$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac03700d-4e97-34f2-a4a7-8cc853b90364.roa File: ac03700d-4e97-34f2-a4a7-8cc853b90364.roa (raw, json) Hash identifier: GSW8SEmJdPp+TlKV0tJedvMMF9k4BAIJ33q012fXckk= Subject key identifier: 67:DB:F1:A0:E2:CA:01:65:B5:72:45:DC:FA:40:00:DC:4E:46:95:18 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C24E68E375280DB9CBC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac03700d-4e97-34f2-a4a7-8cc853b90364.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.22.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c2:4e:68:e3:75:28:0d:b9:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=57b85938-279b-43cf-89d0-d955f31954a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:b7:50:92:f1:d8:97:0b:fb:6c:bb:d5:b9: 95:cb:fd:9f:fc:86:e1:36:46:7f:a8:83:28:9a:ef: a4:77:ac:8b:1c:8f:87:c4:d2:e9:96:f1:13:17:7b: fa:f7:8a:96:f7:7f:4d:2d:22:5b:f1:66:a8:e4:82: 16:16:38:34:8b:ab:bc:01:49:ba:6a:5c:4d:83:95: 6c:85:ce:8c:41:a0:57:ce:96:01:bb:b0:54:4e:43: 38:a9:38:e5:e1:42:e5:83:14:c3:09:1b:b6:3b:7b: 41:35:29:62:8e:65:a8:d4:46:a8:ce:c7:bd:ad:bd: 97:4b:8b:89:78:fc:db:c5:32:f1:7f:2e:99:2d:36: 81:d2:81:4a:07:84:6f:b3:72:5e:77:23:fc:a5:f3: 7c:c9:3e:08:2e:92:95:04:65:67:23:2a:b9:9e:48: fd:d1:05:fa:aa:ba:04:be:53:72:0f:4d:80:5d:54: 9d:ea:d7:4a:f6:f5:64:56:cd:ab:cd:f3:ea:88:85: 68:70:25:d7:73:06:2f:a1:44:f9:3c:0d:fe:28:57: 78:82:b1:3c:54:0a:ca:82:19:ab:82:a1:77:f2:3a: 79:ad:41:58:5a:fa:1f:87:65:ae:05:61:40:b9:d6: a1:6e:92:9f:2b:f2:2a:61:9b:5f:8d:82:54:d0:49: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DB:F1:A0:E2:CA:01:65:B5:72:45:DC:FA:40:00:DC:4E:46:95:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac03700d-4e97-34f2-a4a7-8cc853b90364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e6:fb:10:76:2a:1a:44:07:51:a5:1f:fc:80:c8:e7:95:ed: 04:f4:49:42:32:53:2b:6c:15:fb:2b:22:e7:da:ce:f6:a5:ce: a4:4e:e0:d3:ee:f3:fe:03:0c:f3:a1:3d:78:1b:c7:18:76:47: 35:2f:f8:81:95:ad:e6:11:f8:d2:d7:16:ef:01:6e:df:9e:f6: 2a:36:51:df:23:2c:c6:28:da:4c:a5:95:82:1c:c6:fb:21:17: a0:26:f1:be:72:d3:1a:bc:35:7a:7d:4c:0e:46:3a:4a:16:a3: 40:2e:a7:a5:3d:6d:a4:c0:03:cd:3c:1a:fd:64:e1:f8:e5:c5: 66:35:e0:11:56:47:04:7d:3b:b7:6e:e8:dd:a1:59:1d:43:c5: c2:c5:23:9b:c9:8e:e6:8d:3c:d5:3f:e7:9a:6d:05:ae:10:5c: d8:a8:a4:50:f4:d1:07:52:9d:53:ad:c9:f9:37:25:b4:ee:fc: 61:65:06:cf:87:d4:db:3b:0b:2e:54:3e:dc:07:77:8b:a0:de: a4:0c:47:00:b5:92:ad:6c:46:66:60:24:78:67:12:50:37:27: 75:68:95:a3:e0:29:e4:16:c1:16:e4:b3:aa:8b:1a:2a:11:29: 52:90:35:48:00:f3:fc:66:2c:3c:bd:e5:c3:59:cc:bd:7d:ca: 58:f9:61:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8JOaON1KA25y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NTdiODU5MzgtMjc5Yi00M2NmLTg5ZDAtZDk1NWYzMTk1NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVG3UJLx2JcL+2y71bmVy/2f/IbhNkZ/qIMo mu+kd6yLHI+HxNLplvETF3v694qW939NLSJb8Wao5IIWFjg0i6u8AUm6alxNg5Vs hc6MQaBXzpYBu7BUTkM4qTjl4ULlgxTDCRu2O3tBNSlijmWo1Eaozse9rb2XS4uJ ePzbxTLxfy6ZLTaB0oFKB4Rvs3JedyP8pfN8yT4ILpKVBGVnIyq5nkj90QX6qroE vlNyD02AXVSd6tdK9vVkVs2rzfPqiIVocCXXcwYvoUT5PA3+KFd4grE8VArKghmr gqF38jp5rUFYWvofh2WuBWFAudahbpKfK/IqYZtfjYJU0EkyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfb8aDiygFltXJF3PpAANxORpUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWMwMzcwMGQtNGU5Ny0z NGYyLWE0YTctOGNjODUzYjkwMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvm+xB2KhpEB1GlH/yAyOeV7QT0SUIyUytsFfsrIufazvalzqRO4NPu 8/4DDPOhPXgbxxh2RzUv+IGVreYR+NLXFu8Bbt+e9io2Ud8jLMYo2kyllYIcxvsh F6Am8b5y0xq8NXp9TA5GOkoWo0Aup6U9baTAA808Gv1k4fjlxWY14BFWRwR9O7du 6N2hWR1DxcLFI5vJjuaNPNU/55ptBa4QXNiopFD00QdSnVOtyfk3JbTu/GFlBs+H 1Ns7Cy5UPtwHd4ug3qQMRwC1kq1sRmZgJHhnElA3J3VolaPgKeQWwRbks6qLGioR KVKQNUgA8/xmLDy95cNZzL19ylj5YWY= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:34 2025 by rpki-client