$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4725e95-f28a-3dde-8e46-86b371a12b80.roa File: f4725e95-f28a-3dde-8e46-86b371a12b80.roa (raw, json) Hash identifier: 492qKiqTCQ36W7Lf5wAV/a6zaQxtbDhMYP/q1vLhzzM= Subject key identifier: 2A:56:BF:B1:08:E9:A7:87:8D:51:05:81:22:F3:CF:97:D0:DC:A3:97 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BCA9B26EB374A44FE6A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4725e95-f28a-3dde-8e46-86b371a12b80.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.16.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bc:a9:b2:6e:b3:74:a4:4f:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=e75eeb23-4643-49a4-a8d6-8f36507c8c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f5:1c:e7:d0:8a:62:94:d4:28:42:ff:4a:fb: 99:ad:bd:92:ce:f1:b6:a7:d4:6e:20:99:65:6e:b0: 9c:8d:ee:3a:ed:a2:c3:71:25:9b:e4:a4:d9:5d:dd: 2a:b2:ec:1c:84:f6:2e:f2:c2:bb:69:01:32:04:3d: a5:f9:33:3c:89:ff:ec:02:81:2b:be:bc:9a:2f:89: 01:03:55:f6:10:73:2e:ca:4e:79:a1:7a:40:98:63: 74:16:b9:26:ea:1e:6b:f9:e0:0c:86:f8:00:f3:18: 4a:d8:4d:3d:e4:32:78:9b:02:6d:ae:5c:99:7f:78: 65:28:ae:eb:50:99:2f:c6:6c:e9:bb:17:52:d6:4b: 31:85:c3:0c:5d:1c:1c:65:23:64:77:8b:b9:ca:95: 97:e0:9e:92:0c:b4:c3:ef:df:ec:64:ce:4f:cd:6c: 51:9b:68:34:b6:5e:e8:2a:5e:f0:ac:bc:9c:54:bb: 7c:29:37:47:45:2d:13:98:d0:e2:55:f2:04:e7:7e: 44:5d:a8:87:53:36:e3:63:eb:f8:69:ae:cf:ba:26: 22:3d:16:6f:de:97:d9:e7:0f:95:ff:43:42:da:dc: 8f:e4:90:a1:bc:dc:bc:84:83:3d:db:fa:d6:fa:c6: dc:a4:c5:50:b4:b2:90:77:82:bb:13:30:ee:f6:e8: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:56:BF:B1:08:E9:A7:87:8D:51:05:81:22:F3:CF:97:D0:DC:A3:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4725e95-f28a-3dde-8e46-86b371a12b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:35:de:ba:16:67:6a:24:17:4e:b0:21:2d:4b:b9:e9:a8:25: b7:0e:7a:cb:68:01:8e:9e:8d:62:4d:88:2e:fa:4d:42:43:59: 3d:cf:34:39:21:57:b6:e3:08:8b:06:a3:93:ca:71:41:bf:ef: a0:8b:0c:cb:6e:c6:e1:68:45:8e:0c:39:d1:2f:b0:00:89:bc: 6e:a8:53:16:d2:de:76:17:ec:9b:cf:c9:92:7b:10:59:c4:e3: 17:4a:c7:e3:4e:0e:da:77:b4:fd:c3:aa:94:50:c5:85:68:3a: 89:4e:f9:b3:65:31:c6:0b:9c:b9:d3:57:6a:77:4e:51:b3:42: db:f1:c7:e1:10:2f:01:db:52:5c:7a:d9:00:f0:47:fc:d8:2e: a9:2f:ec:61:81:29:b2:42:ad:58:87:a1:e5:7f:93:7f:c2:92: b8:f5:45:c1:e0:6e:64:e9:8e:fa:8d:a5:fe:ba:45:bd:97:6a: 9b:e4:89:f8:10:36:f8:63:0f:dc:87:8a:18:b6:61:50:2c:17: b8:f2:b9:cd:6d:a6:7c:5e:c1:a9:6f:89:4c:f4:95:b7:93:44: 3a:1b:26:34:8a:a5:e8:c2:55:f1:46:32:b9:18:79:95:f0:e4: ea:14:af:7a:55:3a:a9:8c:d8:5b:6e:31:69:60:86:6b:0e:94: 32:a0:22:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7ypsm6zdKRP5qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZTc1ZWViMjMtNDY0My00OWE0LWE4ZDYtOGYzNjUwN2M4YzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fUc59CKYpTUKEL/SvuZrb2SzvG2p9RuIJll brCcje467aLDcSWb5KTZXd0qsuwchPYu8sK7aQEyBD2l+TM8if/sAoErvryaL4kB A1X2EHMuyk55oXpAmGN0Frkm6h5r+eAMhvgA8xhK2E095DJ4mwJtrlyZf3hlKK7r UJkvxmzpuxdS1ksxhcMMXRwcZSNkd4u5ypWX4J6SDLTD79/sZM5PzWxRm2g0tl7o Kl7wrLycVLt8KTdHRS0TmNDiVfIE535EXaiHUzbjY+v4aa7PuiYiPRZv3pfZ5w+V /0NC2tyP5JChvNy8hIM92/rW+sbcpMVQtLKQd4K7EzDu9ugyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpWv7EI6aeHjVEFgSLzz5fQ3KOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQ3MjVlOTUtZjI4YS0z ZGRlLThlNDYtODZiMzcxYTEyYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH413roWZ2okF06wIS1LuemoJbcOestoAY6ejWJNiC76TUJDWT3PNDkh V7bjCIsGo5PKcUG/76CLDMtuxuFoRY4MOdEvsACJvG6oUxbS3nYX7JvPyZJ7EFnE 4xdKx+NODtp3tP3DqpRQxYVoOolO+bNlMcYLnLnTV2p3TlGzQtvxx+EQLwHbUlx6 2QDwR/zYLqkv7GGBKbJCrViHoeV/k3/Ckrj1RcHgbmTpjvqNpf66Rb2XapvkifgQ NvhjD9yHihi2YVAsF7jyuc1tpnxewalviUz0lbeTRDobJjSKpejCVfFGMrkYeZXw 5OoUr3pVOqmM2FtuMWlghmsOlDKgImo= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:50 2025 by rpki-client