$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa File: 5f27d521-7a00-308c-a254-7b4b123cddaf.roa (raw, json) Hash identifier: Xmf3dR+ZFiwxAwyUs3DPlPshI4amXGpxfQzbcRpgMAQ= Subject key identifier: F3:9B:06:D0:94:1A:85:B1:9C:F2:80:82:59:F9:CF:DA:95:C6:8B:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C0808F166850FDB8A700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.19.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c0:80:8f:16:68:50:fd:b8:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=1a7a7b8c-54b6-4440-9a01-e6094694e42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:35:1a:3f:4b:0a:8d:98:b2:e5:86:c1:c1: f0:17:9e:1b:c8:61:7e:19:fd:2a:d7:63:04:f3:23: 54:64:5e:2a:73:51:b6:69:ec:b9:92:0a:eb:29:f7: f1:ba:40:3b:bf:17:f0:1c:0e:6f:09:e7:0f:ec:e7: c4:70:d2:fe:23:a6:fe:9e:26:52:b1:32:65:19:85: f8:f4:e5:01:b8:27:6a:46:b4:d3:6d:9f:04:36:ae: a3:eb:92:e9:39:a0:62:ed:41:5d:51:f4:c1:00:05: 10:e2:75:b2:4c:0f:0f:06:a9:30:a1:57:b0:5b:69: fc:fd:e8:81:9a:74:4b:95:66:5e:19:33:ab:c1:fc: a7:ca:2a:44:ad:ae:e7:b1:14:15:c6:b6:b7:31:b7: ec:26:a6:f0:0a:99:f9:da:07:87:c8:fe:24:18:17: a4:0c:c8:1d:45:27:77:85:86:65:8b:f6:5a:4e:4d: 08:eb:a7:0d:86:7f:71:b9:23:25:24:80:a9:8d:a2: 56:14:23:37:ac:6a:58:b4:cd:d0:89:9d:58:c7:71: 2d:bd:df:a7:8c:a7:04:5c:54:38:4d:0c:73:c2:cc: c5:0a:85:33:a4:b5:2e:65:27:0e:99:a0:0e:4c:ca: 5f:37:a2:69:8b:d6:74:c6:c4:c2:b8:88:88:3f:da: 20:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9B:06:D0:94:1A:85:B1:9C:F2:80:82:59:F9:CF:DA:95:C6:8B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2f:f2:e7:2c:5e:5f:4e:17:0a:a9:05:03:fd:d5:ce:55:26: 3e:48:e7:57:02:83:c4:36:54:11:f0:d2:bc:18:37:09:e9:48: 62:d7:d3:9a:6b:6d:ec:ba:3c:bd:d7:21:02:2a:fe:a6:1b:41: e6:da:5d:2b:fc:28:76:4e:87:b4:6f:96:f4:b8:fd:b0:50:48: 8b:51:fd:62:b2:1e:47:f6:a0:27:51:04:19:48:4e:99:60:16: cc:d6:e2:7e:f1:fa:b3:69:ef:30:c4:6f:34:42:a1:7b:9f:ad: 67:85:ef:a8:1f:d8:99:f2:9e:5a:55:7a:8a:d2:c4:53:fc:3a: be:e5:7a:bd:38:40:71:a9:d8:8c:62:33:de:a1:4d:16:46:c3: 03:a1:5e:f3:77:aa:2f:46:59:30:2a:67:07:9c:50:61:a7:03: 38:cd:55:2e:8d:93:92:9e:0b:04:e0:9a:23:6c:bd:2d:17:2b: 87:00:41:53:6f:bc:1d:25:49:29:c3:0a:4f:45:84:76:c1:38: 22:b0:7b:74:d4:bc:16:c3:79:50:13:f3:3d:62:a7:4a:90:9b: c6:e0:15:11:f9:43:88:36:51:dd:0b:3b:06:15:e2:d7:f4:21: 3c:25:6b:f3:09:6f:8b:4b:6e:ea:7a:b4:9e:c9:45:f6:ea:0a: 3c:30:49:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8CAjxZoUP24pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MWE3YTdiOGMtNTRiNi00NDQwLTlhMDEtZTYwOTQ2OTRlNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj41Gj9LCo2YsuWGwcHwF54byGF+Gf0q12ME 8yNUZF4qc1G2aey5kgrrKffxukA7vxfwHA5vCecP7OfEcNL+I6b+niZSsTJlGYX4 9OUBuCdqRrTTbZ8ENq6j65LpOaBi7UFdUfTBAAUQ4nWyTA8PBqkwoVewW2n8/eiB mnRLlWZeGTOrwfynyipEra7nsRQVxra3MbfsJqbwCpn52geHyP4kGBekDMgdRSd3 hYZli/ZaTk0I66cNhn9xuSMlJICpjaJWFCM3rGpYtM3QiZ1Yx3Etvd+njKcEXFQ4 TQxzwszFCoUzpLUuZScOmaAOTMpfN6Jpi9Z0xsTCuIiIP9oggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPObBtCUGoWxnPKAgln5z9qVxouJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWYyN2Q1MjEtN2EwMC0z MDhjLWEyNTQtN2I0YjEyM2NkZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMv8ucsXl9OFwqpBQP91c5VJj5I51cCg8Q2VBHw0rwYNwnpSGLX05pr bey6PL3XIQIq/qYbQebaXSv8KHZOh7RvlvS4/bBQSItR/WKyHkf2oCdRBBlITplg FszW4n7x+rNp7zDEbzRCoXufrWeF76gf2JnynlpVeorSxFP8Or7ler04QHGp2Ixi M96hTRZGwwOhXvN3qi9GWTAqZwecUGGnAzjNVS6Nk5KeCwTgmiNsvS0XK4cAQVNv vB0lSSnDCk9FhHbBOCKwe3TUvBbDeVAT8z1ip0qQm8bgFRH5Q4g2Ud0LOwYV4tf0 ITwla/MJb4tLbup6tJ7JRfbqCjwwSWw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:52 2025 by rpki-client