$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa File: 2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa (raw, json) Hash identifier: e6eDH2U/HPF80AdCoJ5oDcIXSpHefqnqCcBqRkE8WlE= Subject key identifier: 08:DB:87:93:66:B1:A0:3F:C9:1B:ED:EA:5E:BB:DE:1C:72:E1:31:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4987CB0E65C251FC054A4A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:cb:0e:65:c2:51:fc:05:4a:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9f8696e8-12e6-4fc9-b651-bf6892e51874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:33:85:bf:e3:f2:c7:8f:98:c5:44:cc:cf: 37:e4:eb:2a:2c:5e:ec:64:26:43:6b:4a:55:7b:5c: 81:b6:30:d4:c9:f5:a9:fe:3d:1b:b0:63:af:29:c4: 8c:3d:c8:f9:ae:f5:dc:4d:75:45:24:a1:fc:3e:e6: 66:18:16:81:6a:56:2b:db:09:a3:8f:bb:e9:14:b2: e3:17:af:10:b4:52:39:76:f6:fe:28:4d:c1:b2:ac: e2:c5:ca:14:22:05:03:89:6b:09:8a:73:ea:d9:6a: eb:9f:6d:e3:d7:1a:d0:26:48:8a:ae:e5:76:6f:04: 91:d4:ca:c8:f4:61:1d:be:c6:fc:de:b1:7d:5c:e4: 57:b6:16:dc:fa:4c:83:b3:67:b8:60:48:f3:06:cb: ac:96:a1:19:82:10:cf:4f:fd:81:47:d5:f5:18:75: 92:a9:97:05:3c:d4:63:f8:b2:69:f5:e2:8a:60:f6: 63:28:7b:38:0b:52:7f:cf:9a:3e:85:c0:b7:95:59: ff:83:88:3e:05:a2:60:e3:28:18:91:de:77:5f:a5: 56:4a:06:a5:6e:e1:09:49:4b:a1:a1:a5:d0:ec:81: 7f:9f:20:1c:71:98:e6:ba:08:db:29:1a:96:cf:aa: b4:e3:80:a5:c0:fb:36:fc:1e:ab:68:c4:9e:93:a2: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DB:87:93:66:B1:A0:3F:C9:1B:ED:EA:5E:BB:DE:1C:72:E1:31:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e0:20:d3:1b:b1:2a:9b:c8:48:a7:69:a8:87:4d:97:d0:0c: dd:ef:22:ba:ce:43:ba:23:a7:ae:d7:52:34:35:c2:de:97:fc: 80:a4:82:bc:1b:38:1a:d8:29:d6:ef:c3:e0:ed:38:32:76:ef: e3:7f:0d:72:53:d9:70:a8:a9:c3:db:f1:83:57:0c:42:98:be: cf:8a:78:7d:2d:5c:d9:03:13:20:cb:83:f5:0e:25:8d:9a:50: 84:72:8e:6d:e3:ae:d6:2b:0b:33:dc:e0:22:0f:c4:a6:84:27: 2b:59:fa:59:44:ac:4f:a8:23:9c:ba:70:66:93:ad:a6:63:2a: 86:f6:67:9e:c0:91:e2:82:4c:7e:7c:0d:71:19:ea:d3:85:10: 19:cc:6e:e4:00:2d:51:72:5e:ba:f2:b1:55:8f:03:d7:77:ec: cb:d8:59:7e:bd:48:7e:ae:85:c6:50:a7:f5:17:ad:a0:68:b5: 91:9e:74:68:43:48:20:c9:22:42:fe:00:dd:e8:13:c6:b3:24: 93:aa:ca:d8:1c:0c:7a:bf:30:b1:55:57:96:f6:7f:e0:39:08: 7a:b3:be:38:5d:64:c5:b9:42:64:5e:79:d3:cd:ab:f0:38:0a: 1c:1d:3e:e2:19:1a:d2:3c:42:b9:6d:e2:bb:5c:2d:57:c8:4c: 54:9b:1a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh8sOZcJR/AVKSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWY4Njk2ZTgtMTJlNi00ZmM5LWI2NTEtYmY2ODkyZTUxODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5kzhb/j8sePmMVEzM835OsqLF7sZCZDa0pV e1yBtjDUyfWp/j0bsGOvKcSMPcj5rvXcTXVFJKH8PuZmGBaBalYr2wmjj7vpFLLj F68QtFI5dvb+KE3BsqzixcoUIgUDiWsJinPq2Wrrn23j1xrQJkiKruV2bwSR1MrI 9GEdvsb83rF9XORXthbc+kyDs2e4YEjzBsuslqEZghDPT/2BR9X1GHWSqZcFPNRj +LJp9eKKYPZjKHs4C1J/z5o+hcC3lVn/g4g+BaJg4ygYkd53X6VWSgalbuEJSUuh oaXQ7IF/nyAccZjmugjbKRqWz6q044ClwPs2/B6raMSek6IQcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjbh5NmsaA/yRvt6l673hxy4TFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU2M2QzYzktNGM3NC0z MGRlLWEwNWMtNGIyMzczZmU0YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvgINMbsSqbyEinaaiHTZfQDN3vIrrOQ7ojp67XUjQ1wt6X/ICkgrwb OBrYKdbvw+DtODJ27+N/DXJT2XCoqcPb8YNXDEKYvs+KeH0tXNkDEyDLg/UOJY2a UIRyjm3jrtYrCzPc4CIPxKaEJytZ+llErE+oI5y6cGaTraZjKob2Z57AkeKCTH58 DXEZ6tOFEBnMbuQALVFyXrrysVWPA9d37MvYWX69SH6uhcZQp/UXraBotZGedGhD SCDJIkL+AN3oE8azJJOqytgcDHq/MLFVV5b2f+A5CHqzvjhdZMW5QmReedPNq/A4 ChwdPuIZGtI8Qrlt4rtcLVfITFSbGvI= -----END CERTIFICATE-----Generated at Tue Sep 29 13:08:09 2026 by rpki-client