$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa File: 9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa (raw, json) Hash identifier: pSsYv1CnS5i1RDvhuCk3sI+o9DeLjnk9V80Mig//C4I= Subject key identifier: 87:22:BF:3E:D8:C6:2C:8E:FF:CE:36:69:E9:F9:30:14:5C:DE:0D:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B69073A38CBD85697340 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.20.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b6:90:73:a3:8c:bd:85:69:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=5530fdf0-cd75-432d-af9b-fbe7bb645ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:23:f4:07:d7:2d:da:be:26:2c:05:ba:58: 11:e3:f6:1c:7a:f8:53:de:66:8e:4f:a5:a9:cc:a9: b9:fc:44:52:2e:04:1a:20:b2:e0:d7:11:9a:30:eb: c3:27:c9:66:d4:43:d6:ad:97:b8:18:10:ed:9e:0e: ba:2d:f6:6f:61:9c:c3:a4:fe:16:c8:aa:dd:b8:e6: 41:f5:1e:3a:3e:2e:b6:fc:73:39:95:c2:6a:dd:54: 7f:e9:ae:2e:25:60:f3:a2:f5:f1:d7:ac:84:f3:fe: 70:26:1b:9b:65:19:ff:22:a4:73:d4:b4:5a:26:d6: 63:0d:8d:a4:a4:28:10:ca:08:8c:07:4e:a9:b7:7e: 81:1c:5a:fc:cc:3f:d5:a2:c3:72:37:c5:3c:0e:1f: 8f:f7:c1:3e:f5:e4:96:aa:01:81:af:58:a8:16:4c: 6d:45:67:03:5e:81:03:ff:61:83:3d:80:b1:f3:3a: 8a:28:94:d1:10:a5:ca:a6:96:3e:73:8c:66:81:bb: ab:78:45:27:fc:17:ef:fe:c3:30:e5:4f:03:d8:4b: 9e:3a:c8:8a:26:77:22:bc:6a:de:45:b8:13:50:e9: cb:e6:ff:29:95:c4:d1:e6:4c:ab:50:f5:64:ee:2e: 6d:73:d4:d4:5a:c5:df:c7:e6:26:42:86:e6:fd:0b: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:22:BF:3E:D8:C6:2C:8E:FF:CE:36:69:E9:F9:30:14:5C:DE:0D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c2:6f:c5:2d:7c:6c:a0:bb:94:f4:e7:98:15:55:14:d9:5f: 07:3d:a1:a4:a0:ee:d8:53:13:ef:2e:80:59:e4:24:c2:3e:4d: af:22:cc:ca:f1:db:54:11:97:a5:ea:4d:bb:b9:44:fc:1a:f1: e5:46:31:ed:ee:ad:cb:11:48:1a:2c:48:41:53:c8:a2:fd:67: 6b:58:42:dd:07:f9:8e:9d:8f:85:1c:2b:ba:b4:b5:a1:3d:a2: ef:5d:d0:7e:23:3d:13:a6:79:cd:88:f0:40:8a:4c:ea:d5:fe: 38:55:1b:d6:de:cc:4d:19:27:f3:f7:8c:c4:e3:d7:b4:bd:62: 14:d4:92:d5:a3:99:d9:25:ec:e5:60:27:e8:bc:4b:3f:89:56: a2:52:cb:5f:a8:d0:bb:54:a9:df:e0:6b:3a:45:c4:1a:b8:3b: 15:a9:1a:f7:4e:81:e2:5e:e5:da:25:57:9a:9a:a5:29:fb:ed: a1:a3:8b:09:35:ec:f4:80:f0:83:08:7c:9e:ed:6f:a4:21:d8: a0:95:aa:51:74:3c:c5:49:ff:ee:92:6f:f0:62:93:1c:d6:d1: 5f:33:22:5d:5f:df:7c:e3:c5:cf:4d:80:ed:0d:22:a0:b0:43: 11:8d:8c:b1:fb:36:d4:4f:89:6d:b2:4f:55:4e:b1:79:7f:85: ec:cc:25:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7aQc6OMvYVpc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NTUzMGZkZjAtY2Q3NS00MzJkLWFmOWItZmJlN2JiNjQ1Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlewj9AfXLdq+JiwFulgR4/YcevhT3maOT6Wp zKm5/ERSLgQaILLg1xGaMOvDJ8lm1EPWrZe4GBDtng66LfZvYZzDpP4WyKrduOZB 9R46Pi62/HM5lcJq3VR/6a4uJWDzovXx16yE8/5wJhubZRn/IqRz1LRaJtZjDY2k pCgQygiMB06pt36BHFr8zD/VosNyN8U8Dh+P98E+9eSWqgGBr1ioFkxtRWcDXoED /2GDPYCx8zqKKJTREKXKppY+c4xmgbureEUn/Bfv/sMw5U8D2EueOsiKJncivGre RbgTUOnL5v8plcTR5kyrUPVk7i5tc9TUWsXfx+YmQobm/QtLFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcivz7YxiyO/842aen5MBRc3g1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMzZDBiNjctMzdkZi0z Zjc5LWE1YWItYWViYTcxMjdkYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTCb8UtfGygu5T055gVVRTZXwc9oaSg7thTE+8ugFnkJMI+Ta8izMrx 21QRl6XqTbu5RPwa8eVGMe3urcsRSBosSEFTyKL9Z2tYQt0H+Y6dj4UcK7q0taE9 ou9d0H4jPROmec2I8ECKTOrV/jhVG9bezE0ZJ/P3jMTj17S9YhTUktWjmdkl7OVg J+i8Sz+JVqJSy1+o0LtUqd/gazpFxBq4OxWpGvdOgeJe5dolV5qapSn77aGjiwk1 7PSA8IMIfJ7tb6Qh2KCVqlF0PMVJ/+6Sb/BikxzW0V8zIl1f33zjxc9NgO0NIqCw QxGNjLH7NtRPiW2yT1VOsXl/hezMJSY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:28 2025 by rpki-client