$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa File: ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa (raw, json) Hash identifier: i3JTxZ2SbwQvSOIaLl9+oqFhsP4GFtdqud/qXt7ZZ+U= Subject key identifier: 83:05:B7:89:94:51:A5:84:C4:99:DB:7F:0E:5E:09:7A:97:CE:A0:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BCB7D2F28E879EC8BF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.16.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bc:b7:d2:f2:8e:87:9e:c8:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=9fdbfd8f-9d7f-4a38-8ccb-b0cf2916c60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:14:1d:ee:35:1c:45:0c:f3:80:12:01:3f: a8:a9:13:0a:a2:fe:6a:e9:a9:8f:c0:f0:2b:3f:19: 7f:1a:42:19:2f:81:55:b9:2d:6f:de:5f:74:5b:d1: e3:96:7e:98:6e:4e:63:92:28:e2:b6:78:44:c5:0e: 0a:29:d5:d0:55:e2:f0:de:7e:d8:cb:0b:a1:ef:64: 06:08:de:5c:80:df:86:62:0c:23:c0:a0:59:1d:3c: 71:84:75:ba:df:0d:87:6b:12:25:8f:6b:05:61:de: 60:9d:4d:33:38:0a:89:5e:23:37:a4:dd:18:76:00: a8:28:ae:71:f7:a7:71:b7:cd:2f:8b:68:ab:d7:6b: f9:b8:69:4d:b3:f8:0d:1f:ef:ad:db:94:fd:c3:6e: 5a:3e:b9:7b:91:b4:48:9a:6e:32:64:78:07:40:02: 7f:94:c0:fa:35:f7:40:35:d2:ac:14:ee:0a:f9:cd: 2b:34:6a:14:fc:64:33:8f:8b:b5:c6:45:f7:68:c6: 79:a4:e5:ec:d2:c3:bd:ba:8d:9e:74:42:c7:f3:c5: cb:e5:7f:f1:fd:1f:d2:fc:8a:fc:0f:77:56:ab:a2: 6f:76:7a:e2:e4:ef:67:e2:81:4f:d8:2f:69:5b:83: a9:47:8a:d4:54:7b:94:30:21:ae:f4:8c:7d:4c:71: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:05:B7:89:94:51:A5:84:C4:99:DB:7F:0E:5E:09:7A:97:CE:A0:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:11:c7:09:84:74:83:4e:f5:9c:54:87:be:12:37:43:23:cf: 9d:e4:1c:73:82:bc:46:3f:1e:54:e4:ef:53:3d:78:c4:c5:ae: 58:ee:30:f6:c0:c9:0b:0b:b3:a7:34:d9:e8:83:e7:be:36:cc: 8a:05:6b:7b:a3:85:b8:5f:79:e6:4d:1d:84:2e:84:8d:8d:05: dd:0e:38:2c:0d:23:24:ed:1f:47:7f:94:d2:d1:fe:39:7d:2c: 6c:89:67:b3:83:c4:e4:b8:0e:98:7f:c5:cd:2e:cd:17:6d:3d: 07:cb:50:bf:5e:6f:d0:17:8d:e9:23:93:8e:d4:cb:3c:fd:32: 29:aa:86:12:e4:c3:98:27:4e:40:77:9d:f7:94:00:57:d1:39: 10:4c:3e:3b:84:33:38:24:c7:94:f2:91:64:e2:00:fe:49:48: 5f:b3:5e:7e:08:e9:7c:79:c3:01:be:b2:05:82:df:7c:1d:66: 36:4a:34:7d:da:1b:4a:ac:87:d4:f1:63:b2:8a:58:a5:6e:ca: 59:e6:19:ae:5e:d8:79:a2:ab:da:6d:ba:cb:1a:b2:6a:28:ba: bb:ca:55:6e:0b:d7:57:85:9e:f5:19:b7:06:75:28:ac:97:ed: fa:f5:46:46:f8:37:03:fa:da:0b:e1:12:46:37:cb:ce:d5:69: d5:32:d3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7y30vKOh57IvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OWZkYmZkOGYtOWQ3Zi00YTM4LThjY2ItYjBjZjI5MTZjNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0QUHe41HEUM84ASAT+oqRMKov5q6amPwPAr Pxl/GkIZL4FVuS1v3l90W9Hjln6Ybk5jkijitnhExQ4KKdXQVeLw3n7Yywuh72QG CN5cgN+GYgwjwKBZHTxxhHW63w2HaxIlj2sFYd5gnU0zOAqJXiM3pN0YdgCoKK5x 96dxt80vi2ir12v5uGlNs/gNH++t25T9w25aPrl7kbRImm4yZHgHQAJ/lMD6NfdA NdKsFO4K+c0rNGoU/GQzj4u1xkX3aMZ5pOXs0sO9uo2edELH88XL5X/x/R/S/Ir8 D3dWq6Jvdnri5O9n4oFP2C9pW4OpR4rUVHuUMCGu9Ix9THH0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMFt4mUUaWExJnbfw5eCXqXzqBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmYyNTEwNWMtYTk4MS0z YjdlLTk4Y2YtYWFhZmZlZjFjNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4RxwmEdINO9ZxUh74SN0Mjz53kHHOCvEY/HlTk71M9eMTFrljuMPbA yQsLs6c02eiD5742zIoFa3ujhbhfeeZNHYQuhI2NBd0OOCwNIyTtH0d/lNLR/jl9 LGyJZ7ODxOS4Dph/xc0uzRdtPQfLUL9eb9AXjekjk47Uyzz9MimqhhLkw5gnTkB3 nfeUAFfRORBMPjuEMzgkx5TykWTiAP5JSF+zXn4I6Xx5wwG+sgWC33wdZjZKNH3a G0qsh9TxY7KKWKVuylnmGa5e2Hmiq9ptussasmoourvKVW4L11eFnvUZtwZ1KKyX 7fr1Rkb4NwP62gvhEkY3y87VadUy08Q= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:44 2025 by rpki-client