$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa File: ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa (raw, json) Hash identifier: m+tSqvGyEegaxWc2m2rxEDL51Bt3AwqXHUF0t89fxUM= Subject key identifier: 29:F6:0E:37:5C:43:D0:71:14:EA:C9:3F:B7:62:E3:70:54:03:C7:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C0A457989DC1952F4580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.19.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c0:a4:57:98:9d:c1:95:2f:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=0e74ce12-2235-4eaa-a00c-54adb8ec15b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:cd:4b:d0:b3:6d:06:b3:5b:c8:69:9f:52: 0d:db:1e:9e:18:99:19:f8:df:cd:66:18:1f:cd:d0: d4:38:a4:37:90:69:67:9a:91:22:11:d0:07:d5:97: 27:1e:d2:c9:ad:0a:3a:12:57:da:8f:07:63:44:cc: ba:21:39:4e:bc:1f:cb:9c:f4:3f:ae:04:ca:b9:3e: d7:20:1b:71:79:38:ab:fe:15:c0:b1:fd:81:76:db: c3:b0:c0:7b:8e:f0:f8:6f:0d:f6:d6:26:1d:9a:b0: bf:5a:9d:34:17:97:7b:6e:76:26:f2:3d:79:2a:4b: 06:47:f5:87:6a:98:48:b0:c8:fe:4c:a9:5c:af:72: 38:9d:e2:3f:bc:6e:34:d5:81:0d:a3:f4:3e:f6:32: f8:60:81:fd:b2:0d:08:c3:54:18:45:c2:5e:70:b2: 10:d5:58:40:30:98:93:eb:89:66:b2:32:30:1f:b6: 0b:91:2e:af:d6:21:3b:19:28:6f:d0:fb:9a:fb:94: 0c:e2:34:ca:5a:11:b2:71:2f:44:9e:07:80:c0:8a: b0:31:10:4f:d8:e0:65:1d:c9:c1:1e:82:a9:b8:a8: 91:45:7f:ae:9e:7c:71:23:25:9c:ce:0e:8a:8f:c4: 6b:1f:cc:43:9e:64:88:53:9b:ee:ef:ac:cf:c3:6a: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F6:0E:37:5C:43:D0:71:14:EA:C9:3F:B7:62:E3:70:54:03:C7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a9:47:29:3b:46:34:5f:02:77:c2:3e:f2:5f:e0:a8:cc:60: 85:42:51:d0:a7:60:f1:09:d7:91:e7:7e:e5:38:e5:36:a3:5a: 0d:e8:4c:2d:0c:22:08:b7:98:fc:22:38:08:17:9b:47:0d:82: c9:f9:d6:3c:90:6c:71:97:98:4c:bc:29:27:70:1d:2b:22:fb: 2f:b4:9f:9a:96:bb:d0:f6:15:05:27:79:e1:51:33:f9:3e:53: 4e:83:c8:88:66:44:7c:e2:34:0d:fb:7a:96:85:8a:c8:bf:53: 6d:59:5e:6d:aa:2f:6f:53:34:77:1a:30:40:94:90:ef:b5:38: fd:72:76:f8:a9:46:ff:24:b7:34:cb:57:07:4f:48:47:39:ff: 6c:e0:8c:9b:cd:7e:80:b5:da:f7:e3:10:ef:06:fb:0e:43:41: 8b:6d:cd:a1:1d:97:6a:60:09:f7:18:2e:64:3e:a9:37:87:aa: 32:88:bc:33:b9:17:3b:8d:7b:b3:78:bb:28:95:6e:78:88:a4: 57:71:28:5c:67:57:5d:49:cd:a7:17:fd:6f:56:cb:9e:a9:37: f7:43:91:30:cd:46:6e:35:66:dc:4b:bd:96:4a:0c:24:fb:28: 43:fd:48:25:ca:5d:ae:02:b7:dc:70:0a:e1:62:b3:ab:6b:d0: cc:be:fe:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8CkV5idwZUvRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MGU3NGNlMTItMjIzNS00ZWFhLWEwMGMtNTRhZGI4ZWMxNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv/NS9CzbQazW8hpn1IN2x6eGJkZ+N/NZhgf zdDUOKQ3kGlnmpEiEdAH1ZcnHtLJrQo6ElfajwdjRMy6ITlOvB/LnPQ/rgTKuT7X IBtxeTir/hXAsf2BdtvDsMB7jvD4bw321iYdmrC/Wp00F5d7bnYm8j15KksGR/WH aphIsMj+TKlcr3I4neI/vG401YENo/Q+9jL4YIH9sg0Iw1QYRcJecLIQ1VhAMJiT 64lmsjIwH7YLkS6v1iE7GShv0Pua+5QM4jTKWhGycS9EngeAwIqwMRBP2OBlHcnB HoKpuKiRRX+unnxxIyWczg6Kj8RrH8xDnmSIU5vu76zPw2p6wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn2DjdcQ9BxFOrJP7di43BUA8deMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmY0M2JiMjItNDEwMS0z OWZiLWEwZGYtMmUwZDBiM2FhMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOpRyk7RjRfAnfCPvJf4KjMYIVCUdCnYPEJ15HnfuU45TajWg3oTC0M Igi3mPwiOAgXm0cNgsn51jyQbHGXmEy8KSdwHSsi+y+0n5qWu9D2FQUneeFRM/k+ U06DyIhmRHziNA37epaFisi/U21ZXm2qL29TNHcaMECUkO+1OP1ydvipRv8ktzTL VwdPSEc5/2zgjJvNfoC12vfjEO8G+w5DQYttzaEdl2pgCfcYLmQ+qTeHqjKIvDO5 FzuNe7N4uyiVbniIpFdxKFxnV11JzacX/W9Wy56pN/dDkTDNRm41ZtxLvZZKDCT7 KEP9SCXKXa4Ct9xwCuFis6tr0My+/n8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:46 2025 by rpki-client