$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa File: 2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa (raw, json) Hash identifier: N1Sah9PyoGWBNl4k81YqPVJjXKyRKkgqoyISviavlQs= Subject key identifier: 7E:39:6C:64:C5:E2:DD:5A:B5:1F:FB:84:D6:22:01:47:5F:B3:27:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A7651CA7D0225F1ECAC898 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:65:1c:a7:d0:22:5f:1e:ca:c8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c3493735-28df-41f9-876d-7e55867133f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:ae:ef:c8:09:32:19:92:c2:f2:49:30:59: b1:73:c8:70:9b:2b:7a:c6:7a:b4:c1:1f:eb:d4:da: 16:76:d7:e5:bc:e4:aa:b9:33:2a:a3:14:a0:31:83: 69:3f:40:07:81:79:98:60:9f:56:02:39:8c:d6:e4: c7:f0:f4:1a:19:e7:c8:80:1b:ea:7b:21:09:68:84: 98:59:9d:e8:39:f3:43:b8:89:f3:17:bc:9f:32:d0: 11:ed:24:b5:5a:5a:2c:55:52:0d:7c:24:dc:3e:8a: 4a:84:61:69:e3:13:88:23:df:9c:2e:93:6d:ce:89: f0:ba:6d:b0:8d:a3:ba:7b:b0:7e:cd:3e:30:52:1c: b4:4f:a8:d8:94:21:7c:ee:ac:29:2a:d6:1d:71:8c: fc:3e:a6:0a:90:dc:90:2a:8d:2a:06:ea:17:7f:0f: 5e:77:a6:0f:72:22:ee:01:13:67:41:82:3a:c1:03: df:03:b7:73:7d:3a:5d:42:ed:31:24:14:d8:34:93: d7:23:8d:4a:43:c7:ce:1e:da:11:2d:cf:3e:f7:6a: d8:6a:64:b7:62:bb:29:38:bf:90:64:3f:ac:81:a1: 5f:83:89:ea:09:aa:31:d2:fe:37:32:42:28:bc:9a: 01:4f:64:46:be:bb:fa:25:6d:f3:7e:c1:a3:61:17: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:39:6C:64:C5:E2:DD:5A:B5:1F:FB:84:D6:22:01:47:5F:B3:27:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f8:a8:cc:e7:85:55:43:df:3a:2a:80:88:c3:3e:31:de:0a: e9:4d:f3:14:8e:2c:ac:7f:00:de:2c:80:31:f0:8f:45:2f:b7: 70:03:ee:50:dd:9f:bf:08:19:b0:76:b4:52:7a:c8:84:9b:27: 9b:2d:cf:2a:85:ad:fb:25:df:b6:a8:7a:57:cd:1d:4c:36:45: c8:ad:66:81:b0:0a:6e:89:66:67:91:3e:ee:5d:07:e3:4d:b2: 0e:1f:15:98:96:47:a3:e2:a2:2a:af:50:bb:e9:39:2e:8a:93: 82:ca:e8:2a:76:52:c0:1f:cd:7d:46:f8:90:dd:0e:ee:3e:3b: 9b:09:da:a7:4f:be:f0:17:be:77:a6:3e:88:22:aa:05:c0:07: 09:0a:7e:bb:8d:48:d1:ec:00:e3:08:46:a2:90:fc:b4:e6:83: 8e:8e:d7:13:4b:16:1d:36:46:fc:ce:17:8e:c7:75:a6:46:9c: 18:cc:2f:8c:2b:37:7d:8e:23:17:64:90:ef:36:71:11:6c:e7: b2:f5:7d:d8:2e:69:a3:b3:a4:03:5f:d0:09:77:0a:be:dd:74: d3:01:a1:4b:5a:26:87:51:59:81:22:04:7a:76:84:4b:f9:df: 44:7a:6c:2b:16:00:ae:c1:95:85:05:fd:d9:d7:ae:65:1f:46: 64:23:90:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2Ucp9AiXx7KyJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzM0OTM3MzUtMjhkZi00MWY5LTg3NmQtN2U1NTg2NzEzM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCCu78gJMhmSwvJJMFmxc8hwmyt6xnq0wR/r 1NoWdtflvOSquTMqoxSgMYNpP0AHgXmYYJ9WAjmM1uTH8PQaGefIgBvqeyEJaISY WZ3oOfNDuInzF7yfMtAR7SS1WlosVVINfCTcPopKhGFp4xOII9+cLpNtzonwum2w jaO6e7B+zT4wUhy0T6jYlCF87qwpKtYdcYz8PqYKkNyQKo0qBuoXfw9ed6YPciLu ARNnQYI6wQPfA7dzfTpdQu0xJBTYNJPXI41KQ8fOHtoRLc8+92rYamS3YrspOL+Q ZD+sgaFfg4nqCaox0v43MkIovJoBT2RGvrv6JW3zfsGjYRcbzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH45bGTF4t1atR/7hNYiAUdfsyciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU2M2QzYzktNGM3NC0z MGRlLWEwNWMtNGIyMzczZmU0YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH74qMznhVVD3zoqgIjDPjHeCulN8xSOLKx/AN4sgDHwj0Uvt3AD7lDd n78IGbB2tFJ6yISbJ5stzyqFrfsl37aoelfNHUw2RcitZoGwCm6JZmeRPu5dB+NN sg4fFZiWR6PioiqvULvpOS6Kk4LK6Cp2UsAfzX1G+JDdDu4+O5sJ2qdPvvAXvnem PogiqgXABwkKfruNSNHsAOMIRqKQ/LTmg46O1xNLFh02RvzOF47HdaZGnBjML4wr N32OIxdkkO82cRFs57L1fdguaaOzpANf0Al3Cr7ddNMBoUtaJodRWYEiBHp2hEv5 30R6bCsWAK7BlYUF/dnXrmUfRmQjkPE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:58 2025 by rpki-client