$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa File: f48deab7-a013-392b-a803-389dfad110a3.roa (raw, json) Hash identifier: +To2ChPtjlJEDIoHSo3vHvOlqtYMeDCHmYwlZDyxzzc= Subject key identifier: 05:4E:FF:44:0A:65:D8:32:F7:20:77:E3:90:8B:F6:05:FE:54:A4:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B213C0589404730F2D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.16.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b2:13:c0:58:94:04:73:0f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=35987df0-19a1-4213-97f8-4993a5bc3c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:9d:57:63:07:af:db:4b:b6:6d:42:26:f6: 3c:98:00:44:28:16:97:0e:cc:7e:cf:24:bf:80:27: 2d:ab:96:4a:57:a6:bd:87:b7:9e:53:de:75:94:a2: e6:24:15:05:65:de:a4:ac:cd:f9:2c:5d:55:14:bc: 12:f4:7f:cd:d3:36:20:d8:e1:c0:fd:c7:87:41:7b: 33:91:13:ae:f7:66:8a:5c:78:a6:0e:09:aa:d4:89: 7f:88:60:e8:9a:83:30:33:d9:02:6f:06:03:f3:66: 7a:bd:a0:1e:b5:12:eb:dd:80:d8:3f:78:84:31:be: 50:81:fe:2c:65:a8:07:ce:a1:95:34:f3:8f:0d:ef: 16:92:5e:5f:d9:3a:0f:3f:84:9c:e7:58:19:b6:4d: ba:d2:ed:65:9c:bf:0a:32:14:8a:db:02:0a:40:eb: ec:16:69:7e:2b:9c:9d:a9:1e:a5:bb:fc:15:16:93: 61:c1:9c:7c:73:5f:59:7b:ad:94:8d:dc:ae:4e:7b: 65:8b:c3:33:35:a3:6c:0c:ef:42:76:56:f6:ea:2e: d7:c2:8f:40:b6:99:df:4a:e5:6d:7b:e0:fa:e5:6d: 2c:e7:49:9d:10:af:23:8b:c8:40:33:32:ae:ad:bd: 68:22:2f:5b:6d:56:4e:c3:ff:49:5f:f9:f7:86:1c: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4E:FF:44:0A:65:D8:32:F7:20:77:E3:90:8B:F6:05:FE:54:A4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:dd:89:95:57:33:0d:d7:ca:45:5b:62:2d:cb:5f:50:52:44: 94:24:ad:46:1a:77:97:42:24:6e:eb:fa:29:f3:7d:ed:b2:c0: a3:35:fe:c9:71:2e:66:c1:94:16:e9:b8:59:f6:68:b4:51:ef: 3e:09:79:d1:4d:8b:a3:fe:7a:a8:56:02:0b:6e:61:a6:67:3a: 38:08:36:63:90:cf:b9:e3:ef:b5:28:3a:b7:ab:40:37:b0:f3: 00:44:12:b6:2d:3e:2e:29:dd:d7:7c:a8:bb:9c:7f:cd:20:52: 8a:87:9e:f8:a7:0e:a3:0a:a8:38:1f:27:bd:fe:b8:43:e2:19: e7:ab:02:c0:92:b3:eb:e0:96:6f:4a:15:f7:9c:16:b4:d0:e8: 67:b6:48:06:e7:38:ce:cd:ec:85:f3:8a:2f:59:32:2f:f8:0a: d5:32:6b:80:a0:18:f4:bf:9f:70:9d:ae:78:64:b5:4c:a1:3a: a0:7d:64:60:ab:23:92:da:c4:c0:be:cb:59:b2:09:81:0f:3a: 69:66:f5:c3:4a:1f:86:4e:ed:4f:94:19:4c:1b:22:3a:15:69: 91:27:b8:21:29:09:d3:69:69:18:50:15:4d:37:cb:6f:e0:1c: 9a:8b:b7:62:09:0e:3a:a4:f6:dd:b5:ad:b8:a1:40:a0:e2:94: 71:5f:43:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7ITwFiUBHMPLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MzU5ODdkZjAtMTlhMS00MjEzLTk3ZjgtNDk5M2E1YmMzYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn92dV2MHr9tLtm1CJvY8mABEKBaXDsx+zyS/ gCctq5ZKV6a9h7eeU951lKLmJBUFZd6krM35LF1VFLwS9H/N0zYg2OHA/ceHQXsz kROu92aKXHimDgmq1Il/iGDomoMwM9kCbwYD82Z6vaAetRLr3YDYP3iEMb5Qgf4s ZagHzqGVNPOPDe8Wkl5f2ToPP4Sc51gZtk260u1lnL8KMhSK2wIKQOvsFml+K5yd qR6lu/wVFpNhwZx8c19Ze62UjdyuTntli8MzNaNsDO9Cdlb26i7Xwo9AtpnfSuVt e+D65W0s50mdEK8ji8hAMzKurb1oIi9bbVZOw/9JX/n3hhyb8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVO/0QKZdgy9yB345CL9gX+VKSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQ4ZGVhYjctYTAxMy0z OTJiLWE4MDMtMzg5ZGZhZDExMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArdiZVXMw3XykVbYi3LX1BSRJQkrUYad5dCJG7r+inzfe2ywKM1/slx LmbBlBbpuFn2aLRR7z4JedFNi6P+eqhWAgtuYaZnOjgINmOQz7nj77UoOrerQDew 8wBEErYtPi4p3dd8qLucf80gUoqHnvinDqMKqDgfJ73+uEPiGeerAsCSs+vglm9K FfecFrTQ6Ge2SAbnOM7N7IXzii9ZMi/4CtUya4CgGPS/n3CdrnhktUyhOqB9ZGCr I5LaxMC+y1myCYEPOmlm9cNKH4ZO7U+UGUwbIjoVaZEnuCEpCdNpaRhQFU03y2/g HJqLt2IJDjqk9t21rbihQKDilHFfQxs= -----END CERTIFICATE-----Generated at Sat Nov 1 15:25:23 2025 by rpki-client