$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa File: 95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa (raw, json) Hash identifier: O12+IJvVCEldo4fPpzdK9QeHauFs1xydgcU4mNSd2IA= Subject key identifier: D7:04:9E:DD:90:8C:52:62:66:52:EE:20:27:DA:25:F2:39:E2:5A:70 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B8008F10C4B788434100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.25.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b8:00:8f:10:c4:b7:88:43:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=549319ef-ee87-4381-8d07-878c95a73d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:c3:54:8e:46:31:3b:5e:61:01:f1:0b:dc: c7:2f:d3:99:9e:e7:61:c4:3d:22:8e:c2:16:30:ce: 7e:5d:f7:c4:b2:a5:76:2c:b3:25:8e:91:be:75:a2: 7a:26:67:2d:e8:25:15:29:12:f7:55:04:5d:1e:31: e0:04:2e:ab:88:f8:61:91:dd:12:cc:a1:1e:3b:af: 9a:54:23:af:ee:21:ac:ed:37:ab:dd:ee:1a:7a:aa: 85:70:29:39:58:a3:29:db:d9:12:b8:52:45:b4:98: 94:fa:2f:d1:ed:fc:d4:56:06:3f:2c:2b:af:ff:de: 1d:99:60:e6:03:b2:09:37:06:b0:2d:3d:44:73:ec: 59:be:ea:7b:09:72:e4:8b:fb:38:1c:eb:7f:4e:2d: 3d:43:cc:24:34:1b:2b:54:2a:0e:d1:55:de:6f:f7: 8e:13:18:88:50:29:61:1d:e8:04:3f:7c:c2:6f:f1: fc:d6:f8:3c:39:8e:92:92:5a:aa:4d:35:77:a5:9f: 6c:06:3e:fe:3c:80:0a:f5:a3:99:a3:66:fa:02:81: 0e:22:e3:8c:15:ea:18:60:26:b0:e0:31:4c:97:c4: eb:75:34:8b:49:d5:3f:0d:97:6b:e4:31:c4:b0:01: a9:02:90:ea:6b:e8:85:1a:5c:8a:79:36:9a:2f:b1: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:9E:DD:90:8C:52:62:66:52:EE:20:27:DA:25:F2:39:E2:5A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:07:da:de:e3:b4:a7:6e:a4:ed:6c:2b:a5:ae:0e:fa:3e:7b: a3:1d:e6:fa:62:a2:3f:cc:66:21:97:83:91:b0:d1:36:c4:ed: ac:5f:f9:65:b6:15:68:34:af:48:40:ce:22:7a:9e:51:7b:ed: dc:e0:9e:a2:27:d4:ec:e8:26:c9:b9:af:55:a2:48:ee:34:93: 8f:47:54:35:1b:30:13:25:c2:7d:2c:fa:10:dd:03:da:b3:74: ee:29:7b:47:85:5d:18:5c:ec:f0:6f:54:c6:15:c6:fd:e1:b5: 40:7a:05:55:c2:7b:ce:ed:e4:71:62:41:59:44:f9:c1:a8:e9: 7b:db:fb:2e:47:c3:35:af:71:71:f2:6f:aa:4b:e3:c4:80:e8: 8e:da:4c:47:53:72:0e:01:97:4d:59:ae:ef:45:3f:e0:d0:77: fb:c6:64:73:6d:e1:5f:5a:c4:07:66:2a:69:82:90:04:14:db: 27:3c:b4:69:2e:84:3a:a4:b2:83:b3:66:a7:68:38:1a:bc:27: be:b1:25:51:1d:5a:e1:61:62:68:0d:72:8a:87:3b:bd:40:6b: 15:9f:dd:a7:d7:fe:f5:56:e6:2b:27:37:80:b4:b5:aa:f0:bc: cd:e9:82:61:6e:49:b9:aa:79:de:ec:40:58:d3:4f:8a:04:60: 73:92:bb:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7gAjxDEt4hDQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NTQ5MzE5ZWYtZWU4Ny00MzgxLThkMDctODc4Yzk1YTczZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlTDVI5GMTteYQHxC9zHL9OZnudhxD0ijsIW MM5+XffEsqV2LLMljpG+daJ6Jmct6CUVKRL3VQRdHjHgBC6riPhhkd0SzKEeO6+a VCOv7iGs7Ter3e4aeqqFcCk5WKMp29kSuFJFtJiU+i/R7fzUVgY/LCuv/94dmWDm A7IJNwawLT1Ec+xZvup7CXLki/s4HOt/Ti09Q8wkNBsrVCoO0VXeb/eOExiIUClh HegEP3zCb/H81vg8OY6SklqqTTV3pZ9sBj7+PIAK9aOZo2b6AoEOIuOMFeoYYCaw 4DFMl8TrdTSLSdU/DZdr5DHEsAGpApDqa+iFGlyKeTaaL7H1LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcEnt2QjFJiZlLuICfaJfI54lpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTViNGRiMjAtYmYyYi0z N2JhLTk1NWItMTc3MDlhOWRiZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEH2t7jtKdupO1sK6WuDvo+e6Md5vpioj/MZiGXg5Gw0TbE7axf+WW2 FWg0r0hAziJ6nlF77dzgnqIn1OzoJsm5r1WiSO40k49HVDUbMBMlwn0s+hDdA9qz dO4pe0eFXRhc7PBvVMYVxv3htUB6BVXCe87t5HFiQVlE+cGo6Xvb+y5HwzWvcXHy b6pL48SA6I7aTEdTcg4Bl01Zru9FP+DQd/vGZHNt4V9axAdmKmmCkAQU2yc8tGku hDqksoOzZqdoOBq8J76xJVEdWuFhYmgNcoqHO71AaxWf3afX/vVW5isnN4C0tarw vM3pgmFuSbmqed7sQFjTT4oEYHOSu6Q= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:49 2025 by rpki-client