$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5350e94-931b-3aff-806e-50b9bf8483f6.roa File: d5350e94-931b-3aff-806e-50b9bf8483f6.roa (raw, json) Hash identifier: Yixyzn6ENdvPOfNfN+JqgLu05aSa0Mg0Qhygu6kJFA4= Subject key identifier: F9:FD:4D:34:64:C8:6B:91:A4:ED:CA:BD:32:9E:D2:31:BE:47:8A:41 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B6F9A20D5E5B7ABC5880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5350e94-931b-3aff-806e-50b9bf8483f6.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.22.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b6:f9:a2:0d:5e:5b:7a:bc:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=2e0965bf-777d-4a70-8491-25dcc30370d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:4a:c0:53:1f:69:36:d4:b2:2c:29:4c:29: 10:30:19:ab:16:dc:70:b6:a8:36:de:6a:ae:b2:ea: 96:b4:b6:23:0b:74:f4:14:18:ce:8b:d4:05:4a:86: f3:4a:a1:2c:fe:63:7a:f8:3b:e8:d5:6d:ad:50:15: 27:ac:d4:50:f1:6e:b1:d5:9b:c4:08:c4:34:56:25: f2:12:02:dd:81:87:bb:71:2c:ec:44:95:ea:e9:e5: 06:79:5c:a5:94:d3:21:ce:e0:60:42:9c:6d:bc:42: 2e:98:83:64:63:d5:3c:21:56:e9:c2:58:d6:9b:e5: a0:d3:b5:0e:dd:d4:4a:44:16:4f:73:e8:d1:fd:f6: 16:07:90:cf:a5:dd:ff:9c:cd:c8:f6:3a:0e:13:04: 37:ad:4a:d4:f2:7d:71:86:f7:f7:1f:c9:2d:ec:e3: f9:ca:60:49:88:d4:f4:d8:84:ca:0a:de:1b:df:e8: 22:f6:d0:34:5e:3d:e4:22:a8:e5:74:b6:dd:33:bf: e4:1b:a6:30:bc:7f:6a:10:cd:57:b2:ff:6a:26:b3: b2:72:a9:c9:70:49:7e:99:75:d7:44:dd:ea:ce:c1: a7:b4:95:0e:fa:18:60:ca:ff:ca:83:43:51:fe:42: d2:f6:35:49:30:23:45:82:c6:bc:6a:92:98:a8:e7: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:4D:34:64:C8:6B:91:A4:ED:CA:BD:32:9E:D2:31:BE:47:8A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5350e94-931b-3aff-806e-50b9bf8483f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:22:a8:35:4f:38:fc:3b:4f:8e:6d:7a:9d:6a:9d:64:aa:4b: 58:d9:8d:0c:a0:1f:fe:ce:a8:18:86:05:b4:a2:10:99:1e:d9: d8:05:e4:6e:08:f6:55:4f:fd:c8:3c:19:23:1c:d9:f0:1c:ff: c0:53:aa:23:5e:d5:38:c1:e2:c2:2a:e0:2b:78:7b:d6:49:f8: 81:1b:79:a3:12:38:91:d2:ba:3e:ee:5d:f9:c6:fb:03:39:aa: 94:d1:90:26:e0:d1:33:c6:7b:31:63:70:26:1b:21:c0:87:ec: 32:36:c6:92:24:f0:1e:96:c9:50:c2:37:08:d0:1d:1d:76:cf: 89:17:77:a2:33:c1:69:15:51:51:5a:60:d3:8d:84:05:90:c6: 91:3d:f3:d5:b4:9f:0b:38:a4:1b:30:bf:bd:e0:26:2d:c8:dd: f1:4b:1d:07:49:dd:f7:d0:a5:91:c2:c8:50:f6:04:84:d2:02: 94:3d:1a:bf:9e:7d:c7:07:8b:28:7f:ac:22:66:7b:bd:56:09: 0e:fd:94:8b:fe:de:49:3a:d1:d1:14:03:7a:32:90:8e:e0:9b: 46:05:21:22:f3:e4:90:ad:ca:39:39:94:de:0b:be:07:62:b2: 19:c5:41:1b:6f:94:4a:79:0f:b6:70:93:0e:ab:95:d1:2c:c6: 04:c1:44:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7b5og1eW3q8WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MmUwOTY1YmYtNzc3ZC00YTcwLTg0OTEtMjVkY2MzMDM3MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYxKwFMfaTbUsiwpTCkQMBmrFtxwtqg23mqu suqWtLYjC3T0FBjOi9QFSobzSqEs/mN6+Dvo1W2tUBUnrNRQ8W6x1ZvECMQ0ViXy EgLdgYe7cSzsRJXq6eUGeVyllNMhzuBgQpxtvEIumINkY9U8IVbpwljWm+Wg07UO 3dRKRBZPc+jR/fYWB5DPpd3/nM3I9joOEwQ3rUrU8n1xhvf3H8kt7OP5ymBJiNT0 2ITKCt4b3+gi9tA0Xj3kIqjldLbdM7/kG6YwvH9qEM1Xsv9qJrOycqnJcEl+mXXX RN3qzsGntJUO+hhgyv/Kg0NR/kLS9jVJMCNFgsa8apKYqOfHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn9TTRkyGuRpO3KvTKe0jG+R4pBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDUzNTBlOTQtOTMxYi0z YWZmLTgwNmUtNTBiOWJmODQ4M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkiqDVPOPw7T45tep1qnWSqS1jZjQygH/7OqBiGBbSiEJke2dgF5G4I 9lVP/cg8GSMc2fAc/8BTqiNe1TjB4sIq4Ct4e9ZJ+IEbeaMSOJHSuj7uXfnG+wM5 qpTRkCbg0TPGezFjcCYbIcCH7DI2xpIk8B6WyVDCNwjQHR12z4kXd6IzwWkVUVFa YNONhAWQxpE989W0nws4pBswv73gJi3I3fFLHQdJ3ffQpZHCyFD2BITSApQ9Gr+e fccHiyh/rCJme71WCQ79lIv+3kk60dEUA3oykI7gm0YFISLz5JCtyjk5lN4Lvgdi shnFQRtvlEp5D7Zwkw6rldEsxgTBRG0= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:55 2025 by rpki-client