$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dc7ab38-b872-3ff1-b511-448797690e0d.roa File: 1dc7ab38-b872-3ff1-b511-448797690e0d.roa (raw, json) Hash identifier: mxRR1QDnr3zNtLzfFQdm9j483Ry9GOA9DiYz23itm2k= Subject key identifier: 64:5A:87:47:46:A2:A4:67:87:21:52:53:01:DE:2A:DD:EE:86:D5:26 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A743F9E5C12A27AF4D5E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dc7ab38-b872-3ff1-b511-448797690e0d.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:43:f9:e5:c1:2a:27:af:4d:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=642f16e1-b035-4efe-9643-5466b25e7056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:8f:28:f8:0d:e4:85:43:34:c3:60:c5:08: 77:bf:84:b1:5d:a0:68:3b:4f:bf:42:62:dc:ac:13: c5:d7:78:7b:c1:89:1d:93:72:34:b7:7f:cd:62:83: 49:90:a1:d7:f4:51:78:6f:43:78:0e:49:08:b2:eb: 44:02:d5:59:5d:e3:5d:45:2a:0c:d9:13:a1:d5:ff: 8b:7d:e0:40:15:42:82:75:53:91:67:c8:4b:8d:b9: b4:a3:38:c8:2a:72:3b:cb:87:1b:75:64:9c:8c:fb: 39:a6:b6:96:e2:e6:a5:d0:62:13:6e:81:d5:7f:e1: ef:0a:8d:26:67:04:61:bb:d9:68:8f:0e:c6:59:fb: 51:84:19:36:dc:4c:eb:7b:12:a2:25:31:85:ca:37: f3:bc:da:1e:0d:67:c6:0f:61:33:50:9c:a1:0e:14: 6f:ff:89:f6:a6:34:77:5f:6b:c7:51:62:3c:e6:89: c8:99:70:94:0b:f8:58:fd:5b:dd:6f:8e:a9:5a:43: 6b:74:38:68:0f:b4:c2:72:28:c5:46:07:2f:f6:af: 14:49:a9:97:a5:44:a7:19:95:c5:c9:42:b2:42:a5: 9c:64:c0:3f:9d:7f:9b:ba:32:95:7a:44:53:c7:c8: d8:45:6a:a6:cc:82:ef:de:99:c6:66:be:38:10:0a: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5A:87:47:46:A2:A4:67:87:21:52:53:01:DE:2A:DD:EE:86:D5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dc7ab38-b872-3ff1-b511-448797690e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:8e:ba:e7:52:54:75:dd:f0:93:61:ce:49:a3:93:5b:99:50: df:16:78:59:e7:55:83:56:de:e4:9c:b1:dd:56:f8:b9:fc:27: 77:f4:f1:d5:1e:b0:a1:f7:c7:a8:f5:ac:9c:02:bb:9e:0e:eb: 47:25:3d:fe:55:bf:53:6b:43:72:35:ec:27:fd:45:37:61:4c: 02:3e:d2:e6:67:c0:f3:70:3c:a0:36:e6:1d:9d:a6:a2:5a:1f: a5:2e:e6:c2:dc:f6:47:09:69:70:f6:59:72:dd:57:7a:77:06: a7:fc:fb:92:5e:3b:cb:1a:e1:ab:b5:6a:7b:40:f5:0e:0e:07: 3e:4a:af:1c:fd:ac:85:73:1e:63:1d:a0:f3:3f:16:dc:65:f4: a5:73:3e:4c:6e:fa:b6:95:6b:37:77:35:4d:75:a8:f5:3e:46: 56:58:9c:d8:1a:9b:0d:e7:5c:73:c4:d5:67:bc:0a:c9:27:be: 3b:52:dc:27:6b:0f:57:9e:b0:7b:d7:2b:e2:a1:7b:dc:3d:9a: 79:67:f1:64:31:2b:66:15:21:b4:96:b2:ef:84:ea:41:d5:ce: f1:f3:31:72:fd:83:af:4e:cb:8e:42:fc:cd:6d:a6:27:3d:d5: e0:61:fc:ee:a1:97:3f:c6:c5:f4:ae:d1:d9:50:1e:a9:9c:52: 84:21:94:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp0P55cEqJ69NXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NjQyZjE2ZTEtYjAzNS00ZWZlLTk2NDMtNTQ2NmIyNWU3MDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQuPKPgN5IVDNMNgxQh3v4SxXaBoO0+/QmLc rBPF13h7wYkdk3I0t3/NYoNJkKHX9FF4b0N4DkkIsutEAtVZXeNdRSoM2ROh1f+L feBAFUKCdVORZ8hLjbm0ozjIKnI7y4cbdWScjPs5praW4ual0GITboHVf+HvCo0m ZwRhu9lojw7GWftRhBk23EzrexKiJTGFyjfzvNoeDWfGD2EzUJyhDhRv/4n2pjR3 X2vHUWI85onImXCUC/hY/Vvdb46pWkNrdDhoD7TCcijFRgcv9q8USamXpUSnGZXF yUKyQqWcZMA/nX+bujKVekRTx8jYRWqmzILv3pnGZr44EAraQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRah0dGoqRnhyFSUwHeKt3uhtUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWRjN2FiMzgtYjg3Mi0z ZmYxLWI1MTEtNDQ4Nzk3NjkwZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSOuudSVHXd8JNhzkmjk1uZUN8WeFnnVYNW3uScsd1W+Ln8J3f08dUe sKH3x6j1rJwCu54O60clPf5Vv1NrQ3I17Cf9RTdhTAI+0uZnwPNwPKA25h2dpqJa H6Uu5sLc9kcJaXD2WXLdV3p3Bqf8+5JeO8sa4au1antA9Q4OBz5Krxz9rIVzHmMd oPM/Ftxl9KVzPkxu+raVazd3NU11qPU+RlZYnNgamw3nXHPE1We8CsknvjtS3Cdr D1eesHvXK+Khe9w9mnln8WQxK2YVIbSWsu+E6kHVzvHzMXL9g69Oy45C/M1tpic9 1eBh/O6hlz/GxfSu0dlQHqmcUoQhlMg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:08 2025 by rpki-client