$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa File: e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa (raw, json) Hash identifier: I4QA8oKhSU1Luf/TMbbY0fZ7pm7uN9bsfj3LcIg4Xe0= Subject key identifier: 32:70:7A:7C:B2:3E:F5:94:88:C8:53:1F:8B:08:85:98:9E:FF:F7:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD10A8D17FD857125B8980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.31.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:10:a8:d1:7f:d8:57:12:5b:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=689c4895-9ba2-48dc-a0cb-e56185999c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:fa:e8:79:4c:75:3b:70:31:6f:ab:46:dc: 18:01:54:28:61:b0:39:a0:f6:d7:92:ac:25:1c:42: f7:69:41:ab:b2:1a:fc:ca:50:ff:d6:00:a3:ec:32: 19:83:f1:62:82:15:aa:5c:a6:aa:93:89:c4:af:4b: 3f:6c:19:94:63:6c:70:d8:cb:23:cc:24:2f:b9:e4: 1c:56:fe:bf:ba:07:c4:fc:df:ae:2f:46:ad:c4:f2: 08:8f:ad:5c:75:47:9e:d9:77:8d:5a:61:c7:19:d1: 54:d9:5c:bc:2c:9e:af:7d:9b:18:f8:de:ca:2c:b5: 32:e8:6f:93:4e:f7:0a:bc:a3:df:12:d9:e8:bc:a1: 2b:ff:e3:1c:c3:51:f2:ae:77:d9:db:4c:92:dc:bd: fa:3f:9b:0a:14:7c:b5:2b:aa:da:8c:09:dc:18:51: 68:59:72:ac:d9:e4:ed:6b:e8:26:7e:76:94:6a:48: d5:63:3b:91:b5:ae:0c:3c:38:94:8c:d1:65:11:6f: 01:f0:ca:8e:c8:a7:31:76:60:81:c9:be:11:2b:14: 65:29:86:fc:12:01:64:1e:3b:57:4b:b7:3a:cc:7a: 02:4e:ed:4f:dd:e1:a3:26:e0:dd:5a:c4:85:1a:bd: 40:84:bb:ed:56:78:5c:89:1b:f2:ca:fc:7e:26:26: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:7A:7C:B2:3E:F5:94:88:C8:53:1F:8B:08:85:98:9E:FF:F7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:30:10:5b:44:3d:2d:ed:cd:3e:f7:53:46:d6:0e:4c:42:e1: 8c:d0:2e:da:ce:6f:f0:59:f5:fa:ff:86:c5:aa:7a:31:9d:9a: d8:e2:f6:ea:fa:45:c0:e1:8b:c5:5b:14:f4:8c:09:ec:15:b6: 17:3b:42:f2:e5:fa:d9:1d:51:e3:d6:59:2f:2c:86:5c:c2:92: 99:79:59:7a:7e:9e:ab:84:fb:46:03:02:90:5c:f8:3d:27:26: ef:72:cb:32:f3:19:75:bd:7f:54:6c:11:44:4f:06:84:a3:01: c7:e8:36:38:2f:af:a7:10:57:86:f6:13:8f:5f:7c:65:95:8c: a4:0d:5d:24:c1:b8:4b:29:96:8a:25:c6:9d:8b:cf:15:ca:dc: 59:1e:5b:16:66:5a:6c:94:23:09:78:5f:4a:7f:ae:ea:76:9e: 89:24:47:20:2a:45:89:7c:fb:d5:b2:0f:f2:ce:ae:53:53:be: 80:dc:53:6e:8f:3d:57:9d:27:a4:45:4f:2c:91:81:8f:6e:2b: 1a:e1:81:34:e3:d4:f3:e9:e6:31:ae:ad:1d:1a:08:0e:0c:dd: aa:2c:37:ee:6e:eb:14:82:59:c5:33:88:e9:e5:d7:03:16:08: de:60:fb:69:a1:5c:32:49:be:5f:74:91:c1:53:c7:1e:d7:0e: 98:0d:5b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRCo0X/YVxJbiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Njg5YzQ4OTUtOWJhMi00OGRjLWEwY2ItZTU2MTg1OTk5YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnov66HlMdTtwMW+rRtwYAVQoYbA5oPbXkqwl HEL3aUGrshr8ylD/1gCj7DIZg/FighWqXKaqk4nEr0s/bBmUY2xw2MsjzCQvueQc Vv6/ugfE/N+uL0atxPIIj61cdUee2XeNWmHHGdFU2Vy8LJ6vfZsY+N7KLLUy6G+T TvcKvKPfEtnovKEr/+Mcw1HyrnfZ20yS3L36P5sKFHy1K6rajAncGFFoWXKs2eTt a+gmfnaUakjVYzuRta4MPDiUjNFlEW8B8MqOyKcxdmCByb4RKxRlKYb8EgFkHjtX S7c6zHoCTu1P3eGjJuDdWsSFGr1AhLvtVnhciRvyyvx+JibbsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJwenyyPvWUiMhTH4sIhZie//dWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTA4Y2I0MTYtZjI3OS0z ZmI0LWJjYzItOWY3NDlkZjAyY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIwEFtEPS3tzT73U0bWDkxC4YzQLtrOb/BZ9fr/hsWqejGdmtji9ur6 RcDhi8VbFPSMCewVthc7QvLl+tkdUePWWS8shlzCkpl5WXp+nquE+0YDApBc+D0n Ju9yyzLzGXW9f1RsEURPBoSjAcfoNjgvr6cQV4b2E49ffGWVjKQNXSTBuEsplool xp2LzxXK3FkeWxZmWmyUIwl4X0p/rup2nokkRyAqRYl8+9WyD/LOrlNTvoDcU26P PVedJ6RFTyyRgY9uKxrhgTTj1PPp5jGurR0aCA4M3aosN+5u6xSCWcUziOnl1wMW CN5g+2mhXDJJvl90kcFTxx7XDpgNW2o= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:12 2025 by rpki-client