$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa File: ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa (raw, json) Hash identifier: tL54iIvjXQFKpO855DLHGjQaYhA4pIfPSghYznz93ss= Subject key identifier: AD:91:7B:69:2B:77:8D:43:1D:EF:67:D1:AD:DD:CB:A9:05:19:ED:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8DD87B94453E693864C88900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 104.16.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:7b:94:45:3e:69:38:64:c8:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=2fe033b0-30f9-455c-ab06-f1be898372c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:42:56:d7:60:f1:ca:e8:58:c2:21:9c:fa:52: 87:eb:ee:02:6f:f1:4b:ea:02:37:6d:df:a4:a0:26: ff:b9:84:65:b7:43:63:53:a4:25:fe:3f:99:4f:21: 2e:ec:75:dc:08:44:d2:15:78:a5:1f:00:75:01:e6: 3d:d0:65:4b:d9:23:48:ae:38:76:6f:77:cb:a4:9d: 07:df:11:a2:29:bb:b9:87:26:6e:ab:a9:bf:23:26: 03:11:dc:1e:bb:af:21:66:dc:c6:b4:b8:c0:e7:bd: 51:93:32:90:5d:84:bf:31:54:2f:bf:ab:34:02:49: 5a:d8:b2:77:03:56:4c:33:83:1c:46:24:87:4d:f4: 48:f7:f8:c7:0b:a0:53:79:b1:17:d3:8e:a6:1f:8f: be:cc:04:18:8d:bd:c3:d4:bf:55:a4:e5:43:ca:6a: 6e:80:c2:af:ea:18:45:1e:f8:b5:5d:a1:30:c2:d8: c9:08:55:84:5d:cb:40:ab:3a:78:e8:74:37:0d:fa: a6:17:22:09:9b:b0:8c:da:90:8a:d5:bc:c2:49:e5: ac:93:d9:45:dc:f6:1e:70:21:31:6c:20:8b:0e:3f: f5:38:19:76:84:c8:73:5c:75:8a:3a:b7:82:03:3b: 04:9d:b1:e6:d1:f9:5a:e7:4a:12:78:1f:2f:4f:40: 94:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:91:7B:69:2B:77:8D:43:1D:EF:67:D1:AD:DD:CB:A9:05:19:ED:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:bb:5d:a2:73:f8:c6:69:38:eb:79:4d:d5:ea:64:af:df:3f: f5:c0:f7:0a:75:59:f9:5b:5a:3d:43:a5:92:b5:65:77:8e:44: 5b:82:7e:44:15:19:c4:d8:36:fc:be:50:af:90:b6:ac:f1:62: 85:56:bd:f6:a5:e5:29:54:d9:c7:24:4e:41:22:24:56:9e:ef: 54:36:34:de:6c:6b:12:73:42:ba:ec:6d:b5:a7:9a:fc:f2:74: 4c:17:70:43:d7:90:f3:33:91:98:97:0e:d7:b2:a8:22:c0:30: 7d:4b:1a:73:44:17:66:71:51:4d:6f:a4:3c:18:9c:d6:a7:80: a4:0a:ca:f5:9c:23:48:b2:6f:cf:7c:c5:aa:52:c2:80:73:f6: b1:8c:ee:91:71:30:ef:3d:b0:b5:e7:80:a5:ab:cf:6f:0a:9d: ea:56:8e:1a:0a:d8:ac:24:d8:f5:47:00:88:cd:b8:3e:60:15: 85:7f:3e:71:c5:8e:0d:b2:01:50:46:bc:e6:2a:ae:96:da:3e: 31:f2:a3:0d:31:21:be:fe:38:d2:60:55:d7:d9:52:bf:b7:4e: e9:45:65:11:1d:28:8f:3f:a9:91:7b:68:86:02:bf:37:5e:f1: 6c:16:a5:a7:c2:f6:40:9e:9e:ae:33:97:97:b8:ba:a2:3b:f1: ee:89:e0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2HuURT5pOGTIiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MmZlMDMzYjAtMzBmOS00NTVjLWFiMDYtZjFiZTg5ODM3MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0JW12DxyuhYwiGc+lKH6+4Cb/FL6gI3bd+k oCb/uYRlt0NjU6Ql/j+ZTyEu7HXcCETSFXilHwB1AeY90GVL2SNIrjh2b3fLpJ0H 3xGiKbu5hyZuq6m/IyYDEdweu68hZtzGtLjA571RkzKQXYS/MVQvv6s0Akla2LJ3 A1ZMM4McRiSHTfRI9/jHC6BTebEX046mH4++zAQYjb3D1L9VpOVDympugMKv6hhF Hvi1XaEwwtjJCFWEXctAqzp46HQ3DfqmFyIJm7CM2pCK1bzCSeWsk9lF3PYecCEx bCCLDj/1OBl2hMhzXHWKOreCAzsEnbHm0fla50oSeB8vT0CULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2Re2krd41DHe9n0a3dy6kFGe3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmYyNTEwNWMtYTk4MS0z YjdlLTk4Y2YtYWFhZmZlZjFjNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMO7XaJz+MZpOOt5TdXqZK/fP/XA9wp1WflbWj1DpZK1ZXeORFuCfkQV GcTYNvy+UK+QtqzxYoVWvfal5SlU2cckTkEiJFae71Q2NN5saxJzQrrsbbWnmvzy dEwXcEPXkPMzkZiXDteyqCLAMH1LGnNEF2ZxUU1vpDwYnNangKQKyvWcI0iyb898 xapSwoBz9rGM7pFxMO89sLXngKWrz28KnepWjhoK2Kwk2PVHAIjNuD5gFYV/PnHF jg2yAVBGvOYqrpbaPjHyow0xIb7+ONJgVdfZUr+3TulFZREdKI8/qZF7aIYCvzde 8WwWpafC9kCenq4zl5e4uqI78e6J4A4= -----END CERTIFICATE-----Generated at Mon Oct 19 20:51:54 2026 by rpki-client