$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa File: a0b3d676-8d81-3776-9084-78bd06aa5966.roa (raw, json) Hash identifier: aORLV9ZQKAa90/xMAgs70YHaooA3Pj87seS7vX+z51c= Subject key identifier: E7:C2:44:62:92:CE:A1:3D:81:5D:E8:B1:30:4B:7D:09:9D:29:4F:79 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B1C636DEC1E9A76E3760 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.16.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b1:c6:36:de:c1:e9:a7:6e:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=459afbb5-5162-4df5-80b5-c6b209c0a701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:6d:b3:66:0b:2f:bc:1f:26:9d:92:92:f2: dd:be:cd:f1:99:ff:78:84:15:f5:6b:0f:46:49:d8: 88:ac:14:2a:d6:07:fe:95:97:58:bc:b6:e9:e0:ff: d3:c0:0a:21:04:c8:9a:ac:35:c6:0e:75:f2:ca:0d: 3c:8f:d3:77:b7:b5:db:00:4c:af:f0:d5:e8:78:a0: aa:60:55:4e:ab:7c:c0:82:ef:1b:fd:3a:10:5f:c3: 84:72:d5:3d:ef:a4:69:b6:0c:54:67:b6:fc:7e:0d: dd:b8:ed:c9:cd:2d:92:b3:65:b4:63:7b:f0:45:7d: 65:f9:d9:3a:77:9a:54:80:ce:bd:72:3d:24:d1:b9: e3:ee:a8:d3:0c:55:f5:05:61:89:55:fa:fb:30:ff: 87:13:9a:88:ae:b1:42:1c:24:dd:98:b1:59:29:d6: 33:3d:1c:a2:cb:2b:0e:bb:5a:2f:4e:2e:e1:b0:58: 13:f1:ad:6f:87:48:9d:84:db:c8:06:5a:f7:dd:41: 7b:e6:73:f2:f1:ca:9b:ed:76:f7:71:af:04:7f:35: 9b:d3:e7:6d:67:1d:ac:d6:45:39:9c:f0:be:ed:26: 0e:3d:59:48:b2:85:af:2f:5d:da:82:d6:9d:36:c6: e7:c2:a2:2a:5a:ca:86:bc:ae:57:f2:fe:b3:9c:88: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:44:62:92:CE:A1:3D:81:5D:E8:B1:30:4B:7D:09:9D:29:4F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:78:dd:3d:28:a3:df:06:50:47:cb:9b:74:ee:4d:5c:66:91: 2e:49:f3:48:cf:34:c1:d8:c2:2d:8a:e9:76:e4:7c:24:ec:6b: f1:ed:d7:5b:f7:99:ca:61:a8:69:ae:b9:0e:ff:5b:26:b9:38: eb:2f:2b:7d:20:fb:7e:3e:63:bd:e2:2e:4c:1b:8e:a6:d5:51: 24:ec:b3:fd:3d:dc:c3:b8:74:cb:46:4b:ad:28:e7:5e:ac:c5: 00:03:d5:fd:28:5e:2a:f8:45:73:24:48:4f:c6:c7:4a:8e:19: 66:69:69:c9:6c:b0:2b:c7:ee:1b:5b:d0:9e:a2:0e:fa:c5:d7: 09:70:b8:96:a7:6a:39:c9:13:78:d9:0f:f6:88:0a:72:8e:59: 64:f8:c1:6d:9b:83:45:23:83:c3:87:36:14:98:f2:b3:1d:f3: c1:7b:69:75:0a:5f:c2:3e:89:42:a2:23:0e:c9:de:db:55:e8: b8:57:9b:ff:26:1b:66:fd:34:66:e9:c4:eb:1d:9d:f5:47:cd: 35:18:49:0a:ad:db:91:a9:21:cc:8d:dd:66:42:cf:7a:99:ce: 23:ce:73:02:05:f1:c6:a6:ca:ec:ae:cd:c9:ce:5d:be:d9:3b: e3:eb:7e:5e:c1:a5:3f:bb:73:49:de:6d:5d:8c:9c:e1:8c:84: 22:04:23:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7HGNt7B6aduN2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NDU5YWZiYjUtNTE2Mi00ZGY1LTgwYjUtYzZiMjA5YzBhNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaFts2YLL7wfJp2SkvLdvs3xmf94hBX1aw9G SdiIrBQq1gf+lZdYvLbp4P/TwAohBMiarDXGDnXyyg08j9N3t7XbAEyv8NXoeKCq YFVOq3zAgu8b/ToQX8OEctU976RptgxUZ7b8fg3duO3JzS2Ss2W0Y3vwRX1l+dk6 d5pUgM69cj0k0bnj7qjTDFX1BWGJVfr7MP+HE5qIrrFCHCTdmLFZKdYzPRyiyysO u1ovTi7hsFgT8a1vh0idhNvIBlr33UF75nPy8cqb7Xb3ca8EfzWb0+dtZx2s1kU5 nPC+7SYOPVlIsoWvL13agtadNsbnwqIqWsqGvK5X8v6znIiS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfCRGKSzqE9gV3osTBLfQmdKU95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTBiM2Q2NzYtOGQ4MS0z Nzc2LTkwODQtNzhiZDA2YWE1OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN43T0oo98GUEfLm3TuTVxmkS5J80jPNMHYwi2K6XbkfCTsa/Ht11v3 mcphqGmuuQ7/Wya5OOsvK30g+34+Y73iLkwbjqbVUSTss/093MO4dMtGS60o516s xQAD1f0oXir4RXMkSE/Gx0qOGWZpaclssCvH7htb0J6iDvrF1wlwuJanajnJE3jZ D/aICnKOWWT4wW2bg0Ujg8OHNhSY8rMd88F7aXUKX8I+iUKiIw7J3ttV6LhXm/8m G2b9NGbpxOsdnfVHzTUYSQqt25GpIcyN3WZCz3qZziPOcwIF8camyuyuzcnOXb7Z O+Prfl7BpT+7c0nebV2MnOGMhCIEIw0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:38 2025 by rpki-client