$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/900d1542-617e-3e39-9db7-edb12d324023.roa File: 900d1542-617e-3e39-9db7-edb12d324023.roa (raw, json) Hash identifier: +3NqsSK80MxWZxFVw2vqCQeA9czUU/AhCR3Dl3lBwFs= Subject key identifier: 9C:56:CA:3E:AF:00:4B:1F:12:FB:21:2E:13:FD:09:8A:4C:E8:53:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B2918133983418C6F780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/900d1542-617e-3e39-9db7-edb12d324023.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.17.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b2:91:81:33:98:34:18:c6:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=d69de18e-925a-4f1f-af08-85d19c28016c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:0e:e8:03:de:94:66:a3:89:27:fb:af:73: cd:a6:e5:0a:ba:55:a0:e4:05:c0:ca:03:de:71:3b: bb:51:0d:61:be:be:f0:c9:c2:be:af:25:a3:04:b6: b1:43:d4:fb:a2:3e:ed:02:c9:72:07:b2:6a:2b:9b: c4:68:9a:8d:9f:d6:1c:fc:9c:da:6b:ac:bd:b9:23: ca:51:86:82:b7:27:ae:39:ad:80:fa:af:bb:ef:3f: ad:c9:23:d7:95:b3:8e:64:82:7e:45:55:0a:5f:80: a5:48:61:5e:b8:44:db:13:6d:96:d4:b5:77:71:fc: bd:2c:b5:87:96:27:72:3b:de:af:68:ad:30:41:81: 35:49:59:40:ea:79:4d:1f:0c:89:5c:16:75:19:1d: 3a:d4:35:7c:02:3d:20:b1:47:04:99:16:b6:4c:61: 64:41:7d:ab:02:1e:c3:d8:52:26:02:93:00:76:34: de:9e:9b:e2:30:83:21:3e:85:aa:6c:5c:c8:52:de: 34:ed:5c:44:32:93:d4:36:12:63:75:3f:20:81:99: e8:fd:bb:99:0b:b4:fd:57:0a:d4:c5:1d:79:61:ee: d6:5c:0d:c1:d5:29:69:0d:02:47:94:db:fe:f3:c2: 6d:a0:3b:5c:c4:d7:e3:b6:ac:5d:4f:67:d5:79:fa: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:CA:3E:AF:00:4B:1F:12:FB:21:2E:13:FD:09:8A:4C:E8:53:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/900d1542-617e-3e39-9db7-edb12d324023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:96:19:7f:69:20:83:38:91:81:d0:a7:81:d4:a8:66:32:81: a6:92:80:3a:48:e4:30:0c:cf:88:67:4e:68:dc:5a:0a:48:23: 33:39:72:d7:48:37:c4:b4:32:55:73:e4:00:b4:5b:f8:42:f1: 57:ac:fa:df:46:6c:d1:76:71:31:f4:67:c1:6e:1b:67:e7:78: 1b:fb:0a:11:e3:d4:35:ec:88:2d:fc:b9:d6:35:c1:fe:33:bf: 3b:16:d6:ff:e7:e7:30:c5:1e:0f:dd:ef:c6:76:aa:d9:d3:2e: 53:e5:34:0a:8b:23:55:88:72:93:34:bc:4f:22:91:f3:40:46: 67:f3:6a:b6:56:57:41:40:12:6a:26:3a:52:8a:8b:67:b4:3c: d6:52:78:e3:e1:29:69:e6:d3:16:56:fd:24:ee:84:ed:8b:87: bc:d8:60:f0:5e:b5:ca:f1:6f:0e:86:b3:5e:a0:a5:2b:82:e2: a0:82:e5:79:27:3a:28:5c:a5:26:d9:53:72:8b:93:f1:c6:65: a8:27:12:6d:66:35:6b:c1:89:bb:95:1f:d1:41:8b:81:9e:e4: ab:95:40:fc:f4:fe:9a:68:2d:b5:ac:5b:4f:3f:17:9b:13:48: 7f:ac:cd:40:f4:06:9a:86:40:a9:b6:aa:53:97:6b:39:8a:7b: b0:6c:bc:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7KRgTOYNBjG94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDY5ZGUxOGUtOTI1YS00ZjFmLWFmMDgtODVkMTljMjgwMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo0O6APelGajiSf7r3PNpuUKulWg5AXAygPe cTu7UQ1hvr7wycK+ryWjBLaxQ9T7oj7tAslyB7JqK5vEaJqNn9Yc/Jzaa6y9uSPK UYaCtyeuOa2A+q+77z+tySPXlbOOZIJ+RVUKX4ClSGFeuETbE22W1LV3cfy9LLWH lidyO96vaK0wQYE1SVlA6nlNHwyJXBZ1GR061DV8Aj0gsUcEmRa2TGFkQX2rAh7D 2FImApMAdjTenpviMIMhPoWqbFzIUt407VxEMpPUNhJjdT8ggZno/buZC7T9VwrU xR15Ye7WXA3B1SlpDQJHlNv+88JtoDtcxNfjtqxdT2fVefoMGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxWyj6vAEsfEvshLhP9CYpM6FN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTAwZDE1NDItNjE3ZS0z ZTM5LTlkYjctZWRiMTJkMzI0MDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWWGX9pIIM4kYHQp4HUqGYygaaSgDpI5DAMz4hnTmjcWgpIIzM5ctdI N8S0MlVz5AC0W/hC8Ves+t9GbNF2cTH0Z8FuG2fneBv7ChHj1DXsiC38udY1wf4z vzsW1v/n5zDFHg/d78Z2qtnTLlPlNAqLI1WIcpM0vE8ikfNARmfzarZWV0FAEmom OlKKi2e0PNZSeOPhKWnm0xZW/STuhO2Lh7zYYPBetcrxbw6Gs16gpSuC4qCC5Xkn OihcpSbZU3KLk/HGZagnEm1mNWvBibuVH9FBi4Ge5KuVQPz0/ppoLbWsW08/F5sT SH+szUD0BpqGQKm2qlOXazmKe7BsvHk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:30 2025 by rpki-client