$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa File: fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa (raw, json) Hash identifier: lxlc+Ss2C8OM4KCsc4WWKG3D0nnfZYdBRGYHazESsrM= Subject key identifier: 9A:5D:0B:59:FC:C7:2F:98:D5:19:2C:00:2A:D5:A8:66:5F:4F:29:61 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFEAA58B6221A273FFD980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.25.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ea:a5:8b:62:21:a2:73:ff:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=8d521292-3ce3-41f4-8bc0-d1e9b412b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:b0:6c:f6:94:27:64:f5:f1:02:3a:d9:73: cc:f3:6f:0f:dc:32:ad:0a:8a:05:07:22:cf:1f:af: a0:ef:64:f6:c3:b2:2d:0c:28:2a:6d:8b:c6:46:f0: 31:26:3b:b5:56:22:f7:b1:b0:fd:b7:06:d4:dc:cc: 9c:5b:78:22:69:5e:42:5f:51:b0:76:af:90:dd:0e: b6:f4:ee:d8:c6:95:12:d9:5a:24:66:03:72:90:73: 69:02:68:f7:cb:5d:25:79:8c:4d:85:d2:8a:32:56: 6f:e6:80:38:a9:55:87:5d:0c:0f:ed:b7:0a:e6:c9: 74:bf:f7:d9:2f:94:33:ad:66:27:ce:da:8c:42:db: 61:f1:1b:69:4f:e1:88:42:01:41:4b:51:51:5c:2b: b5:e2:43:7a:85:83:73:2e:3e:74:b2:57:13:3d:ff: e5:dd:fd:b1:a7:f5:01:2f:53:10:21:60:7e:15:05: 80:9b:52:95:22:93:ff:a4:f4:a2:8b:6b:c2:dc:67: b8:89:f5:9f:6e:fa:a9:e2:6b:bf:d0:b0:6d:44:95: 73:1a:82:aa:cc:2b:7e:f8:b0:5f:12:9e:79:7b:b6: ae:4e:b1:c3:97:ce:32:e2:9c:02:8c:ff:0c:8c:55: 9d:df:b9:14:28:82:84:c5:b2:da:9b:49:08:42:e7: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:0B:59:FC:C7:2F:98:D5:19:2C:00:2A:D5:A8:66:5F:4F:29:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:85:63:53:4b:a0:0c:76:02:d9:23:34:d4:b2:04:d4:bd:7c: ba:26:5c:9c:9a:5a:58:14:d3:1b:29:9d:4f:f9:f2:21:73:e4: 41:b3:16:45:03:4e:1c:28:0a:4e:34:a6:74:e3:3f:f2:a4:0a: 01:c5:36:88:19:96:bf:4f:9d:10:03:74:25:42:93:07:59:22: 68:3b:65:a3:8f:e9:43:3a:1c:d9:51:09:75:78:95:cd:eb:5f: 70:e7:41:2c:b8:06:04:0c:42:3e:0b:31:21:06:86:72:40:2b: 6a:e0:79:a1:7c:6d:9f:81:a4:2e:57:a4:f0:a7:25:07:d1:93: 21:8f:a2:74:00:d9:9f:d0:e0:6c:ae:3e:64:de:8b:8c:47:d0: 67:6f:ce:07:7f:ed:24:e6:dd:ee:57:fc:1c:7b:f9:9f:9d:3a: f7:a2:a4:25:cb:07:1f:4c:bd:cc:3e:8b:b0:fa:bb:f7:44:15: 8a:59:ce:3f:a8:ca:97:52:bf:a9:ac:5c:33:ba:81:6e:92:d9: 31:75:97:11:63:7b:d6:37:d5:c1:1d:31:30:75:dd:3e:a5:f3: af:d3:88:47:61:1d:7b:35:33:16:c6:21:d5:fb:68:9f:1e:a8: e8:73:5b:45:2f:46:f2:a7:56:b9:49:77:ea:42:21:79:06:82: f4:0e:20:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+qli2IhonP/2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OGQ1MjEyOTItM2NlMy00MWY0LThiYzAtZDFlOWI0MTJiNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCCwbPaUJ2T18QI62XPM828P3DKtCooFByLP H6+g72T2w7ItDCgqbYvGRvAxJju1ViL3sbD9twbU3MycW3giaV5CX1Gwdq+Q3Q62 9O7YxpUS2VokZgNykHNpAmj3y10leYxNhdKKMlZv5oA4qVWHXQwP7bcK5sl0v/fZ L5QzrWYnztqMQtth8RtpT+GIQgFBS1FRXCu14kN6hYNzLj50slcTPf/l3f2xp/UB L1MQIWB+FQWAm1KVIpP/pPSii2vC3Ge4ifWfbvqp4mu/0LBtRJVzGoKqzCt++LBf Ep55e7auTrHDl84y4pwCjP8MjFWd37kUKIKExbLam0kIQuf/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpdC1n8xy+Y1RksACrVqGZfTylhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmRmY2FmZGEtOTFmNS0z N2MyLTk4M2UtN2Y5YmExMzI0YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmFY1NLoAx2AtkjNNSyBNS9fLomXJyaWlgU0xspnU/58iFz5EGzFkUD ThwoCk40pnTjP/KkCgHFNogZlr9PnRADdCVCkwdZImg7ZaOP6UM6HNlRCXV4lc3r X3DnQSy4BgQMQj4LMSEGhnJAK2rgeaF8bZ+BpC5XpPCnJQfRkyGPonQA2Z/Q4Gyu PmTei4xH0Gdvzgd/7STm3e5X/Bx7+Z+dOveipCXLBx9Mvcw+i7D6u/dEFYpZzj+o ypdSv6msXDO6gW6S2TF1lxFje9Y31cEdMTB13T6l86/TiEdhHXs1MxbGIdX7aJ8e qOhzW0UvRvKnVrlJd+pCIXkGgvQOIPw= -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:49 2026 by rpki-client