$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa File: cdff553a-7cbe-3262-a645-67dfb5f6f569.roa (raw, json) Hash identifier: pJXYUU0sP9Nkyo9+r5xh5YBw9C3pLaDooICMzSh0AFw= Subject key identifier: 57:DD:30:9F:2D:CB:95:B5:0B:77:52:19:27:61:2A:2C:A8:73:2A:A3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BD994FCC7F2CA30B6700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bd:99:4f:cc:7f:2c:a3:0b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=e3875637-29c6-487e-ae84-fccda15e31f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:7b:ea:72:d8:4f:0c:bc:c5:13:e7:b0:a6: 63:0e:e2:20:35:a3:ef:c0:97:fa:da:08:d3:cd:f5: 70:60:0b:a3:8b:7d:57:75:e0:21:10:52:6e:d2:f1: 29:15:20:4c:f9:15:6e:fd:7d:0d:89:1f:87:2b:9d: 05:c7:b9:00:b0:36:af:11:74:4c:e9:0a:d2:d8:2a: 81:37:0c:bc:33:aa:4c:f4:20:39:19:c6:7e:45:4b: 4a:b6:21:5f:fd:ad:70:fa:af:b4:c8:82:8a:a2:68: 5e:48:f3:6f:e2:a0:87:90:85:cd:5f:35:89:84:eb: 7f:7f:b0:1d:97:64:41:f6:18:01:5e:5c:dd:1a:c6: 61:da:0c:42:27:c2:dc:68:79:b7:d9:a8:6a:f5:71: fe:27:06:c9:e7:da:14:91:64:64:2b:79:de:94:73: cd:a2:84:01:d2:23:b8:82:0b:8e:b6:1c:85:16:ee: aa:ec:da:29:76:15:b9:5c:4a:a5:f7:ee:40:86:b5: ae:70:53:08:e6:48:7c:8d:0b:56:d3:9d:5f:30:4e: e7:ee:72:13:b0:09:1b:45:da:19:0d:5e:50:67:3a: 79:4a:06:1a:35:46:6b:70:1f:21:fb:5a:bc:7c:68: 8a:8b:ba:5d:94:44:8e:b3:9e:a3:a8:8d:bc:76:c5: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:30:9F:2D:CB:95:B5:0B:77:52:19:27:61:2A:2C:A8:73:2A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:91:8e:38:2b:90:49:62:78:e7:5b:60:46:61:10:b2:4c:3f: 7a:d3:f2:da:a3:eb:b5:8a:a6:f9:77:9e:64:a1:36:f7:31:5d: 5e:5b:c2:49:64:db:e2:0c:02:85:8c:7f:98:5a:23:06:d2:46: 56:7a:3e:dd:af:1e:15:b0:60:69:20:21:ca:20:83:09:d8:02: 1c:43:90:3b:c1:31:c4:4c:ec:ef:cc:88:53:1b:83:94:0c:01: 6d:65:a8:03:2e:bb:89:06:3f:4c:2f:0e:c1:53:32:86:ec:af: c9:3b:cb:59:1f:41:f8:4c:3d:ea:13:79:23:15:6a:a8:47:12: 46:a4:3f:2c:81:23:30:08:c1:b0:ba:f2:e7:36:a6:64:92:66: c8:a6:dd:7e:f9:a8:1d:75:a9:00:67:55:ac:ef:a8:85:d7:0d: 10:6f:e3:ff:d2:30:d4:81:6e:45:58:97:9d:62:f6:87:0c:3e: ca:be:06:6d:ac:c0:9d:8a:e0:4f:05:5d:08:8f:4c:26:5b:27: 67:8e:95:c5:24:7d:12:ee:ee:c4:ae:04:d3:86:e2:50:a0:68: 59:64:bb:de:94:d5:4d:7c:eb:be:4b:36:1c:f4:70:c5:4f:98: 14:3e:9b:78:2f:e7:4b:e3:c0:40:ea:03:4e:a1:82:28:82:19: 65:f5:e0:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ72ZT8x/LKMLZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZTM4NzU2MzctMjljNi00ODdlLWFlODQtZmNjZGExNWUzMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkd76nLYTwy8xRPnsKZjDuIgNaPvwJf62gjT zfVwYAuji31XdeAhEFJu0vEpFSBM+RVu/X0NiR+HK50Fx7kAsDavEXRM6QrS2CqB Nwy8M6pM9CA5GcZ+RUtKtiFf/a1w+q+0yIKKomheSPNv4qCHkIXNXzWJhOt/f7Ad l2RB9hgBXlzdGsZh2gxCJ8LcaHm32ahq9XH+JwbJ59oUkWRkK3nelHPNooQB0iO4 gguOthyFFu6q7NopdhW5XEql9+5AhrWucFMI5kh8jQtW051fME7n7nITsAkbRdoZ DV5QZzp5SgYaNUZrcB8h+1q8fGiKi7pdlESOs56jqI28dsWobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfdMJ8ty5W1C3dSGSdhKiyocyqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2RmZjU1M2EtN2NiZS0z MjYyLWE2NDUtNjdkZmI1ZjZmNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGRjjgrkElieOdbYEZhELJMP3rT8tqj67WKpvl3nmShNvcxXV5bwklk 2+IMAoWMf5haIwbSRlZ6Pt2vHhWwYGkgIcoggwnYAhxDkDvBMcRM7O/MiFMbg5QM AW1lqAMuu4kGP0wvDsFTMobsr8k7y1kfQfhMPeoTeSMVaqhHEkakPyyBIzAIwbC6 8uc2pmSSZsim3X75qB11qQBnVazvqIXXDRBv4//SMNSBbkVYl51i9ocMPsq+Bm2s wJ2K4E8FXQiPTCZbJ2eOlcUkfRLu7sSuBNOG4lCgaFlku96U1U18675LNhz0cMVP mBQ+m3gv50vjwEDqA06hgiiCGWX14DY= -----END CERTIFICATE-----Generated at Sun Nov 2 04:25:49 2025 by rpki-client