$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa File: 08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa (raw, json) Hash identifier: 7z0vy05qVrF2ZAqPH2Q2c7gd7ty7u8TAZjsJnZTmZjI= Subject key identifier: A2:8E:F0:AF:17:1E:53:A1:EF:AB:D2:D6:46:AD:2B:49:94:F7:BA:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F498A6D7C2AD975E9D5D74700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:6d:7c:2a:d9:75:e9:d5:d7:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f330ff0-8c02-45f9-a581-e4a9f0846db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d6:45:fc:9f:31:00:dd:c8:a8:24:1f:82:72: 4e:a3:d4:d2:ed:97:30:1c:39:05:97:be:9c:90:6d: 28:fe:4d:3b:4a:8e:ab:4c:05:45:41:3e:b0:df:42: 01:ba:27:3d:8f:10:86:ae:98:83:37:fe:3e:66:dd: 38:d3:50:0b:38:a9:41:73:dd:0e:26:f8:bf:f3:f4: 2f:5c:b8:b3:c7:7f:f7:f2:ed:05:4d:ba:55:45:f1: 18:21:a8:9b:6d:f4:df:1b:b9:c6:b9:5d:92:0d:9a: e5:0f:9e:bb:60:4b:56:8d:ac:7c:ea:d2:8a:47:b3: d4:09:ec:20:d1:bc:c3:9e:5a:6a:47:29:a1:4e:93: a8:2c:bd:5b:d8:62:f8:e8:f3:e4:69:d2:c5:e9:5a: 71:3f:29:a8:fa:dd:83:5a:6f:99:b8:69:8e:e6:6b: e0:8e:8c:77:35:cd:0d:9c:9a:f1:e4:7e:4e:96:5d: c3:9e:69:dd:3a:b5:4d:51:e9:ed:23:d8:f1:9f:8c: ed:59:4b:93:4c:83:9b:4e:12:27:87:91:f9:ac:03: 69:75:4f:13:38:b3:21:2b:3e:f6:6b:14:8a:25:bd: 6c:5c:e8:3f:67:0b:20:32:b5:94:24:ba:b3:5a:f4: 75:4f:5b:9d:29:d3:cc:18:5d:30:ab:dc:8a:86:05: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8E:F0:AF:17:1E:53:A1:EF:AB:D2:D6:46:AD:2B:49:94:F7:BA:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0c:07:ec:d6:11:1a:94:6f:c0:72:eb:48:9e:2a:64:85:6b: c7:f3:50:18:e9:80:0d:ce:13:2b:0c:32:21:a4:a6:74:90:9d: 98:99:44:5f:f5:ef:b7:1a:9f:e7:ca:f6:49:20:bc:fb:61:07: 52:73:8e:2b:1e:d4:18:00:85:1b:30:5a:f7:a1:ea:43:f4:94: d1:79:6a:2d:e7:af:ff:fc:6b:6b:da:21:38:cc:b9:cc:13:9e: eb:b0:4e:89:56:5e:62:14:d4:28:d8:56:cc:1f:4a:9c:b3:f7: 3b:17:17:b1:6d:87:bf:da:73:bb:23:e1:a0:3d:76:6b:80:57: 66:37:5f:b0:21:2d:fe:c3:5e:57:c7:68:ef:14:83:9b:29:58: 44:81:ec:f5:b4:9e:c4:81:49:67:4d:53:de:a4:5d:e5:0e:80: 7b:a5:93:df:66:c0:cb:49:3d:2a:00:7a:66:0a:5c:78:c5:49: c6:74:e4:be:03:d6:53:4d:1c:19:17:2c:83:ea:d5:b1:33:76: a1:de:af:53:74:f2:3b:a9:43:98:65:c0:8c:b6:b3:e0:84:3f: 72:41:c6:80:5f:ad:eb:29:e3:27:7a:ac:c9:3b:0a:24:82:4e: 78:a3:df:26:dc:c1:19:f8:97:2c:83:16:2c:ce:a5:0b:f1:88: 19:25:77:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jim18Ktl16dXXRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2YzMzBmZjAtOGMwMi00NWY5LWE1ODEtZTRhOWYwODQ2ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNZF/J8xAN3IqCQfgnJOo9TS7ZcwHDkFl76c kG0o/k07So6rTAVFQT6w30IBuic9jxCGrpiDN/4+Zt0401ALOKlBc90OJvi/8/Qv XLizx3/38u0FTbpVRfEYIaibbfTfG7nGuV2SDZrlD567YEtWjax86tKKR7PUCewg 0bzDnlpqRymhTpOoLL1b2GL46PPkadLF6VpxPymo+t2DWm+ZuGmO5mvgjox3Nc0N nJrx5H5Oll3DnmndOrVNUentI9jxn4ztWUuTTIObThInh5H5rANpdU8TOLMhKz72 axSKJb1sXOg/ZwsgMrWUJLqzWvR1T1udKdPMGF0wq9yKhgU4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKO8K8XHlOh76vS1katK0mU97ohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDhlYzQ0MTQtNjQ5Ni0z ZmQ2LThmNzItZjNkMDVlMzU4NmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUMB+zWERqUb8By60ieKmSFa8fzUBjpgA3OEysMMiGkpnSQnZiZRF/1 77can+fK9kkgvPthB1Jzjise1BgAhRswWveh6kP0lNF5ai3nr//8a2vaITjMucwT nuuwTolWXmIU1CjYVswfSpyz9zsXF7Fth7/ac7sj4aA9dmuAV2Y3X7AhLf7DXlfH aO8Ug5spWESB7PW0nsSBSWdNU96kXeUOgHulk99mwMtJPSoAemYKXHjFScZ05L4D 1lNNHBkXLIPq1bEzdqHer1N08jupQ5hlwIy2s+CEP3JBxoBfresp4yd6rMk7CiSC Tnij3ybcwRn4lyyDFizOpQvxiBkld7k= -----END CERTIFICATE-----Generated at Sun Oct 11 11:26:16 2026 by rpki-client