$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa File: 17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa (raw, json) Hash identifier: LaHYVHnCjWdz7k9zYbLIGyHf6joxsEZ5RyrNMX/kTsM= Subject key identifier: 7D:88:87:FE:2B:DA:6B:64:05:33:3E:80:57:CB:49:61:1A:52:36:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4972BF6B215395D7B368F280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:bf:6b:21:53:95:d7:b3:68:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2e2f74d-f624-45ea-ba07-890d4b06bfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:1e:5e:7a:c0:4f:48:b8:61:cf:27:09:da: c9:44:40:3a:81:50:fc:f2:37:62:68:2e:64:d7:a1: 3d:52:c2:9c:18:ce:12:d0:3b:f0:83:74:f3:bd:cf: 96:33:2d:c9:43:ed:21:18:80:05:85:06:41:34:07: 17:f0:76:3b:54:e6:39:e7:31:2a:68:5a:a2:36:bb: 97:f4:a3:a9:de:59:73:6d:fd:38:c4:83:83:e0:20: c5:f3:b2:f1:bb:14:96:87:a8:2b:4d:55:82:9b:f7: 56:04:ed:ff:7b:77:86:16:ce:eb:be:c3:03:fe:f2: f4:75:d0:69:97:58:2c:28:d6:69:81:d3:94:ce:4f: e4:d1:fa:ef:64:51:d2:69:d7:3f:55:41:81:a5:10: 95:d5:e5:68:ad:ae:12:f5:23:a3:ed:6a:b5:e5:ae: 2f:19:c5:26:e9:80:aa:f2:db:ad:62:43:37:30:98: 89:f1:ce:06:98:02:87:7d:b6:d2:2f:91:78:06:e0: 5b:3f:bd:00:42:47:ff:93:f3:9a:37:63:f7:3a:7a: 05:c3:4c:ff:11:d5:3c:40:fd:04:0d:59:aa:2c:52: 7b:70:64:f4:9b:bd:9e:e1:31:4b:e9:e0:2b:5e:78: b8:5d:3f:95:41:9e:de:89:55:71:b9:7b:f8:1b:d5: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:88:87:FE:2B:DA:6B:64:05:33:3E:80:57:CB:49:61:1A:52:36:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f8:c1:9f:ea:d6:cc:29:63:9d:5b:e0:91:7d:51:b9:b7:0b: 77:af:7a:ff:15:4e:a1:17:d0:9c:fd:68:04:be:9c:2c:92:77: a6:eb:2f:19:29:ba:70:8b:9b:4c:5e:dd:df:87:20:0f:b0:f5: 12:d7:ae:b6:4d:10:91:cd:dd:74:c9:50:3b:14:eb:30:8a:f3: 65:0c:2c:51:0d:24:42:ff:e8:02:d8:14:01:5a:92:4b:73:42: d9:5e:3e:e9:c9:73:92:2b:72:da:86:6d:d0:35:10:b7:40:46: 6a:9b:fc:22:fe:08:f5:70:6e:c6:dd:27:70:90:cc:c8:60:29: 81:85:54:4e:d7:71:85:12:de:68:b2:17:59:d6:f9:be:25:49: ca:36:d9:ca:81:78:99:d5:6f:14:ec:3f:28:1e:b9:63:49:8a: 23:fb:13:10:c9:5a:e1:79:ff:e9:e6:4e:c9:be:44:b2:a7:0f: e3:b9:9f:c5:55:60:e1:07:e8:98:81:5f:aa:a0:64:a0:51:7f: 7e:03:e9:04:0b:0a:7c:2b:ea:5e:71:53:99:24:ed:1c:22:f6: c2:22:d0:ae:3d:4f:13:bb:65:64:23:90:06:06:45:0c:59:3a: ad:4a:8c:b8:3c:16:10:a0:8a:c7:18:07:7f:46:72:75:e0:c4: e2:c2:c1:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcr9rIVOV17No8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTJlMmY3NGQtZjYyNC00NWVhLWJhMDctODkwZDRiMDZiZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+EeXnrAT0i4Yc8nCdrJREA6gVD88jdiaC5k 16E9UsKcGM4S0Dvwg3Tzvc+WMy3JQ+0hGIAFhQZBNAcX8HY7VOY55zEqaFqiNruX 9KOp3llzbf04xIOD4CDF87LxuxSWh6grTVWCm/dWBO3/e3eGFs7rvsMD/vL0ddBp l1gsKNZpgdOUzk/k0frvZFHSadc/VUGBpRCV1eVora4S9SOj7Wq15a4vGcUm6YCq 8tutYkM3MJiJ8c4GmAKHfbbSL5F4BuBbP70AQkf/k/OaN2P3OnoFw0z/EdU8QP0E DVmqLFJ7cGT0m72e4TFL6eArXni4XT+VQZ7eiVVxuXv4G9UiVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2Ih/4r2mtkBTM+gFfLSWEaUjYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdmN2Q3ZjYtNWM2YS0z OTUzLTlkMWUtYmJkMmFhNmNjNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz4wZ/q1swpY51b4JF9Ubm3C3evev8VTqEX0Jz9aAS+nCySd6brLxkp unCLm0xe3d+HIA+w9RLXrrZNEJHN3XTJUDsU6zCK82UMLFENJEL/6ALYFAFakktz QtlePunJc5IrctqGbdA1ELdARmqb/CL+CPVwbsbdJ3CQzMhgKYGFVE7XcYUS3miy F1nW+b4lSco22cqBeJnVbxTsPygeuWNJiiP7ExDJWuF5/+nmTsm+RLKnD+O5n8VV YOEH6JiBX6qgZKBRf34D6QQLCnwr6l5xU5kk7Rwi9sIi0K49TxO7ZWQjkAYGRQxZ Oq1KjLg8FhCgiscYB39GcnXgxOLCwc0= -----END CERTIFICATE-----Generated at Sat Sep 26 08:21:34 2026 by rpki-client