$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9362ec01-b549-3f9d-a341-c381b5231df7.roa File: 9362ec01-b549-3f9d-a341-c381b5231df7.roa (raw, json) Hash identifier: YeZ5DBxG3Zd+m0hPhUoH0Fo1snfMM41NFcRGao6RdEQ= Subject key identifier: 24:1B:97:0F:DC:CB:59:77:3F:0F:5E:E8:81:2C:B0:13:0C:6F:AC:2F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BDBD15A0228252C1DC20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9362ec01-b549-3f9d-a341-c381b5231df7.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bd:bd:15:a0:22:82:52:c1:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=de304532-18f0-44b5-b91a-1d1900958941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:c2:bf:8c:23:e7:c1:6c:bf:39:9c:06:b5: 8d:d2:d3:30:cd:f7:8a:e4:1f:27:7a:97:57:b0:e8: fd:c4:d0:f6:93:de:79:51:c6:82:15:a9:2f:81:67: 94:b7:59:4b:d1:a7:93:ad:24:50:cf:82:b7:b0:8a: cd:66:1e:8e:6a:70:04:6b:e0:e7:9c:bc:bb:44:35: 32:b5:35:14:72:d6:18:63:b9:58:4c:43:19:fa:33: 6d:65:1c:b4:e9:92:c6:52:3c:da:2e:e6:0b:b5:da: ff:37:83:48:dd:ec:4b:01:df:ba:d2:db:7b:82:a3: be:c1:8d:4c:4f:9c:be:f5:0e:af:12:a2:3b:95:3e: a1:b9:78:0b:18:b8:73:3a:75:16:7c:01:93:bf:68: d5:47:08:40:0e:77:dc:6f:c2:39:b1:6b:bd:77:c0: 58:9c:73:d8:cb:94:7a:d6:3c:67:6d:19:58:09:65: a7:72:20:6a:1c:85:42:e7:4c:47:e3:d8:b0:1a:0c: f9:97:b1:da:c0:c7:57:77:3f:9d:1f:11:ee:61:55: ba:a3:01:a1:fa:a4:aa:c4:11:3a:43:56:21:78:fc: c1:0e:f3:1f:bb:e3:da:99:1a:61:35:69:a4:53:df: fc:8a:33:fb:98:2f:cd:d5:25:6c:ae:60:83:25:6b: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1B:97:0F:DC:CB:59:77:3F:0F:5E:E8:81:2C:B0:13:0C:6F:AC:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9362ec01-b549-3f9d-a341-c381b5231df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:15:26:0c:62:a6:8d:8c:a6:52:bf:59:16:36:10:15:89:33: 44:eb:4b:73:91:87:64:11:13:2a:b1:dd:80:ba:4e:6a:95:96: de:aa:4c:31:ed:36:eb:a2:ed:0f:c2:d4:c7:cb:a0:6c:90:4d: 38:42:9f:87:78:e7:28:01:ea:0b:c8:d3:47:89:f3:3f:a7:5d: ed:13:59:d8:02:80:f6:38:e5:ef:44:e7:f7:ed:a5:63:0e:da: c1:4d:fa:13:91:80:e1:6b:72:6c:9c:49:6e:7a:d0:09:e8:a0: 71:57:b3:20:5f:b0:8e:88:d7:d0:10:24:d7:a4:2b:1f:2e:0a: bb:8a:e7:f6:bb:6f:e7:fc:ee:fe:36:f7:17:e6:45:2c:3e:d4: 71:93:58:de:fd:00:41:94:13:40:c0:79:c5:76:7d:f7:d7:e4: 83:f4:d7:5b:b3:3d:32:a7:c4:c7:be:5f:51:d4:14:ba:77:ef: 86:6b:36:a0:83:07:ab:ac:5e:3a:1e:4d:0c:61:a1:d9:7e:a0: 9c:4c:c5:38:ea:61:38:be:3c:7b:14:e6:64:28:20:30:6a:a2: b2:33:a1:dd:65:18:ca:c9:65:38:14:3c:3a:c1:c9:6a:ae:af: cc:4b:34:fb:4f:88:0e:66:f3:c9:4c:51:d4:00:f0:32:85:e9: f7:a9:c4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ729FaAiglLB3CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZGUzMDQ1MzItMThmMC00NGI1LWI5MWEtMWQxOTAwOTU4OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBvCv4wj58FsvzmcBrWN0tMwzfeK5B8nepdX sOj9xND2k955UcaCFakvgWeUt1lL0aeTrSRQz4K3sIrNZh6OanAEa+DnnLy7RDUy tTUUctYYY7lYTEMZ+jNtZRy06ZLGUjzaLuYLtdr/N4NI3exLAd+60tt7gqO+wY1M T5y+9Q6vEqI7lT6huXgLGLhzOnUWfAGTv2jVRwhADnfcb8I5sWu9d8BYnHPYy5R6 1jxnbRlYCWWnciBqHIVC50xH49iwGgz5l7HawMdXdz+dHxHuYVW6owGh+qSqxBE6 Q1YhePzBDvMfu+PamRphNWmkU9/8ijP7mC/N1SVsrmCDJWteFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQblw/cy1l3Pw9e6IEssBMMb6wvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTM2MmVjMDEtYjU0OS0z ZjlkLWEzNDEtYzM4MWI1MjMxZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQVJgxipo2MplK/WRY2EBWJM0TrS3ORh2QREyqx3YC6TmqVlt6qTDHt Nuui7Q/C1MfLoGyQTThCn4d45ygB6gvI00eJ8z+nXe0TWdgCgPY45e9E5/ftpWMO 2sFN+hORgOFrcmycSW560AnooHFXsyBfsI6I19AQJNekKx8uCruK5/a7b+f87v42 9xfmRSw+1HGTWN79AEGUE0DAecV2fffX5IP011uzPTKnxMe+X1HUFLp374ZrNqCD B6usXjoeTQxhodl+oJxMxTjqYTi+PHsU5mQoIDBqorIzod1lGMrJZTgUPDrByWqu r8xLNPtPiA5m88lMUdQA8DKF6fepxAc= -----END CERTIFICATE-----Generated at Sat Nov 1 15:24:06 2025 by rpki-client