$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa File: bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa (raw, json) Hash identifier: DB/8dWLi+exBc6RqnwlAqhmJXeDvb3WYnZvvUYKnR98= Subject key identifier: C3:93:A9:A0:B9:DF:74:CC:95:80:30:7B:B1:E5:51:39:52:D7:CF:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B887819659B8E8798E60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.27.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b8:87:81:96:59:b8:e8:79:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=83a1a1fe-4eeb-4ffb-9c4b-d6d9615d7745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:33:37:f0:78:44:56:63:d1:02:1b:2b:f9: c7:f2:7c:36:0a:00:61:69:ec:53:5b:c4:0b:72:eb: 73:ec:6d:e2:c3:0f:e5:97:07:fb:64:84:49:ae:5f: 65:5f:20:4f:0c:f6:aa:95:95:8e:8f:0c:4a:25:b6: d9:4a:15:cc:69:05:ff:d6:61:35:cd:36:ac:3f:67: f7:07:15:33:44:e8:09:70:f5:69:6d:6b:46:69:7f: 5f:ba:b8:cb:e1:56:56:c8:81:54:76:01:6d:fb:63: 0e:b9:53:b7:86:60:21:18:fa:57:09:27:af:84:34: c4:53:62:00:69:a3:ff:a1:dd:df:b5:d6:2b:99:9b: 26:c4:bb:c6:20:bd:b8:48:0c:ce:46:0e:b7:14:85: e3:a1:19:00:b9:10:0f:11:d3:98:ef:a9:ff:62:87: 02:13:ad:1c:66:46:16:d2:4e:42:d3:db:e0:18:b4: 89:26:a8:80:5b:52:d6:78:07:66:ab:70:f3:fc:ab: 61:6e:95:d4:9f:e9:bf:46:1b:02:72:70:46:02:0f: 84:0d:44:82:d6:f8:c5:36:cb:ec:87:61:c7:05:06: 2d:ce:a7:5e:4e:99:91:f9:70:ec:37:6c:c9:99:a8: 6e:23:df:38:40:0f:f3:90:6e:39:ee:6d:21:47:99: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:93:A9:A0:B9:DF:74:CC:95:80:30:7B:B1:E5:51:39:52:D7:CF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4f:12:b5:7d:39:02:88:3a:2b:df:57:fd:e9:b1:a4:b6:60: e2:07:dd:1a:93:5c:5e:77:dc:76:bd:25:79:03:85:a2:ae:ca: 8a:68:75:8d:50:35:38:18:c0:49:ea:9c:55:c5:01:98:0a:56: 2f:9b:52:34:77:0c:aa:a2:d4:c6:1a:23:89:39:73:3e:37:15: 37:d8:00:e6:d1:1d:f4:c2:af:26:e3:1f:e4:75:3f:5e:fc:c0: ef:9b:19:f1:e8:db:df:6d:36:69:e8:a0:a2:7c:c7:6f:e9:94: 70:3c:14:d2:06:f5:0c:b3:b2:00:21:64:4c:59:b8:9c:ea:3b: c2:22:e1:ac:50:a0:f7:b6:b3:a1:28:1e:d7:ad:cf:42:6e:be: d1:a8:e7:48:38:d3:be:0a:18:57:10:b3:99:b6:fa:2d:7f:b7: 29:e2:3b:d2:d5:21:6c:ba:da:81:f6:a2:39:a7:41:0a:00:3d: d0:cc:04:70:20:a6:32:bd:ca:d2:7c:d6:0f:25:56:56:c4:ef: fd:28:e1:80:b3:ed:3d:16:04:4f:c9:ef:f8:e7:0e:a1:b9:56: 6b:02:85:5a:68:21:4f:2b:e8:fd:c7:3c:4d:83:d8:d4:dd:02: b9:ed:66:7a:0d:ee:e8:1f:09:78:c6:83:83:26:db:fa:75:d7: a5:8d:1d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7iHgZZZuOh5jmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ODNhMWExZmUtNGVlYi00ZmZiLTljNGItZDZkOTYxNWQ3NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloEzN/B4RFZj0QIbK/nH8nw2CgBhaexTW8QL cutz7G3iww/llwf7ZIRJrl9lXyBPDPaqlZWOjwxKJbbZShXMaQX/1mE1zTasP2f3 BxUzROgJcPVpbWtGaX9furjL4VZWyIFUdgFt+2MOuVO3hmAhGPpXCSevhDTEU2IA aaP/od3ftdYrmZsmxLvGIL24SAzORg63FIXjoRkAuRAPEdOY76n/YocCE60cZkYW 0k5C09vgGLSJJqiAW1LWeAdmq3Dz/KthbpXUn+m/RhsCcnBGAg+EDUSC1vjFNsvs h2HHBQYtzqdeTpmR+XDsN2zJmahuI984QA/zkG457m0hR5ktkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOTqaC533TMlYAwe7HlUTlS1898MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmJmNmNiYzYtZTc3Yy0z YTkwLWIwYzktYzZlY2M2YjhhZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtPErV9OQKIOivfV/3psaS2YOIH3RqTXF533Ha9JXkDhaKuyopodY1Q NTgYwEnqnFXFAZgKVi+bUjR3DKqi1MYaI4k5cz43FTfYAObRHfTCrybjH+R1P178 wO+bGfHo299tNmnooKJ8x2/plHA8FNIG9QyzsgAhZExZuJzqO8Ii4axQoPe2s6Eo Htetz0JuvtGo50g4074KGFcQs5m2+i1/tyniO9LVIWy62oH2ojmnQQoAPdDMBHAg pjK9ytJ81g8lVlbE7/0o4YCz7T0WBE/J7/jnDqG5VmsChVpoIU8r6P3HPE2D2NTd ArntZnoN7ugfCXjGg4Mm2/p116WNHUM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:36 2025 by rpki-client