$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa File: aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa (raw, json) Hash identifier: +j098bpcoOlob23jo54lULKr5ruc005ZPJyJOlZRL9E= Subject key identifier: A9:A4:EC:82:B9:3D:25:97:3F:15:C6:0A:D8:26:4E:C3:1C:75:04:7E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B6A1D1CFD8678646B100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.21.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b6:a1:d1:cf:d8:67:86:46:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=74d56ce3-b025-4566-b1c0-90b380d2d6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:ff:8b:53:39:80:a4:1c:f4:4c:a1:0e:c3: 40:2c:70:ac:d9:99:0f:5f:da:65:ec:d3:42:ca:0a: 46:d5:5c:7e:3a:40:9c:f8:55:37:24:28:21:99:c0: 7d:8d:64:ab:bd:63:07:c7:ee:03:6d:64:f4:b4:51: 66:40:3b:d8:2b:05:5a:66:fe:f8:91:6f:ea:b3:48: dd:e6:ce:1f:ac:1d:60:d3:e9:d3:9c:c3:a8:5d:12: 88:bf:de:58:f2:bf:9d:24:e8:47:13:47:9e:b2:dc: f6:10:30:89:94:2b:09:e1:87:ec:26:d5:3d:19:49: 40:cb:72:c4:e2:f3:d9:b2:75:7a:d3:5d:f2:dc:ba: 92:dc:d8:b2:83:28:77:71:f6:f8:88:03:a1:a9:80: ff:c2:7f:f2:c5:c2:2b:ee:58:cc:0d:e7:06:8c:63: a2:4b:68:73:07:7e:df:11:12:24:56:da:59:33:3d: fa:0d:b0:66:b5:da:2f:5e:21:fd:c5:f3:b1:79:f8: d2:d2:2c:26:07:8b:d5:7e:48:12:c8:38:29:a2:ed: 7d:76:01:7f:72:c8:fb:4e:f0:97:03:ab:d0:93:40: 7d:5e:f0:6b:8d:86:e4:4a:0d:91:af:12:ac:2d:bc: 1f:67:27:21:bf:f8:d3:3e:5a:cd:6a:e9:74:ec:f4: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A4:EC:82:B9:3D:25:97:3F:15:C6:0A:D8:26:4E:C3:1C:75:04:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e2:5a:98:31:98:d4:72:bc:b5:87:e8:f8:44:89:94:e1:68: e5:39:32:3d:fb:d7:fb:d6:5b:c8:3b:f5:ac:61:90:c9:05:3f: 88:fc:fe:00:ac:2d:f2:e6:ad:01:91:8d:5f:e1:56:6e:d7:59: 03:d7:95:a7:1e:60:b5:de:e4:e4:bc:b5:37:4e:43:82:e1:b4: d3:83:e2:5a:3f:52:1b:fb:ac:29:c7:b6:ea:17:e8:e0:7a:70: b4:ad:ea:dc:51:b3:f5:8b:47:3f:28:41:e6:c0:90:68:d4:7b: 83:93:f5:f3:53:64:9e:90:a7:db:42:3e:84:00:f5:d8:bf:4d: 18:bf:e9:53:74:2c:02:4b:87:c5:df:e5:7d:99:a8:87:db:58: c7:13:cc:80:04:12:2b:05:90:f9:aa:3a:09:c3:03:28:cc:1e: 99:ae:24:17:52:ef:08:df:d6:60:c3:58:17:57:5c:0d:a7:47: 7f:98:42:c4:47:42:fe:66:1d:f7:6e:a0:72:f0:ac:d5:3d:0d: b4:d0:54:b6:5e:19:3e:3c:17:4a:96:59:8d:ab:79:9c:85:65: 4b:d5:9f:40:12:ca:28:c4:37:6c:c4:ca:62:ba:5d:07:af:99: dd:e5:53:05:a9:ad:74:1b:13:dc:84:48:25:99:39:4d:4e:ae: fe:de:6d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7ah0c/YZ4ZGsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NzRkNTZjZTMtYjAyNS00NTY2LWIxYzAtOTBiMzgwZDJkNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjj/i1M5gKQc9EyhDsNALHCs2ZkPX9pl7NNC ygpG1Vx+OkCc+FU3JCghmcB9jWSrvWMHx+4DbWT0tFFmQDvYKwVaZv74kW/qs0jd 5s4frB1g0+nTnMOoXRKIv95Y8r+dJOhHE0eestz2EDCJlCsJ4YfsJtU9GUlAy3LE 4vPZsnV6013y3LqS3Niygyh3cfb4iAOhqYD/wn/yxcIr7ljMDecGjGOiS2hzB37f ERIkVtpZMz36DbBmtdovXiH9xfOxefjS0iwmB4vVfkgSyDgpou19dgF/csj7TvCX A6vQk0B9XvBrjYbkSg2RrxKsLbwfZychv/jTPlrNaul07PS4bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmk7IK5PSWXPxXGCtgmTsMcdQR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWE2M2Y0YzctYzFhMC0z ZDVmLWIyNGEtNGM4ZjFiOGU4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3iWpgxmNRyvLWH6PhEiZThaOU5Mj371/vWW8g79axhkMkFP4j8/gCs LfLmrQGRjV/hVm7XWQPXlaceYLXe5OS8tTdOQ4LhtNOD4lo/Uhv7rCnHtuoX6OB6 cLSt6txRs/WLRz8oQebAkGjUe4OT9fNTZJ6Qp9tCPoQA9di/TRi/6VN0LAJLh8Xf 5X2ZqIfbWMcTzIAEEisFkPmqOgnDAyjMHpmuJBdS7wjf1mDDWBdXXA2nR3+YQsRH Qv5mHfduoHLwrNU9DbTQVLZeGT48F0qWWY2reZyFZUvVn0ASyijEN2zEymK6XQev md3lUwWprXQbE9yESCWZOU1Orv7ebTc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:36 2025 by rpki-client