$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa File: a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa (raw, json) Hash identifier: QQVz38D8uunCTdMRD8/ftk93CE+9WqXeKYXUv/DlXno= Subject key identifier: 49:54:FA:FC:9F:F2:87:9C:89:EF:01:D1:AE:19:18:B2:19:FB:67:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B606C011F4DEF7F88700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.19.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b6:06:c0:11:f4:de:f7:f8:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=5c5cc73f-9459-41b1-81a6-5774f0c02094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:49:60:d2:77:66:2c:59:43:c4:ab:ed:2d: 59:9d:fb:23:14:a7:25:7b:a9:5a:ae:ac:67:62:bc: 40:25:d6:f5:7d:e2:15:ef:c6:57:ea:b9:67:b2:04: 40:53:90:f1:3c:be:9e:8a:7a:3a:50:e0:b7:92:b6: 41:54:d4:5d:8e:5c:23:fb:9f:22:b6:21:c1:63:f6: 01:a7:99:a5:80:f4:35:91:56:ce:02:55:a8:8e:8d: 8b:2a:08:86:1d:78:36:53:9d:4d:58:c1:a6:a0:cb: 7f:d5:b0:b6:1e:6e:e7:f2:0f:55:2f:3f:c6:8d:db: aa:01:aa:cc:d2:92:3a:11:2b:69:bb:11:17:4b:62: f3:d9:15:f4:08:db:58:7e:e7:26:84:bb:27:99:2f: b3:00:2b:02:8d:e0:5d:51:84:bc:5d:c8:4c:e2:60: 8b:ff:53:02:b0:28:13:68:8b:1b:bb:b6:e5:0c:7f: c4:20:77:6b:39:1b:07:5b:3f:93:ac:f5:9a:21:47: 13:d7:bb:9a:9d:f3:9c:7b:f5:cd:54:8d:81:b9:9e: 33:56:49:29:cd:2a:d4:0d:51:64:df:3e:7b:3e:64: 60:41:42:05:7d:b8:7b:f4:47:ab:88:e6:01:d2:61: ce:1e:c6:c7:55:3e:8a:90:93:37:2b:96:4e:b2:45: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:54:FA:FC:9F:F2:87:9C:89:EF:01:D1:AE:19:18:B2:19:FB:67:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:89:54:f9:61:8b:65:e2:28:9e:9b:ad:83:9d:d7:8b:94:63: 7f:c4:59:b0:fd:f9:3d:73:0a:26:4f:0e:e1:ff:26:c5:77:5d: dd:a8:dc:ea:68:a6:a1:f3:ca:09:ea:15:72:a8:81:ca:1d:0e: 0e:eb:8f:ec:e6:ff:df:95:c0:a0:db:0e:96:9d:5e:f3:78:0a: dd:51:06:5d:3e:a7:b1:4b:f4:66:38:34:03:de:8d:37:83:85: 30:18:db:a9:8e:14:d4:8b:a8:1e:51:47:91:61:38:2d:57:32: 0a:26:2b:3b:87:b1:29:49:be:0d:d0:c4:fd:96:43:0c:eb:14: da:4a:4e:ce:bd:88:f1:16:ae:91:3d:16:ce:41:0d:73:f8:90: b1:94:db:33:d0:b0:2e:8d:c8:92:9e:84:39:bc:13:fd:56:96: 72:df:f1:b4:e2:01:a8:7f:cb:56:cf:c6:a2:67:d8:bc:b4:df: 99:c8:86:2f:c4:2a:f7:36:80:39:28:f3:0d:50:ca:9f:10:98: 02:9a:57:cb:51:c8:b3:3b:0b:ea:3b:0c:8b:cf:79:9a:b8:f9: 66:31:e4:1b:01:d0:ba:cc:4d:02:2b:a5:d3:2e:f5:99:55:b3: b8:07:26:e3:97:21:d5:19:fe:8c:3b:e8:96:a9:9d:60:c4:cd: 78:d2:94:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7YGwBH03vf4hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NWM1Y2M3M2YtOTQ1OS00MWIxLTgxYTYtNTc3NGYwYzAyMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6hJYNJ3ZixZQ8Sr7S1ZnfsjFKcle6larqxn YrxAJdb1feIV78ZX6rlnsgRAU5DxPL6eino6UOC3krZBVNRdjlwj+58itiHBY/YB p5mlgPQ1kVbOAlWojo2LKgiGHXg2U51NWMGmoMt/1bC2Hm7n8g9VLz/GjduqAarM 0pI6EStpuxEXS2Lz2RX0CNtYfucmhLsnmS+zACsCjeBdUYS8XchM4mCL/1MCsCgT aIsbu7blDH/EIHdrORsHWz+TrPWaIUcT17uanfOce/XNVI2BuZ4zVkkpzSrUDVFk 3z57PmRgQUIFfbh79EeriOYB0mHOHsbHVT6KkJM3K5ZOskUXOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElU+vyf8oecie8B0a4ZGLIZ+2e2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTdkZWRmNDktOTFmNC0z MTRlLWEwOGMtZGJkYjg2NDVjNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyJVPlhi2XiKJ6brYOd14uUY3/EWbD9+T1zCiZPDuH/JsV3Xd2o3Opo pqHzygnqFXKogcodDg7rj+zm/9+VwKDbDpadXvN4Ct1RBl0+p7FL9GY4NAPejTeD hTAY26mOFNSLqB5RR5FhOC1XMgomKzuHsSlJvg3QxP2WQwzrFNpKTs69iPEWrpE9 Fs5BDXP4kLGU2zPQsC6NyJKehDm8E/1WlnLf8bTiAah/y1bPxqJn2Ly035nIhi/E Kvc2gDko8w1Qyp8QmAKaV8tRyLM7C+o7DIvPeZq4+WYx5BsB0LrMTQIrpdMu9ZlV s7gHJuOXIdUZ/ow76JapnWDEzXjSlMw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:49 2025 by rpki-client