$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa File: bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa (raw, json) Hash identifier: 6VrH+pBlswztCjopavikl4L6MZMo/TN3UvkFQw9AMr0= Subject key identifier: 7C:31:22:85:50:19:D1:B0:BA:C7:F9:82:F8:76:86:95:BA:9E:A9:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B1ED418FD2C9F103BD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.16.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b1:ed:41:8f:d2:c9:f1:03:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=440270a3-e9b2-4b6b-a465-ef58bc6520eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:fa:ac:41:fd:71:5b:e7:a8:bc:ef:31:05: ac:5e:29:0c:3b:d1:79:b8:50:7f:12:e6:8c:ba:bc: 9e:60:94:f5:d0:90:68:39:d1:61:ef:c3:0b:c0:c7: df:60:97:1e:b9:3a:67:cf:e5:40:dd:0d:fd:f3:a8: 3e:35:55:85:76:68:1a:09:6f:8e:93:08:5a:cf:95: c6:bb:9b:ea:56:cc:ce:0d:9b:48:19:9f:6f:c3:ce: 34:f8:a9:d1:a1:f4:d0:ae:e6:f1:a9:53:7e:fd:24: fb:33:c6:d7:18:61:7d:1a:69:72:45:0a:3d:18:d5: 52:33:8b:69:29:62:e9:cb:21:83:f2:e9:b8:70:76: 5c:9d:9d:cc:a7:5f:05:da:e8:05:12:da:c3:f2:ad: cb:69:c3:b0:23:bb:c3:90:e2:b5:95:d1:36:c2:b7: 5a:6c:5c:4f:8a:33:7e:e1:08:55:89:10:9b:8d:e3: 80:d9:2f:76:f0:de:e0:4c:73:ad:40:b3:fd:04:22: 7b:c9:16:15:75:f6:dd:f3:42:39:c2:de:c3:5e:a9: f3:3d:2b:83:af:ba:f0:d3:19:d0:70:c9:8c:f9:b4: ea:cf:14:a1:50:8a:d1:4f:e8:a2:54:1e:12:1b:5a: a3:8e:9c:68:46:a4:32:d5:fe:c7:7a:28:4f:bf:ef: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:31:22:85:50:19:D1:B0:BA:C7:F9:82:F8:76:86:95:BA:9E:A9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:36:05:26:8e:cc:e6:df:c7:33:da:72:a0:21:1c:2f:6f:30: 70:f4:e1:cd:51:6d:fb:5b:fb:1a:4d:be:f7:4f:71:f9:18:51: af:81:e1:65:a5:7e:65:71:5d:44:40:bb:29:e7:58:ff:26:25: 3e:40:6e:02:5d:38:d7:30:7f:68:cc:ea:bb:9b:55:31:b6:b7: 23:bd:e3:04:59:b5:1e:0c:51:26:7d:44:56:40:88:ac:08:e4: 6a:3a:15:8a:06:2d:1c:7f:39:7d:05:15:85:c1:4e:f9:69:1a: 19:c7:fc:fe:7e:73:b6:28:5d:05:c3:c6:22:e7:4c:35:bd:0d: 38:07:ca:c9:da:41:9c:f9:3e:41:4a:e6:15:21:a1:aa:4d:98: 25:16:53:eb:6e:8c:54:16:58:ae:cc:5e:17:5f:5a:91:e9:5e: 14:1a:30:7e:2c:42:86:6a:67:70:0f:40:b7:45:41:25:dc:cc: 32:c3:fa:4e:4e:03:92:25:a7:70:5a:df:22:a4:a0:90:83:ba: b6:13:7b:c0:37:7a:44:3a:4e:d1:bc:f5:6f:e3:22:de:f9:eb: 5f:25:02:c1:94:39:61:de:19:4c:d5:07:e0:35:9c:ff:12:42: b2:cb:b7:eb:f6:67:86:d3:7a:62:e7:28:26:e8:d5:f7:1b:f4: e7:40:83:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7HtQY/SyfEDvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NDQwMjcwYTMtZTliMi00YjZiLWE0NjUtZWY1OGJjNjUyMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvj6rEH9cVvnqLzvMQWsXikMO9F5uFB/EuaM uryeYJT10JBoOdFh78MLwMffYJceuTpnz+VA3Q3986g+NVWFdmgaCW+Okwhaz5XG u5vqVszODZtIGZ9vw840+KnRofTQrubxqVN+/ST7M8bXGGF9GmlyRQo9GNVSM4tp KWLpyyGD8um4cHZcnZ3Mp18F2ugFEtrD8q3LacOwI7vDkOK1ldE2wrdabFxPijN+ 4QhViRCbjeOA2S928N7gTHOtQLP9BCJ7yRYVdfbd80I5wt7DXqnzPSuDr7rw0xnQ cMmM+bTqzxShUIrRT+iiVB4SG1qjjpxoRqQy1f7HeihPv+8U6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwxIoVQGdGwusf5gvh2hpW6nqlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmZkZTBkOTktYWFkZi0z MjMxLWI2Y2YtZGY5YzVjNmVkZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ2BSaOzObfxzPacqAhHC9vMHD04c1Rbftb+xpNvvdPcfkYUa+B4WWl fmVxXURAuynnWP8mJT5AbgJdONcwf2jM6rubVTG2tyO94wRZtR4MUSZ9RFZAiKwI 5Go6FYoGLRx/OX0FFYXBTvlpGhnH/P5+c7YoXQXDxiLnTDW9DTgHysnaQZz5PkFK 5hUhoapNmCUWU+tujFQWWK7MXhdfWpHpXhQaMH4sQoZqZ3APQLdFQSXczDLD+k5O A5Ilp3Ba3yKkoJCDurYTe8A3ekQ6TtG89W/jIt75618lAsGUOWHeGUzVB+A1nP8S QrLLt+v2Z4bTemLnKCbo1fcb9OdAg9U= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:42 2025 by rpki-client