$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa File: 06573e63-97cb-3095-bb07-f1aff6375b83.roa (raw, json) Hash identifier: JrIfyr6e3xH+TTa6aR6wgv29iitzZNpiSEd2A98g8N8= Subject key identifier: 85:3E:5D:49:AF:40:1C:01:28:5A:DE:7B:FF:69:C0:D9:A8:34:94:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A7246A6BD431A49B527B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:24:6a:6b:d4:31:a4:9b:52:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=54806c35-4766-43d1-b867-8f6e3de8e1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:81:64:8b:f3:b8:92:41:2e:e9:14:5e:2a: 3c:a4:7a:8f:7d:48:6a:ff:88:67:30:64:77:54:1b: 76:f5:b6:11:bd:be:20:b2:2f:0c:e8:4d:84:53:bb: de:6f:dd:23:c5:48:8a:55:9d:a6:30:65:fc:52:2f: 1c:29:1a:85:18:92:87:62:a0:ef:a0:4b:91:67:c3: 64:c7:33:6f:7d:12:00:a8:55:72:88:35:6c:fb:cd: 1b:66:d6:9c:27:53:1e:2d:27:14:46:c9:35:20:0b: ba:6c:26:2f:f7:32:9f:11:f1:17:a0:9e:3f:c8:85: d3:f3:b3:1c:b5:5b:65:17:fc:88:fc:5c:e2:4b:92: 66:7b:fa:25:9f:22:3b:ca:6d:dd:6f:e7:fc:c3:e3: 07:8c:1e:5a:d6:89:0c:80:d4:6b:64:97:52:5f:5c: 6d:6c:06:34:e8:18:45:91:9c:5a:e8:11:c6:d9:61: c6:a9:02:f7:e5:79:07:55:5b:a1:90:f1:76:e6:7a: ed:81:a7:60:15:20:d1:99:3c:f8:ad:50:16:d5:18: 96:9a:62:15:06:db:cd:4e:4d:1d:b3:a1:da:8a:33: 6c:0f:2f:26:96:ec:07:25:35:5d:e2:23:cc:b1:f9: 3d:a6:b6:f7:d0:06:7f:bd:ad:30:22:e7:18:a2:c7: 96:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:5D:49:AF:40:1C:01:28:5A:DE:7B:FF:69:C0:D9:A8:34:94:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:15:1b:a2:a7:70:a1:9a:14:b8:00:3c:68:7f:08:5a:7a:1d: eb:db:92:84:e5:6e:9d:6a:78:57:3f:02:af:bf:f6:13:19:12: b3:96:93:ec:16:17:51:2f:0a:7d:9e:0b:ce:e8:26:1f:8f:8b: 9e:44:6c:27:b4:5f:08:61:5c:b7:1a:2e:ac:24:42:16:db:61: b6:03:18:38:aa:aa:ce:3c:df:d0:f2:ae:3f:ce:97:7f:43:94: d3:04:4c:65:78:28:77:c1:22:d5:ec:fd:bb:94:25:ba:21:b3: 92:8b:03:79:98:bd:af:57:ce:58:da:23:19:9f:86:84:fb:bc: c6:49:c0:e1:36:35:ec:a2:bf:0b:44:5b:bf:e3:db:47:02:24: 45:77:ea:85:11:9a:ff:4e:eb:3d:b1:2c:e7:0c:00:95:f0:1c: 20:99:a2:e0:25:65:b1:e1:8c:5b:a3:46:c3:e9:75:b6:03:36: c1:4d:94:91:d1:e2:b1:5a:9c:b5:88:b0:24:2b:3f:3c:ab:1a: 58:78:a7:88:ab:9f:35:db:30:5e:3b:02:82:e7:55:ae:bf:ee: ec:12:5e:36:03:55:bc:e4:8f:88:bc:05:6c:dd:de:8b:6f:2e: b8:99:43:be:36:c7:9e:4a:d0:7c:91:2e:5c:a6:46:60:ef:89: 43:d8:f3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpyRqa9QxpJtSe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NTQ4MDZjMzUtNDc2Ni00M2QxLWI4NjctOGY2ZTNkZThlMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmSBZIvzuJJBLukUXio8pHqPfUhq/4hnMGR3 VBt29bYRvb4gsi8M6E2EU7veb90jxUiKVZ2mMGX8Ui8cKRqFGJKHYqDvoEuRZ8Nk xzNvfRIAqFVyiDVs+80bZtacJ1MeLScURsk1IAu6bCYv9zKfEfEXoJ4/yIXT87Mc tVtlF/yI/FziS5Jme/olnyI7ym3db+f8w+MHjB5a1okMgNRrZJdSX1xtbAY06BhF kZxa6BHG2WHGqQL35XkHVVuhkPF25nrtgadgFSDRmTz4rVAW1RiWmmIVBtvNTk0d s6HaijNsDy8mluwHJTVd4iPMsfk9prb30AZ/va0wIucYoseW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU+XUmvQBwBKFree/9pwNmoNJQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDY1NzNlNjMtOTdjYi0z MDk1LWJiMDctZjFhZmY2Mzc1YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoVG6KncKGaFLgAPGh/CFp6HevbkoTlbp1qeFc/Aq+/9hMZErOWk+wW F1EvCn2eC87oJh+Pi55EbCe0XwhhXLcaLqwkQhbbYbYDGDiqqs4839Dyrj/Ol39D lNMETGV4KHfBItXs/buUJbohs5KLA3mYva9XzljaIxmfhoT7vMZJwOE2NeyivwtE W7/j20cCJEV36oURmv9O6z2xLOcMAJXwHCCZouAlZbHhjFujRsPpdbYDNsFNlJHR 4rFanLWIsCQrPzyrGlh4p4irnzXbMF47AoLnVa6/7uwSXjYDVbzkj4i8BWzd3otv LriZQ742x55K0HyRLlymRmDviUPY8/0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:58 2025 by rpki-client