$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a843cab0-eb02-3426-91b6-fafa18ae266d.roa File: a843cab0-eb02-3426-91b6-fafa18ae266d.roa (raw, json) Hash identifier: pTnK5xQOd2k442T9nJn6A34UPNqU6dgxjFTJp5AGG6A= Subject key identifier: 19:3E:CA:A1:33:3A:70:43:FF:CD:E1:E7:A9:3F:CE:E7:33:55:95:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BCEBDDB649EE1BDF1500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a843cab0-eb02-3426-91b6-fafa18ae266d.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.17.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bc:eb:dd:b6:49:ee:1b:df:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=faf61b29-567e-4a9f-bdce-d71186b9d4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:53:0e:24:7d:1e:0f:b7:71:38:44:54:9d: f6:ba:96:56:ac:8d:0e:a2:20:89:2a:fe:49:39:71: 63:4b:cb:7c:ae:bf:73:93:92:ca:12:16:cf:7e:24: 71:69:94:96:f2:25:0b:44:3c:5b:12:24:e4:b3:2a: a3:55:63:2c:12:ad:1f:d1:93:f0:d0:c1:fc:8f:1e: 40:18:a3:ec:41:dc:72:c1:4b:d5:3e:70:0c:f1:d8: d6:2f:4a:7f:ac:57:1e:3b:09:12:9b:0d:f2:e3:72: 89:4a:71:5b:79:47:16:18:a6:67:2d:93:4f:33:1f: 19:76:16:de:61:9c:91:08:7c:71:57:18:3c:c2:0f: ef:14:1a:26:c2:ab:08:41:a8:74:71:25:09:3c:88: c6:d5:a7:c0:5f:ec:ae:2e:f0:4b:3b:9b:a3:f2:e5: e2:87:9f:39:d1:f1:30:e6:17:13:a0:3b:c3:23:37: 01:59:d9:84:59:f9:86:62:74:ab:30:fc:4b:a8:98: c6:7a:8a:e8:49:98:42:50:b9:c8:d1:4a:ac:28:ec: f9:9f:6f:ef:6c:bb:c0:37:11:c1:6e:14:37:a6:fe: f8:ea:28:ab:7d:f6:9c:74:5e:54:5b:0e:99:2e:fc: 73:5d:af:d7:e6:02:71:36:11:76:24:84:fc:b2:4f: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3E:CA:A1:33:3A:70:43:FF:CD:E1:E7:A9:3F:CE:E7:33:55:95:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a843cab0-eb02-3426-91b6-fafa18ae266d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:00:52:eb:31:0c:66:86:26:e3:2a:e9:cf:14:4a:14:8f:53: d9:d4:50:ca:d9:ce:37:8e:1f:72:3f:99:ec:26:8e:f7:cf:70: cc:22:39:57:a1:f1:2d:64:04:48:d6:de:5d:de:cb:3a:f8:25: 00:44:12:11:a3:0b:45:7a:ea:c5:3c:f1:c2:93:f0:46:14:b3: 45:79:49:57:14:a4:98:74:a9:ed:75:da:02:b6:ff:e4:1a:4c: 4f:a0:83:ff:7f:dc:ba:72:a6:1d:6e:38:98:66:8f:4b:e3:b1: 9e:ae:d8:a6:a9:f3:0f:0e:75:ec:ec:7f:ca:3c:0a:f8:65:a7: db:0e:bc:ce:33:ac:08:38:f4:24:81:4e:46:cb:4f:78:ff:81: 8b:f7:5a:bb:09:1f:8d:47:b9:10:60:cb:18:d3:02:d1:e4:c4: ed:b5:e2:70:df:50:7e:97:13:3e:36:02:14:93:84:f1:db:c2: 19:10:fa:d4:9d:e0:17:eb:23:b1:47:ac:2d:9f:76:f1:95:f3: 80:66:f0:ba:f1:06:07:5a:f9:a0:2c:e8:89:46:5c:92:a2:df: b8:5c:e0:8c:3d:31:d2:1a:92:63:09:f2:46:e0:08:cf:e1:79: 3e:bd:d3:9d:81:fe:c8:fc:6b:7e:d4:6c:d0:a3:1f:2f:18:24: 2a:df:d9:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7zr3bZJ7hvfFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZmFmNjFiMjktNTY3ZS00YTlmLWJkY2UtZDcxMTg2YjlkNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoJTDiR9Hg+3cThEVJ32upZWrI0OoiCJKv5J OXFjS8t8rr9zk5LKEhbPfiRxaZSW8iULRDxbEiTksyqjVWMsEq0f0ZPw0MH8jx5A GKPsQdxywUvVPnAM8djWL0p/rFceOwkSmw3y43KJSnFbeUcWGKZnLZNPMx8Zdhbe YZyRCHxxVxg8wg/vFBomwqsIQah0cSUJPIjG1afAX+yuLvBLO5uj8uXih5850fEw 5hcToDvDIzcBWdmEWfmGYnSrMPxLqJjGeoroSZhCULnI0UqsKOz5n2/vbLvANxHB bhQ3pv746iirffacdF5UWw6ZLvxzXa/X5gJxNhF2JIT8sk+OCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk+yqEzOnBD/83h56k/zuczVZVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg0M2NhYjAtZWIwMi0z NDI2LTkxYjYtZmFmYTE4YWUyNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMAUusxDGaGJuMq6c8UShSPU9nUUMrZzjeOH3I/mewmjvfPcMwiOVeh 8S1kBEjW3l3eyzr4JQBEEhGjC0V66sU88cKT8EYUs0V5SVcUpJh0qe112gK2/+Qa TE+gg/9/3Lpyph1uOJhmj0vjsZ6u2Kap8w8Odezsf8o8Cvhlp9sOvM4zrAg49CSB TkbLT3j/gYv3WrsJH41HuRBgyxjTAtHkxO214nDfUH6XEz42AhSThPHbwhkQ+tSd 4BfrI7FHrC2fdvGV84Bm8LrxBgda+aAs6IlGXJKi37hc4Iw9MdIakmMJ8kbgCM/h eT69052B/sj8a37UbNCjHy8YJCrf2YU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:27 2025 by rpki-client