$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa File: af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa (raw, json) Hash identifier: D6sD0sHAm5f6XfcT3mQVmlUek2VtRI8DrRQ230vIjuE= Subject key identifier: 6E:17:07:90:D8:DF:A9:06:67:97:82:B9:8C:9E:44:83:12:A0:F8:EB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C123B1A927E270281280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.20.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c1:23:b1:a9:27:e2:70:28:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=cb7a89dd-1bcd-42be-85aa-1b1a28e75b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:85:08:81:98:86:74:71:ba:a6:01:9c:5f: 67:08:da:32:1d:1f:a5:f9:d6:67:fe:93:57:8c:21: e2:48:18:d1:ec:b9:d2:fc:ec:9a:9b:00:a7:9b:36: 5b:60:74:af:a2:00:39:ed:ae:69:8c:e6:1b:09:3a: 0c:0c:79:30:ea:1a:86:7f:77:b0:11:28:93:66:07: 31:a8:dc:3e:88:61:2e:45:cb:d4:80:82:1c:25:a1: a4:29:6c:30:dc:47:6d:19:f5:32:b2:63:c1:60:3f: ff:18:fb:d3:05:68:25:2a:71:73:33:19:ab:c5:ad: 58:2e:88:0b:25:72:bb:c9:54:ad:58:eb:82:fe:1f: 3a:92:44:a0:40:be:a4:1f:3a:ce:97:c9:e7:85:71: fd:29:17:b4:fd:3f:19:3e:a2:87:07:da:91:33:0c: 20:5c:44:3f:67:de:61:07:5f:61:a3:25:9e:83:cd: 25:c4:7c:23:c1:96:b3:a2:93:8a:97:25:c4:2a:2c: 75:53:9a:82:5b:f5:88:1c:d7:59:01:49:3f:03:c1: 8b:7d:40:e5:a0:6b:5a:39:97:57:72:d4:a7:f2:1a: 5d:e9:29:e0:65:f1:58:f1:c0:1f:d5:dd:8d:ab:4b: ba:03:26:08:96:39:a7:ff:22:44:0c:3a:dc:cb:08: 3f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:07:90:D8:DF:A9:06:67:97:82:B9:8C:9E:44:83:12:A0:F8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:14:d5:d3:96:55:68:0c:c7:96:25:f8:ce:13:ae:9f:64:df: 5e:3f:dc:dc:4c:a3:5c:1a:ba:52:58:48:b5:05:45:64:48:52: 25:23:c7:42:6e:4e:b7:6a:f2:a3:73:ca:9c:25:97:82:23:f7: 35:02:77:c4:25:46:3c:fd:ef:db:9f:43:43:fd:48:64:91:ab: d8:78:cb:f1:2a:43:bd:9f:b6:30:5e:59:7d:0c:ac:2c:a5:62: ce:11:eb:0c:5d:97:bc:18:de:04:39:8b:1b:71:b8:1f:bb:50: e2:99:3e:09:c1:48:02:e7:45:fc:c9:2a:05:e6:9c:ef:31:49: 9f:ba:a7:5e:f1:96:26:2b:7e:98:02:70:80:5b:21:9a:93:7f: e2:d2:cf:f7:09:78:1a:be:cb:8b:8e:7d:a2:84:1e:cb:fb:b9: 39:9b:0f:7d:55:58:d9:b8:77:7b:63:54:ee:83:ca:3d:d9:f9: 4f:f9:3f:79:ee:e5:80:3e:d4:50:0b:bf:9f:3f:0b:9a:f4:1c: 6a:3e:61:75:8a:2c:88:58:8d:52:27:59:a8:2a:d1:a5:06:82: c4:ff:43:6f:66:5c:bb:10:85:6e:19:de:6a:14:3a:d0:cd:64: a8:42:77:1c:27:9a:58:34:01:18:20:90:c5:fb:a9:59:51:95: 14:54:53:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8Ejsakn4nAoEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk Y2I3YTg5ZGQtMWJjZC00MmJlLTg1YWEtMWIxYTI4ZTc1YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPyFCIGYhnRxuqYBnF9nCNoyHR+l+dZn/pNX jCHiSBjR7LnS/OyamwCnmzZbYHSvogA57a5pjOYbCToMDHkw6hqGf3ewESiTZgcx qNw+iGEuRcvUgIIcJaGkKWww3EdtGfUysmPBYD//GPvTBWglKnFzMxmrxa1YLogL JXK7yVStWOuC/h86kkSgQL6kHzrOl8nnhXH9KRe0/T8ZPqKHB9qRMwwgXEQ/Z95h B19hoyWeg80lxHwjwZazopOKlyXEKix1U5qCW/WIHNdZAUk/A8GLfUDloGtaOZdX ctSn8hpd6SngZfFY8cAf1d2Nq0u6AyYIljmn/yJEDDrcywg/QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4XB5DY36kGZ5eCuYyeRIMSoPjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWY3Yjg1MmItOWY0NS0z MTA4LWJjYjQtYzQ3YzlmMmUzZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsU1dOWVWgMx5Yl+M4Trp9k314/3NxMo1waulJYSLUFRWRIUiUjx0Ju Trdq8qNzypwll4Ij9zUCd8QlRjz979ufQ0P9SGSRq9h4y/EqQ72ftjBeWX0MrCyl Ys4R6wxdl7wY3gQ5ixtxuB+7UOKZPgnBSALnRfzJKgXmnO8xSZ+6p17xliYrfpgC cIBbIZqTf+LSz/cJeBq+y4uOfaKEHsv7uTmbD31VWNm4d3tjVO6Dyj3Z+U/5P3nu 5YA+1FALv58/C5r0HGo+YXWKLIhYjVInWagq0aUGgsT/Q29mXLsQhW4Z3moUOtDN ZKhCdxwnmlg0ARggkMX7qVlRlRRUU+I= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:32 2025 by rpki-client