$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa File: d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa (raw, json) Hash identifier: bWC5uJIk5Tb1Lo5C46ttaOGBN4DB/dC7dmELhxdy1ks= Subject key identifier: 31:E4:09:3F:C0:41:BF:6E:92:3B:C1:10:4C:5A:84:BD:87:22:10:CE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C2182DA635A2F34EC350 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.21.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c2:18:2d:a6:35:a2:f3:4e:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=050af6d7-f57a-49dd-984e-9908f248eba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:80:9b:cb:2a:1d:04:79:66:92:e7:2e:64: 57:31:f4:c2:a6:29:46:41:14:01:ca:a1:8f:03:2a: fe:8c:8b:a2:c2:04:e9:a0:fb:da:b5:78:17:f8:39: 88:dd:6d:74:23:31:c1:1b:dd:c8:6b:ea:71:b3:30: 9a:f4:a5:27:90:c9:ce:e4:0c:4b:80:cd:96:9c:82: 0b:ae:cd:7a:38:5c:12:d0:29:69:7d:81:4c:c9:37: 89:7f:44:08:77:a6:ef:b9:97:05:79:da:ec:8d:fe: 7b:b3:60:78:0f:71:50:c0:b2:80:77:8e:a6:40:f6: e5:d3:ae:a1:67:b1:da:4f:2b:df:42:5a:9f:ab:4d: 65:8e:db:f4:d1:46:d8:b3:a9:e3:21:88:c8:30:79: 4e:d7:41:33:ab:e5:30:ba:88:63:ab:df:bb:69:24: f0:b9:0b:76:2e:3b:b3:18:4a:c8:88:be:dd:fd:bf: cc:bb:82:6a:50:3e:14:22:d0:f0:d0:6e:36:66:24: 43:0f:88:df:27:97:5d:28:ea:90:a9:c7:5b:70:1c: ad:32:0a:bf:5c:f1:6a:3e:ba:cc:07:56:e3:7e:32: 33:ce:7a:c6:ce:c6:44:0b:6e:38:e3:fe:d5:c5:3e: 63:30:cc:8b:64:84:2a:3f:67:6f:72:b2:3f:f8:07: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E4:09:3F:C0:41:BF:6E:92:3B:C1:10:4C:5A:84:BD:87:22:10:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a4:48:9b:ff:e1:ad:47:6a:04:55:79:e1:31:fd:bf:c9:ce: 11:83:e2:06:8f:0f:cb:2c:64:82:5b:1e:35:87:cc:40:0a:e3: 62:aa:ba:00:44:b7:e1:f6:d6:ce:8d:c7:c7:7f:59:70:f4:f6: 08:00:94:9b:d4:ad:63:6e:50:97:b7:b1:0f:a7:a8:16:6b:2e: e9:0b:6a:92:52:21:55:38:a3:c2:59:18:c7:25:1b:22:d1:3b: c6:1a:15:db:f5:79:6d:a7:51:6a:2b:08:21:e3:09:3f:a2:60: 6b:00:e3:a2:cf:ab:1b:92:59:8f:1a:3d:2f:b7:f6:73:9d:fb: 5d:cd:dc:36:2f:84:e3:ed:80:b1:3a:49:c3:68:7c:a2:f6:b8: 4d:56:86:6f:49:ba:9f:d2:8f:c1:9e:57:7d:30:a7:b0:91:0b: 8e:ff:33:27:f7:1d:02:42:af:2f:f6:b8:0e:24:db:81:0f:65: b2:15:f4:e3:57:f6:e7:30:28:63:eb:f1:4e:b7:72:c8:7b:a1: f3:a8:6b:3e:f8:99:05:9d:f9:84:d0:08:4b:fd:b9:3b:7e:22: b5:e5:28:5d:2d:88:4d:19:32:9a:19:5d:90:07:1c:24:08:bd: 1c:fd:49:9a:46:46:ba:78:dd:40:b8:e1:b4:63:74:11:16:18: ac:fe:5b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8IYLaY1ovNOw1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MDUwYWY2ZDctZjU3YS00OWRkLTk4NGUtOTkwOGYyNDhlYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMCAm8sqHQR5ZpLnLmRXMfTCpilGQRQByqGP Ayr+jIuiwgTpoPvatXgX+DmI3W10IzHBG93Ia+pxszCa9KUnkMnO5AxLgM2WnIIL rs16OFwS0ClpfYFMyTeJf0QId6bvuZcFedrsjf57s2B4D3FQwLKAd46mQPbl066h Z7HaTyvfQlqfq01ljtv00UbYs6njIYjIMHlO10Ezq+Uwuohjq9+7aSTwuQt2Ljuz GErIiL7d/b/Mu4JqUD4UItDw0G42ZiRDD4jfJ5ddKOqQqcdbcBytMgq/XPFqPrrM B1bjfjIzznrGzsZEC2444/7VxT5jMMyLZIQqP2dvcrI/+AfwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHkCT/AQb9ukjvBEExahL2HIhDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDBkZTIyYjYtMGNiMS0z N2ZkLWJlNzAtYjJjOTNmZGE3Y2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6kSJv/4a1HagRVeeEx/b/JzhGD4gaPD8ssZIJbHjWHzEAK42KqugBE t+H21s6Nx8d/WXD09ggAlJvUrWNuUJe3sQ+nqBZrLukLapJSIVU4o8JZGMclGyLR O8YaFdv1eW2nUWorCCHjCT+iYGsA46LPqxuSWY8aPS+39nOd+13N3DYvhOPtgLE6 ScNofKL2uE1Whm9Jup/Sj8GeV30wp7CRC47/Myf3HQJCry/2uA4k24EPZbIV9ONX 9ucwKGPr8U63csh7ofOoaz74mQWd+YTQCEv9uTt+IrXlKF0tiE0ZMpoZXZAHHCQI vRz9SZpGRrp43UC44bRjdBEWGKz+Wwk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:44 2025 by rpki-client