$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa File: 8be1effc-cfa7-3b8d-a081-510cb1054720.roa (raw, json) Hash identifier: sfN1acdtgBPBGncHNKUZuu+Zy3I2T+z6GR2bfVNMfs4= Subject key identifier: 8A:96:52:A1:4F:2E:01:98:19:60:56:0D:9F:18:A1:B0:4F:97:E3:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B2355BABBF540BBA6B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.16.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b2:35:5b:ab:bf:54:0b:ba:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=10997c8e-d49b-4ce4-aaeb-5f6db8a37473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f6:e7:94:54:f6:e4:a5:0d:8a:57:10:bc:2f: 6c:ec:3b:f3:f8:c8:0a:c7:30:4a:66:ba:0d:75:6c: 72:2f:97:f0:87:ef:5e:93:3e:20:fc:15:84:4f:26: 5a:ed:73:e0:77:01:e0:63:ff:6e:c3:1f:c6:9b:a8: b3:2a:2a:27:c3:db:e3:48:15:a1:eb:33:c5:79:b6: 06:7a:e3:ca:2f:1c:32:ae:3e:34:38:e0:2e:d4:d3: d3:27:fe:19:d7:02:44:85:66:70:77:d1:b5:98:5b: 9a:c7:23:bf:cc:92:96:5a:ce:0b:9b:a7:fa:7f:63: 59:28:d0:ce:c9:ae:f9:e5:4b:2c:7c:51:2f:1a:4f: ac:09:5e:70:9a:78:78:6a:2a:95:cf:eb:d1:aa:f9: 2c:8e:ef:89:79:a6:fd:41:fe:50:85:58:e3:0f:f9: 3a:dc:96:9e:21:27:b0:e7:ba:1e:17:d9:33:8f:7f: bd:d8:7d:a9:28:57:5a:79:04:27:29:06:dc:a6:fd: f9:9a:1c:fd:ce:33:9a:63:2e:6e:33:ad:b2:57:61: b2:37:7f:78:ad:d9:0a:4c:dd:a2:4a:d9:79:ea:28: f4:32:5f:a0:e9:4f:ee:3c:1d:a6:ea:5d:f3:d2:51: b5:87:cc:ad:03:52:5a:26:ae:da:db:67:a0:d9:c0: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:96:52:A1:4F:2E:01:98:19:60:56:0D:9F:18:A1:B0:4F:97:E3:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:49:13:96:67:01:c3:f5:55:80:c5:65:47:74:87:d3:78:90: 66:44:93:fe:ad:1f:62:98:30:f7:7a:3d:1a:a5:a0:d1:37:61: 32:7f:18:60:77:e4:d0:74:a4:f0:e0:e7:07:84:34:f2:ff:2f: ef:b1:8e:9e:fd:77:77:39:90:95:2e:e5:1b:4f:05:fe:a9:32: 70:10:27:5d:75:99:6c:b8:d7:4f:ab:d2:cc:b1:9d:37:30:64: 65:e3:d6:d5:bb:29:b9:70:39:c9:cc:14:92:57:06:2b:05:f5: 13:bc:35:f7:d4:dd:d7:4b:a6:ec:09:15:e2:18:07:02:17:f6: 0a:83:45:1e:60:2e:d9:97:54:71:71:27:10:a1:ea:f2:aa:b2: 08:06:18:c2:1a:65:5e:59:d8:51:65:d0:e3:4d:61:63:2c:bc: e8:07:de:98:9c:53:7f:63:50:e8:7f:64:93:99:9e:a9:08:7a: d9:60:d4:8c:06:6b:ab:4e:d2:4c:68:65:10:77:7b:b0:f5:64: 45:bf:35:9e:e8:0f:5d:3e:91:c4:43:98:e7:73:62:9c:e0:04: eb:26:31:16:ca:c5:cb:a2:ed:b6:5b:5e:3a:9a:0f:49:30:f0: b2:a4:b3:75:e9:e4:8e:20:62:2b:da:ca:74:a9:89:ad:d4:6c: 34:7d:32:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7I1W6u/VAu6a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MTA5OTdjOGUtZDQ5Yi00Y2U0LWFhZWItNWY2ZGI4YTM3NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvbnlFT25KUNilcQvC9s7Dvz+MgKxzBKZroN dWxyL5fwh+9ekz4g/BWETyZa7XPgdwHgY/9uwx/Gm6izKionw9vjSBWh6zPFebYG euPKLxwyrj40OOAu1NPTJ/4Z1wJEhWZwd9G1mFuaxyO/zJKWWs4Lm6f6f2NZKNDO ya755UssfFEvGk+sCV5wmnh4aiqVz+vRqvksju+Jeab9Qf5QhVjjD/k63JaeISew 57oeF9kzj3+92H2pKFdaeQQnKQbcpv35mhz9zjOaYy5uM62yV2GyN394rdkKTN2i Stl56ij0Ml+g6U/uPB2m6l3z0lG1h8ytA1JaJq7a22eg2cC6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqWUqFPLgGYGWBWDZ8YobBPl+PjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGJlMWVmZmMtY2ZhNy0z YjhkLWEwODEtNTEwY2IxMDU0NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5JE5ZnAcP1VYDFZUd0h9N4kGZEk/6tH2KYMPd6PRqloNE3YTJ/GGB3 5NB0pPDg5weENPL/L++xjp79d3c5kJUu5RtPBf6pMnAQJ111mWy410+r0syxnTcw ZGXj1tW7KblwOcnMFJJXBisF9RO8NffU3ddLpuwJFeIYBwIX9gqDRR5gLtmXVHFx JxCh6vKqsggGGMIaZV5Z2FFl0ONNYWMsvOgH3picU39jUOh/ZJOZnqkIetlg1IwG a6tO0kxoZRB3e7D1ZEW/NZ7oD10+kcRDmOdzYpzgBOsmMRbKxcui7bZbXjqaD0kw 8LKks3Xp5I4gYivaynSpia3UbDR9MqY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:15 2025 by rpki-client