$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa File: aabba271-a15d-3720-a297-6d87452eee21.roa (raw, json) Hash identifier: r5MEYkvWjzh4isMHiQBe8m8jsSnTldtg6VYzMzmoqCI= Subject key identifier: 30:BE:B3:5B:05:50:CD:91:32:90:51:CC:40:6B:EB:A2:13:86:6F:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C38D29213E59AFD81C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.25.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c3:8d:29:21:3e:59:af:d8:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=71f9f579-26cc-4d66-80c0-7dccab21e259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:3d:44:ff:46:61:79:7c:57:27:0d:c7:c2: 35:7e:a5:fa:36:fc:69:05:8d:58:69:b9:c0:f0:07: 22:69:66:bf:92:ad:75:78:6b:4b:c9:c5:2d:08:59: c7:95:84:52:54:63:29:44:88:c1:17:23:0a:81:3f: 74:27:29:c1:b1:af:91:23:71:c8:63:89:b4:c8:7a: 0d:99:dd:f3:a1:fc:f6:45:7d:cb:53:88:82:fd:84: 11:19:a8:bb:c7:ab:81:dd:d7:73:8f:14:7d:6f:4b: a2:2f:14:65:cc:80:ae:18:71:0b:8b:b2:49:37:9e: 46:59:da:a9:c2:06:bf:cf:af:b0:7b:37:67:fb:e5: 16:c9:84:7c:e1:ee:22:bb:70:ca:82:63:2a:94:93: 18:64:da:3c:b9:62:e2:2d:bf:c7:84:8c:b9:c2:ca: 71:0c:18:43:5c:41:2b:dd:3e:58:bd:c9:53:ed:e9: f5:ae:d8:3f:b3:b6:0c:db:25:7c:fa:09:33:5e:38: 7d:9c:e9:1e:96:9f:7d:67:5f:30:cd:a9:4e:ce:ba: 95:13:01:fc:2d:cb:56:70:fa:35:30:94:74:2f:35: 03:41:27:f7:10:e1:a3:12:d5:58:19:e1:fc:02:2b: 4d:7e:b5:4f:51:a9:08:fd:d1:82:e0:4d:d5:65:88: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BE:B3:5B:05:50:CD:91:32:90:51:CC:40:6B:EB:A2:13:86:6F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ff:9b:95:fb:20:f1:53:48:c7:f0:c7:48:45:37:2a:e0:03: 16:20:b0:c3:07:8c:dc:32:ac:b3:fd:a0:80:75:67:08:f6:ff: 7f:34:67:65:f7:6b:d6:89:00:75:32:c7:96:7c:fa:35:7d:58: 87:30:30:38:0d:8c:7f:c4:ec:e2:c0:c5:4e:25:a1:f6:ba:f8: 37:65:df:91:3f:53:64:43:ed:f5:c9:1d:bb:63:08:92:0d:67: 8c:ce:22:71:1c:9c:80:8a:ef:11:76:9f:2b:e3:66:fe:8c:90: a4:3d:49:37:c5:be:6e:c4:e5:3b:fd:6e:a6:a0:be:bf:55:90: 0b:a5:33:f1:b4:85:d8:ab:63:49:7b:99:b6:96:c6:27:8f:a6: d9:e5:b4:39:a3:14:c6:3b:4e:ce:a5:f5:60:20:b5:ed:f3:d1: 74:d8:73:80:07:3f:da:e2:f4:1f:d6:b5:32:1f:b5:bc:d8:1f: 3f:b9:ec:35:64:e1:dc:67:e7:60:c7:2e:53:99:31:e1:c5:ee: e1:21:dd:bf:62:75:b5:88:bf:79:14:66:db:28:51:36:65:12: 31:02:98:02:b3:cb:d0:9c:ed:ac:81:11:f5:48:21:f6:93:24: 72:2e:ee:b2:75:53:f8:bc:42:3e:b5:e3:12:af:ea:08:2a:82: 22:2a:e0:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8ONKSE+Wa/YHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NzFmOWY1NzktMjZjYy00ZDY2LTgwYzAtN2RjY2FiMjFlMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju89RP9GYXl8VycNx8I1fqX6NvxpBY1YabnA 8AciaWa/kq11eGtLycUtCFnHlYRSVGMpRIjBFyMKgT90JynBsa+RI3HIY4m0yHoN md3zofz2RX3LU4iC/YQRGai7x6uB3ddzjxR9b0uiLxRlzICuGHELi7JJN55GWdqp wga/z6+wezdn++UWyYR84e4iu3DKgmMqlJMYZNo8uWLiLb/HhIy5wspxDBhDXEEr 3T5YvclT7en1rtg/s7YM2yV8+gkzXjh9nOkelp99Z18wzalOzrqVEwH8LctWcPo1 MJR0LzUDQSf3EOGjEtVYGeH8AitNfrVPUakI/dGC4E3VZYjQCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDC+s1sFUM2RMpBRzEBr66IThm+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFiYmEyNzEtYTE1ZC0z NzIwLWEyOTctNmQ4NzQ1MmVlZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL/m5X7IPFTSMfwx0hFNyrgAxYgsMMHjNwyrLP9oIB1Zwj2/380Z2X3 a9aJAHUyx5Z8+jV9WIcwMDgNjH/E7OLAxU4lofa6+Ddl35E/U2RD7fXJHbtjCJIN Z4zOInEcnICK7xF2nyvjZv6MkKQ9STfFvm7E5Tv9bqagvr9VkAulM/G0hdirY0l7 mbaWxiePptnltDmjFMY7Ts6l9WAgte3z0XTYc4AHP9ri9B/WtTIftbzYHz+57DVk 4dxn52DHLlOZMeHF7uEh3b9idbWIv3kUZtsoUTZlEjECmAKzy9Cc7ayBEfVIIfaT JHIu7rJ1U/i8Qj614xKv6ggqgiIq4LU= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:47 2025 by rpki-client