$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa File: aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa (raw, json) Hash identifier: 7TwKC1wGIfI5glgnd5Lho3yjFnNfS7fBE6DQ7beQiMc= Subject key identifier: 56:30:0E:7E:93:56:A0:7E:FC:F1:4E:F1:2B:F1:86:9A:4B:05:F1:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C2E6BFA9C1CC6ADD5C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.24.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c2:e6:bf:a9:c1:cc:6a:dd:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=df7a2ff9-c345-4347-8987-9abafd78ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:40:19:a4:ed:f2:3a:90:93:12:2b:9d:e0: fd:47:cc:5e:42:ce:66:64:ea:bb:6c:88:c3:d1:c9: 3b:5d:90:34:f4:b3:d5:f0:ed:d4:d3:81:d7:e9:92: 3c:ba:9a:6f:27:db:0f:7a:4d:96:70:32:6e:f2:ae: 50:c8:5e:8d:3d:10:6d:44:54:fe:03:11:07:f8:be: a1:9e:2e:a7:40:e6:6f:4e:50:a9:63:c7:dd:f7:9e: 2c:5e:ac:dd:36:a5:a2:93:c7:b3:fb:5c:79:d6:09: d1:d5:dc:82:37:9f:8f:87:6a:71:5f:06:09:72:be: d3:bb:52:10:52:9e:3a:fc:dc:00:84:1e:66:b2:bc: 19:9c:22:0e:06:85:8e:f7:af:05:c7:fc:69:93:24: e6:96:62:52:b5:33:7e:ca:b0:fe:b2:ed:8f:b0:6c: bf:43:6e:62:2f:c8:e1:d1:e2:ee:5f:0d:37:60:07: dc:f1:86:c6:6c:cd:e7:ed:a3:54:e6:1c:46:02:93: 88:0e:dc:b5:e8:4a:2d:a2:f0:cd:ad:ac:56:f2:21: ad:5d:1c:59:66:0c:46:9a:d1:72:91:42:c8:ac:3f: 50:63:cd:1b:27:44:e7:c3:95:3b:70:13:ec:79:44: 08:e1:bf:82:14:4a:bc:2a:58:7d:bb:75:84:be:11: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:30:0E:7E:93:56:A0:7E:FC:F1:4E:F1:2B:F1:86:9A:4B:05:F1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ee:f9:aa:0f:01:fb:5e:19:7b:45:12:fc:ae:7b:7b:f0:b5: d3:06:ee:96:09:b8:4c:25:23:e4:a5:00:8c:a0:ff:c9:59:51: b0:5c:ab:f3:db:28:03:cc:01:47:c9:6d:a1:ec:5b:d9:2a:6c: ed:a9:ea:1a:67:7b:30:e1:27:57:c4:e0:d5:78:d4:79:a1:cf: 1f:b7:ec:62:39:ef:35:f2:2f:b4:7a:36:99:4c:fc:bc:20:3b: a2:20:6d:4b:a3:87:56:df:41:a6:ff:6d:1a:7c:d2:f9:74:44: 08:73:0d:21:e8:1d:63:d5:3f:ca:90:94:a4:d0:b4:c6:f3:df: 39:6c:f0:48:6a:55:dc:1d:15:e9:a8:8e:a9:27:1a:68:5a:c6: d8:f9:1d:f9:d1:8f:27:61:77:5d:c1:a4:20:30:26:6e:f9:e7: 89:ae:1d:1b:cb:f9:da:f3:e0:31:a6:ac:f5:b8:7e:49:30:55: 28:30:91:50:7b:31:e8:bf:34:d3:1a:f1:64:27:48:f4:86:05: 0c:3e:7b:64:86:6b:51:03:f8:41:f5:86:22:83:9d:f1:9b:0e: dc:cd:7f:bc:50:f6:af:d9:57:30:a3:a7:5a:45:0a:da:9e:57: 93:81:b5:91:c8:75:75:58:74:df:e2:e2:05:6d:8a:f3:89:cd: b0:6e:b5:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8Lmv6nBzGrdXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZGY3YTJmZjktYzM0NS00MzQ3LTg5ODctOWFiYWZkNzhlZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJdAGaTt8jqQkxIrneD9R8xeQs5mZOq7bIjD 0ck7XZA09LPV8O3U04HX6ZI8uppvJ9sPek2WcDJu8q5QyF6NPRBtRFT+AxEH+L6h ni6nQOZvTlCpY8fd954sXqzdNqWik8ez+1x51gnR1dyCN5+Ph2pxXwYJcr7Tu1IQ Up46/NwAhB5msrwZnCIOBoWO968Fx/xpkyTmlmJStTN+yrD+su2PsGy/Q25iL8jh 0eLuXw03YAfc8YbGbM3n7aNU5hxGApOIDty16EotovDNraxW8iGtXRxZZgxGmtFy kULIrD9QY80bJ0Tnw5U7cBPseUQI4b+CFEq8Klh9u3WEvhENKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYwDn6TVqB+/PFO8SvxhppLBfEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFiYmRhYzAtOWE3Mi0z MzNkLThjNTItYWUzOGExNWEzZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvu+aoPAfteGXtFEvyue3vwtdMG7pYJuEwlI+SlAIyg/8lZUbBcq/Pb KAPMAUfJbaHsW9kqbO2p6hpnezDhJ1fE4NV41Hmhzx+37GI57zXyL7R6NplM/Lwg O6IgbUujh1bfQab/bRp80vl0RAhzDSHoHWPVP8qQlKTQtMbz3zls8EhqVdwdFemo jqknGmhaxtj5HfnRjydhd13BpCAwJm7554muHRvL+drz4DGmrPW4fkkwVSgwkVB7 Mei/NNMa8WQnSPSGBQw+e2SGa1ED+EH1hiKDnfGbDtzNf7xQ9q/ZVzCjp1pFCtqe V5OBtZHIdXVYdN/i4gVtivOJzbButXQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:55 2025 by rpki-client