$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa File: 5b65e206-849c-3cf1-a6e0-7265114b7c15.roa (raw, json) Hash identifier: PnZ3Af0hERuHWNV/73DTNpUZsp6GUzW7poNGn5iU6bo= Subject key identifier: EB:2A:2E:CE:82:2F:3D:F6:49:C3:3F:31:EC:9A:A2:D7:8D:66:A6:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C3E72D4331296A80E880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.25.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c3:e7:2d:43:31:29:6a:80:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=f1baca7e-98fe-44ad-b45a-bda8dc42e935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:cc:5e:7c:70:30:1b:74:46:98:e0:97:b8: 60:fe:50:a5:fa:e6:a0:0b:70:f7:70:19:84:7a:0d: 05:db:22:2a:ac:93:ea:3e:46:00:55:24:92:b8:da: ff:8b:6d:93:d9:67:c9:6c:31:d9:db:9b:ef:c1:33: 43:2b:ac:5c:0c:fe:5c:98:5b:b8:44:d9:f3:87:d8: c4:0d:2e:e0:d4:89:d9:7c:13:5d:80:22:a7:c1:9e: 9e:99:31:b6:20:92:cf:82:55:59:e3:96:70:29:45: 27:2e:ca:87:ae:66:f3:ad:30:84:06:a5:6d:9b:5a: d6:04:b9:fc:58:e9:70:76:40:bf:55:2f:60:8f:b2: 39:31:a1:1e:26:2d:81:09:cd:b9:78:4f:d3:68:ca: 27:6f:b7:8f:fb:8b:b7:27:b1:65:05:5b:f6:c0:c8: ed:10:7a:f7:a6:a4:ee:8c:af:48:e4:3f:1c:ed:a9: 06:54:85:67:55:a1:8b:e8:02:4c:5c:b4:dc:4a:34: 15:b0:fd:b2:13:4d:82:82:09:20:7a:45:35:c1:5a: 2e:d4:2b:75:49:10:25:f2:04:ec:5e:69:98:1e:42: 7e:1f:e2:4a:ea:e8:27:23:98:4c:98:2a:c1:f4:96: 70:5d:c9:c5:61:bd:d5:e4:2c:d3:a1:52:42:45:6d: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2A:2E:CE:82:2F:3D:F6:49:C3:3F:31:EC:9A:A2:D7:8D:66:A6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e9:51:4a:f1:8a:76:58:8a:b5:68:89:a8:4a:21:c9:60:f3: b3:5e:1a:44:86:20:86:aa:0c:49:79:3c:f0:9c:a4:f5:2a:ce: 3b:f5:be:08:10:61:86:1b:e8:c4:f1:b6:cd:39:2e:f3:7a:59: d6:37:3c:a2:3f:06:98:86:c5:79:c4:e9:15:46:ea:37:05:f7: 98:cf:b4:e6:29:c4:aa:ef:84:a4:18:ce:73:3c:e5:5f:9c:de: 00:2a:c5:56:e8:92:d4:87:c0:b8:d9:3e:44:a3:7c:bc:d5:84: d2:c4:86:a5:07:e6:fe:2b:56:fb:86:d2:02:ec:6d:37:6c:8e: a9:37:18:1e:d9:e0:1e:67:e2:c9:eb:01:3c:3d:9f:bf:98:5e: 58:01:e7:fd:70:37:cf:a1:22:cd:7c:c5:e8:2e:3a:2c:4c:32: c7:79:3d:ff:1d:e1:66:b3:68:9d:78:0e:d7:c4:d5:0f:53:e4: af:36:d9:9c:08:53:d6:f3:69:ff:76:e3:0c:82:9a:9d:18:f1: 9b:ad:e5:66:f7:1b:1a:6c:5f:0b:03:c2:25:92:4a:17:2a:3e: 8c:4a:c9:a6:61:d5:f4:e6:e5:4f:47:4a:cf:47:32:e6:eb:7a: 22:1b:90:ab:e5:a8:f1:83:7c:df:94:d4:68:7f:2a:a3:14:c2: 7c:90:67:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8PnLUMxKWqA6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjFiYWNhN2UtOThmZS00NGFkLWI0NWEtYmRhOGRjNDJlOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXLMXnxwMBt0Rpjgl7hg/lCl+uagC3D3cBmE eg0F2yIqrJPqPkYAVSSSuNr/i22T2WfJbDHZ25vvwTNDK6xcDP5cmFu4RNnzh9jE DS7g1InZfBNdgCKnwZ6emTG2IJLPglVZ45ZwKUUnLsqHrmbzrTCEBqVtm1rWBLn8 WOlwdkC/VS9gj7I5MaEeJi2BCc25eE/TaMonb7eP+4u3J7FlBVv2wMjtEHr3pqTu jK9I5D8c7akGVIVnVaGL6AJMXLTcSjQVsP2yE02CggkgekU1wVou1Ct1SRAl8gTs XmmYHkJ+H+JK6ugnI5hMmCrB9JZwXcnFYb3V5CzToVJCRW00twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsqLs6CLz32ScM/MeyaoteNZqaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWI2NWUyMDYtODQ5Yy0z Y2YxLWE2ZTAtNzI2NTExNGI3YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvpUUrxinZYirVoiahKIclg87NeGkSGIIaqDEl5PPCcpPUqzjv1vggQ YYYb6MTxts05LvN6WdY3PKI/BpiGxXnE6RVG6jcF95jPtOYpxKrvhKQYznM85V+c 3gAqxVboktSHwLjZPkSjfLzVhNLEhqUH5v4rVvuG0gLsbTdsjqk3GB7Z4B5n4snr ATw9n7+YXlgB5/1wN8+hIs18xeguOixMMsd5Pf8d4WazaJ14DtfE1Q9T5K822ZwI U9bzaf924wyCmp0Y8Zut5Wb3GxpsXwsDwiWSShcqPoxKyaZh1fTm5U9HSs9HMubr eiIbkKvlqPGDfN+U1Gh/KqMUwnyQZ1M= -----END CERTIFICATE-----Generated at Wed Nov 5 07:22:38 2025 by rpki-client