$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/631cbb0c-ed03-3507-8a2b-f7116013fdb3.roa File: 631cbb0c-ed03-3507-8a2b-f7116013fdb3.roa (raw, json) Hash identifier: /yiiYnhH4+tGCaL+LeXsmd9K8jxAow8vkTdlSUEWbiM= Subject key identifier: 12:A7:FB:DC:DF:D9:36:39:21:D6:D4:56:5A:2B:74:5C:16:F4:51:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B8996B8D3C0A31E384C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/631cbb0c-ed03-3507-8a2b-f7116013fdb3.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.27.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b8:99:6b:8d:3c:0a:31:e3:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b13284d1-b6c0-40d3-82f1-f0ad94e7d641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:13:63:67:f8:80:bb:52:5d:14:e8:61:57: b4:a7:24:2e:1e:ad:ec:6d:85:91:59:fd:c6:b4:0c: 0d:2d:9c:09:c6:5d:12:81:dd:ba:84:a2:7f:be:ad: 27:7f:b0:03:7b:55:3b:f7:d8:97:d4:61:65:25:cd: 9e:95:5f:ba:39:5e:a5:2e:a6:4c:2d:3e:9b:42:7f: d0:e2:1b:10:32:20:32:66:46:bd:6d:00:41:be:b5: e6:2b:5d:52:23:92:22:67:67:66:c7:2f:cc:65:37: 69:fd:83:a3:79:6e:f7:71:c2:17:8d:01:98:18:1e: 21:21:5f:5b:9c:6a:ca:50:97:d8:3c:c7:e5:92:f9: 86:8c:99:2f:d1:ee:4a:e3:ae:af:81:ef:73:4e:bf: 14:45:20:06:c4:5b:73:e7:f7:66:86:37:70:e0:99: 45:32:f3:fd:c9:ab:63:3a:35:e6:e0:a8:71:56:0e: 88:19:91:55:c2:49:7a:30:b1:f8:87:c5:23:6f:cc: 5c:ba:7c:07:55:8e:84:f4:b0:e9:61:ca:2a:ee:7d: ba:50:d4:8f:05:dc:76:42:eb:76:9a:2c:61:54:9b: 66:c3:ba:f2:6a:dc:ec:5c:09:50:6e:b2:93:49:36: 55:7a:6c:50:1a:db:86:a0:5e:61:82:fc:ca:e9:20: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:FB:DC:DF:D9:36:39:21:D6:D4:56:5A:2B:74:5C:16:F4:51:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/631cbb0c-ed03-3507-8a2b-f7116013fdb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a1:76:b3:92:aa:1c:99:8b:25:ba:2f:2c:ef:47:24:d6:8f: 1a:46:44:3a:a7:e4:c3:27:91:5f:55:89:9e:d4:b4:b4:2a:82: b6:01:a9:ae:54:44:4e:fc:6e:e2:1d:c5:b6:73:48:0f:85:4a: d9:f2:a0:be:ce:8d:fb:ab:ef:f0:2d:db:43:92:68:1c:f9:7d: 54:13:e9:41:56:b8:13:3a:79:89:9c:5d:86:49:79:51:77:22: 4b:a2:96:4c:11:12:48:23:a1:70:3c:7c:97:8f:2d:b2:9e:2a: 76:40:f4:67:ab:d7:07:72:91:d9:0a:64:6b:74:f9:c2:ed:4e: e8:2b:97:b9:f0:de:e8:8b:60:0b:1e:43:36:03:4a:3d:1c:ee: 20:82:b3:c8:52:58:8f:e3:cf:fb:cb:98:3d:43:9d:31:fe:1b: 43:38:0c:fd:d1:7a:50:a4:71:9a:ad:d1:b5:fa:8f:fd:82:7f: 78:66:20:13:04:e6:b3:56:5a:2a:bc:39:b1:b8:b5:0c:3d:b6: 12:73:c9:59:ca:e1:e3:c6:9c:1c:19:86:4f:7c:4a:cd:dc:c9: 53:b5:df:c3:68:72:23:d7:88:23:0c:01:46:b1:ec:f5:87:3b: 85:ca:42:ee:3e:96:0f:8c:ca:8c:fc:5f:78:60:90:84:4a:d5: 21:0e:72:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7iZa408CjHjhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjEzMjg0ZDEtYjZjMC00MGQzLTgyZjEtZjBhZDk0ZTdkNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEoTY2f4gLtSXRToYVe0pyQuHq3sbYWRWf3G tAwNLZwJxl0Sgd26hKJ/vq0nf7ADe1U799iX1GFlJc2elV+6OV6lLqZMLT6bQn/Q 4hsQMiAyZka9bQBBvrXmK11SI5IiZ2dmxy/MZTdp/YOjeW73ccIXjQGYGB4hIV9b nGrKUJfYPMflkvmGjJkv0e5K466vge9zTr8URSAGxFtz5/dmhjdw4JlFMvP9yatj OjXm4KhxVg6IGZFVwkl6MLH4h8Ujb8xcunwHVY6E9LDpYcoq7n26UNSPBdx2Qut2 mixhVJtmw7ryatzsXAlQbrKTSTZVemxQGtuGoF5hgvzK6SCAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKn+9zf2TY5IdbUVlordFwW9FHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjMxY2JiMGMtZWQwMy0z NTA3LThhMmItZjcxMTYwMTNmZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaBvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGehdrOSqhyZiyW6LyzvRyTWjxpGRDqn5MMnkV9ViZ7UtLQqgrYBqa5U RE78buIdxbZzSA+FStnyoL7Ojfur7/At20OSaBz5fVQT6UFWuBM6eYmcXYZJeVF3 IkuilkwREkgjoXA8fJePLbKeKnZA9Ger1wdykdkKZGt0+cLtTugrl7nw3uiLYAse QzYDSj0c7iCCs8hSWI/jz/vLmD1DnTH+G0M4DP3RelCkcZqt0bX6j/2Cf3hmIBME 5rNWWiq8ObG4tQw9thJzyVnK4ePGnBwZhk98Ss3cyVO138NociPXiCMMAUax7PWH O4XKQu4+lg+Myoz8X3hgkIRK1SEOcv0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:56:07 2025 by rpki-client