQzYzkyOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs6y4+0Vim7rIZH9nBZo7mbzhIudwbuz5mmDIOSv4h/G8bvcflMiMYt Ij5cIVVJh6EWCSa2bB4HBpVTw5Jx3eBmTzc5fKyvMuQQbN5/Q95F/wNBpPhYmzOi DRpNW6x04jZTpLfs+x7GaRDgb2nOXZlu4CBKAyxAOmLM8VmZVe7AkOFyhEWkNuSp ShzfBOqLnYc3CuhQXdivWARX5Gw2kCbO0PawU64sHqa0La3A7YWxVKbGoAVS0krV MjKO6GeOCSo6UzBKstM7xvOA/rxzsktvJoG4LsWTL//9DoD7eWdEzThVXs2Ncktw ijamVchnGtp/zkUTz6MewcuyPT50vew= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:02 2025 by rpki-client