$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc8c3d06-ada6-3611-85f8-8f3595325473.roa File: fc8c3d06-ada6-3611-85f8-8f3595325473.roa (raw, json) Hash identifier: lpfqelCwaAp77Nwt9aDjb//5LGEfZCMcSyCAs/tYtCs= Subject key identifier: 8E:DB:D7:19:1C:7F:04:3D:B1:50:56:FB:FD:74:13:C0:BE:50:E9:1B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B7927F6D66330A4D8580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc8c3d06-ada6-3611-85f8-8f3595325473.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.24.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b7:92:7f:6d:66:33:0a:4d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=4b5aa796-43c7-4dc0-b209-13345fcbec55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:99:da:ed:88:62:65:81:81:e0:d8:94:3e: d3:dd:ab:9b:b9:b4:7c:66:d6:3b:7c:82:eb:fa:3f: 3d:74:c4:1f:04:f4:3d:71:14:31:a2:bb:a3:22:3e: c6:2f:65:8c:a7:71:84:b4:c6:53:9a:50:35:9a:0f: bd:3b:08:d7:e1:f2:e1:45:43:5c:23:28:f0:d2:e5: 8c:5d:51:3f:54:60:8b:bb:9e:ac:f8:cb:92:3f:8f: 0a:88:5d:6f:d9:51:85:c6:98:7f:b0:8a:cf:59:00: cb:29:9a:8e:94:d6:71:71:37:06:ee:21:69:06:6f: 2b:67:99:9b:1f:36:9f:25:d3:37:fb:cb:00:3e:3d: 74:a6:f2:e7:08:f4:b1:12:26:80:56:00:cc:83:a7: a4:20:2d:1e:58:a5:eb:a1:4e:85:ca:db:94:32:35: 33:34:0f:71:f6:8a:43:44:e9:42:fe:15:84:72:8d: 5f:de:85:d2:5b:4d:31:2e:2c:e4:6e:b2:a0:9a:de: 7f:96:0f:9b:fd:6a:69:ff:fe:b0:56:30:85:4f:53: 48:ab:3c:52:7d:b2:88:05:4d:c0:eb:04:53:7b:4c: 49:22:a5:ea:5f:b7:b6:b5:ae:b9:8f:52:cc:ad:f5: 8a:22:cf:ef:97:29:fc:20:57:25:02:a1:96:d7:09: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DB:D7:19:1C:7F:04:3D:B1:50:56:FB:FD:74:13:C0:BE:50:E9:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc8c3d06-ada6-3611-85f8-8f3595325473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:fe:0f:f2:09:fc:b6:5e:fc:08:c5:7e:94:b4:2b:f3:1b:26: 9f:f8:36:ca:c9:b1:7a:bb:e6:c3:b0:74:bf:18:0a:83:c6:1f: 0e:0d:3d:aa:c3:f5:6f:a0:16:f5:05:51:fd:6c:77:d4:af:a1: fc:50:8d:5e:39:92:e8:53:f8:14:b4:f2:bb:ad:35:16:61:34: cf:c4:f6:d0:80:80:59:0c:38:df:4e:c1:d7:bf:b6:6c:bb:d7: 1f:f7:82:92:a6:19:a4:e8:0f:a3:ed:39:91:f6:ba:9f:dd:46: ad:9f:ef:14:9a:c9:fe:8a:53:1c:93:f7:29:3c:ae:72:f7:2c: 25:02:f6:f2:fa:51:00:d0:8e:ac:36:aa:30:5a:cd:a6:33:ba: 4e:bf:c5:08:34:f7:20:46:ef:e2:9b:18:52:1f:a0:50:41:48: 8c:45:44:2f:ce:31:20:87:d3:bc:95:89:64:71:16:07:4a:d4: 6c:e8:84:66:46:cc:2f:1d:b1:75:80:36:c7:37:0e:eb:27:b5: cf:f4:f3:cc:9a:16:97:1a:a3:84:64:cf:02:b9:99:d5:4e:be: 4f:5a:7a:6d:b4:87:40:b1:3e:4d:be:8e:68:20:64:9f:51:37: df:40:81:93:16:a4:0d:4c:4e:ea:df:59:82:64:a8:73:90:10: 8e:7f:58:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7eSf21mMwpNhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NGI1YWE3OTYtNDNjNy00ZGMwLWIyMDktMTMzNDVmY2JlYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07CZ2u2IYmWBgeDYlD7T3aububR8ZtY7fILr +j89dMQfBPQ9cRQxorujIj7GL2WMp3GEtMZTmlA1mg+9OwjX4fLhRUNcIyjw0uWM XVE/VGCLu56s+MuSP48KiF1v2VGFxph/sIrPWQDLKZqOlNZxcTcG7iFpBm8rZ5mb HzafJdM3+8sAPj10pvLnCPSxEiaAVgDMg6ekIC0eWKXroU6FytuUMjUzNA9x9opD ROlC/hWEco1f3oXSW00xLizkbrKgmt5/lg+b/Wpp//6wVjCFT1NIqzxSfbKIBU3A 6wRTe0xJIqXqX7e2ta65j1LMrfWKIs/vlyn8IFclAqGW1wkJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7b1xkcfwQ9sVBW+/10E8C+UOkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmM4YzNkMDYtYWRhNi0z NjExLTg1ZjgtOGYzNTk1MzI1NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALX+D/IJ/LZe/AjFfpS0K/MbJp/4NsrJsXq75sOwdL8YCoPGHw4NParD 9W+gFvUFUf1sd9SvofxQjV45kuhT+BS08rutNRZhNM/E9tCAgFkMON9Owde/tmy7 1x/3gpKmGaToD6PtOZH2up/dRq2f7xSayf6KUxyT9yk8rnL3LCUC9vL6UQDQjqw2 qjBazaYzuk6/xQg09yBG7+KbGFIfoFBBSIxFRC/OMSCH07yViWRxFgdK1GzohGZG zC8dsXWANsc3Dusntc/088yaFpcao4RkzwK5mdVOvk9aem20h0CxPk2+jmggZJ9R N99AgZMWpA1MTurfWYJkqHOQEI5/WOw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:07 2025 by rpki-client