$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de6e148b-7970-3561-95d3-cf37c99c5b96.roa File: de6e148b-7970-3561-95d3-cf37c99c5b96.roa (raw, json) Hash identifier: 5vRYIFjtWyIvZ8ofXhCVpSt/mLj5pmHmjcNSsHbWW+Q= Subject key identifier: 3F:BD:DB:56:23:EE:CA:C9:2F:B1:03:62:51:F3:67:53:E9:C2:B7:18 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B462A51978622576F580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de6e148b-7970-3561-95d3-cf37c99c5b96.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.18.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b4:62:a5:19:78:62:25:76:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=d8f67d17-8d93-431a-992f-b3c4593a0ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e6:60:1f:4a:b5:4d:a9:3e:e0:42:d6:4c:2b: 4a:73:87:54:b0:bd:80:0a:21:b5:17:c5:db:e7:b4: 29:5d:d2:48:46:d2:a5:b7:9e:55:4f:a2:48:95:dc: 09:fc:8b:3a:25:eb:87:d3:31:2e:d6:a1:9c:16:9d: e6:04:e5:66:13:7d:af:00:33:a1:f9:20:6c:a9:53: ab:fa:e3:46:05:59:f9:7a:df:a4:64:4c:a6:f5:dc: cf:c1:de:52:9f:4d:59:f3:78:7d:3a:1f:ad:ac:02: f0:a5:f1:0a:07:89:64:25:32:09:92:77:b7:9a:18: a6:e9:32:11:ca:54:12:68:02:d4:95:10:b0:61:ee: af:e8:c2:88:f5:31:3e:b4:9b:e9:89:91:ee:3d:b0: a8:e8:50:6a:76:e1:40:33:86:b1:90:76:59:38:fb: af:ff:5e:8a:97:07:37:5f:00:c6:2c:0d:21:e3:48: 43:d9:2e:0f:c0:25:27:a7:37:6a:a9:4a:a4:52:12: 18:91:85:f7:cb:50:0f:eb:47:08:19:ad:6e:22:e8: 4f:40:05:5e:2f:6d:21:76:1c:b6:20:e6:e9:7b:75: 57:af:c3:18:a7:dc:30:9b:28:0a:16:bb:c9:f3:f5: be:17:71:d0:d1:25:8d:9a:5e:04:d2:f4:d4:57:6a: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BD:DB:56:23:EE:CA:C9:2F:B1:03:62:51:F3:67:53:E9:C2:B7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de6e148b-7970-3561-95d3-cf37c99c5b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f8:fd:4d:e5:40:fb:91:ae:81:9c:7d:49:28:f5:d2:d0:24: 6d:2e:e1:1b:06:94:e3:e4:f7:0a:57:21:94:b9:67:4f:98:19: dc:94:61:2d:15:4b:16:3b:f6:2b:42:21:1c:3d:25:5a:64:28: 5b:1f:86:59:48:81:6f:db:62:1c:00:d9:4b:0a:33:9d:2d:d1: c5:6a:8f:de:a3:67:fc:76:9f:d8:36:69:c0:55:f3:af:6a:ee: da:de:2c:10:fa:0b:d1:95:80:9c:5c:15:eb:5e:08:77:4b:95: 64:d6:b9:d0:68:8f:7a:10:8b:ab:5c:f9:36:41:ea:7b:b3:49: be:06:f0:bb:13:0a:7f:8e:73:89:f8:c5:a1:24:64:2c:8e:9d: dd:5a:d5:36:2b:38:75:b2:3e:12:20:54:85:5a:49:99:75:80: 0e:02:8f:cc:32:81:a1:f0:77:51:6b:34:67:35:05:26:2b:08: 55:21:d3:54:ff:d3:9a:99:b9:4b:c8:2d:76:c5:57:c9:6b:3f: ae:b1:33:3c:ff:80:b7:b5:a2:7f:de:a8:0d:3c:95:bb:33:73: 34:79:07:4c:d8:d4:28:3b:1d:7d:a8:1f:ca:98:49:30:e9:21: 70:a1:f8:e8:aa:f9:84:87:10:91:96:97:cc:c7:8b:5f:3e:93: 85:65:c6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7RipRl4YiV29YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDhmNjdkMTctOGQ5My00MzFhLTk5MmYtYjNjNDU5M2EwZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ZgH0q1Tak+4ELWTCtKc4dUsL2ACiG1F8Xb 57QpXdJIRtKlt55VT6JIldwJ/Is6JeuH0zEu1qGcFp3mBOVmE32vADOh+SBsqVOr +uNGBVn5et+kZEym9dzPwd5Sn01Z83h9Oh+trALwpfEKB4lkJTIJkne3mhim6TIR ylQSaALUlRCwYe6v6MKI9TE+tJvpiZHuPbCo6FBqduFAM4axkHZZOPuv/16Klwc3 XwDGLA0h40hD2S4PwCUnpzdqqUqkUhIYkYX3y1AP60cIGa1uIuhPQAVeL20hdhy2 IObpe3VXr8MYp9wwmygKFrvJ8/W+F3HQ0SWNml4E0vTUV2oi5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+921Yj7srJL7EDYlHzZ1PpwrcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU2ZTE0OGItNzk3MC0z NTYxLTk1ZDMtY2YzN2M5OWM1Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr4/U3lQPuRroGcfUko9dLQJG0u4RsGlOPk9wpXIZS5Z0+YGdyUYS0V SxY79itCIRw9JVpkKFsfhllIgW/bYhwA2UsKM50t0cVqj96jZ/x2n9g2acBV869q 7treLBD6C9GVgJxcFeteCHdLlWTWudBoj3oQi6tc+TZB6nuzSb4G8LsTCn+Oc4n4 xaEkZCyOnd1a1TYrOHWyPhIgVIVaSZl1gA4Cj8wygaHwd1FrNGc1BSYrCFUh01T/ 05qZuUvILXbFV8lrP66xMzz/gLe1on/eqA08lbszczR5B0zY1Cg7HX2oH8qYSTDp IXCh+Oiq+YSHEJGWl8zHi18+k4Vlxps= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:32 2025 by rpki-client