$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa File: 3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa (raw, json) Hash identifier: MGYOCRQ+FUELOzAXcMFgwNcM2k+zZ8Ti42147NVfsxU= Subject key identifier: 11:0C:E5:95:1D:73:73:A0:C9:31:D3:35:D3:BC:97:9E:33:FC:8A:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D19B4E7A04F24A65390633100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 104.29.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:e7:a0:4f:24:a6:53:90:63:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=6222a828-02ca-4ba9-b852-c05de9a6ee70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:35:21:9c:51:67:6c:a0:25:24:a9:63:82: 2f:49:e9:40:10:15:82:02:22:b4:5f:f3:b0:c6:fb: 20:7d:17:af:e6:96:b6:e5:ae:a7:84:f7:7a:c7:0a: 77:13:2c:76:08:db:47:07:39:20:3d:97:cd:09:c8: ef:92:cf:0f:4c:70:2c:04:04:b3:e8:9e:ee:ca:ca: 1f:67:e1:3d:7d:5f:8e:95:ec:3f:e0:95:35:8c:21: 13:0b:71:31:81:b3:40:10:51:48:c9:86:a5:df:68: 88:ef:9a:68:f5:47:80:1d:3e:35:b4:5f:c2:4e:eb: e7:1f:ae:5d:ea:24:46:9e:86:e4:6a:3d:db:93:45: d8:e6:6c:0f:de:79:df:ec:16:f7:2d:da:b4:eb:b5: 5b:7a:2f:aa:0d:a7:0b:1e:5f:d9:65:d3:2e:bd:b0: a6:96:2f:2c:7e:92:62:41:70:ed:13:b6:3d:96:c1: 6f:d4:14:6c:8e:02:64:23:5d:41:37:95:33:f6:cf: ce:f2:bf:f4:76:f2:c3:77:86:cd:a7:50:aa:6f:53: d9:bb:90:e7:69:b5:0a:58:2a:36:39:1b:30:83:ba: e3:3b:bd:65:18:4b:1b:7a:af:aa:ef:a4:ed:ea:a6: 9e:de:ab:40:d1:4b:f0:51:83:e5:62:8f:d3:62:2f: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0C:E5:95:1D:73:73:A0:C9:31:D3:35:D3:BC:97:9E:33:FC:8A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:47:21:fc:d0:6c:78:6e:f1:7c:00:4d:d2:b1:6a:93:ac:fa: 5c:7a:65:6c:02:d0:41:a5:c1:aa:fe:96:57:db:45:84:34:c8: 0d:b3:48:55:97:8d:ae:0a:4e:ee:c4:42:68:1b:94:10:82:7a: 96:57:dd:68:f7:88:ad:ae:45:a7:60:62:d3:a2:10:d7:40:7e: 9e:d3:f5:8f:7a:d1:10:e4:f0:ea:1c:24:56:0a:01:9a:c3:05: 67:f9:fc:ff:51:3b:dd:df:e7:65:61:d3:d3:be:00:c9:d9:73: 17:e7:83:84:24:a7:51:11:6a:19:56:08:5e:c1:f1:06:5a:70: cd:d2:c3:5e:e2:a6:19:23:a7:b8:44:17:01:31:09:5c:b0:8c: b9:16:45:07:4b:6e:dd:39:9f:9a:6f:1b:dc:8a:50:23:3d:9a: d5:d8:21:a2:75:9d:b5:c2:c3:09:ec:59:d0:3b:a8:f6:e3:11: 31:fc:10:75:16:9d:24:11:a2:64:f4:5f:20:37:6c:db:d9:02: 66:44:33:aa:1f:ff:07:26:ff:51:54:36:f7:dd:9a:48:09:95: 26:a9:ae:8f:fb:9e:b1:48:ab:ac:fc:09:4a:b9:98:a4:30:2f: 97:1b:c9:31:f8:ed:65:14:18:b5:cd:21:f3:7b:72:0f:4b:7f: 54:8f:bb:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtOegTySmU5BjMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NjIyMmE4MjgtMDJjYS00YmE5LWI4NTItYzA1ZGU5YTZlZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNU1IZxRZ2ygJSSpY4IvSelAEBWCAiK0X/Ow xvsgfRev5pa25a6nhPd6xwp3Eyx2CNtHBzkgPZfNCcjvks8PTHAsBASz6J7uysof Z+E9fV+Olew/4JU1jCETC3ExgbNAEFFIyYal32iI75po9UeAHT41tF/CTuvnH65d 6iRGnobkaj3bk0XY5mwP3nnf7Bb3Ldq067Vbei+qDacLHl/ZZdMuvbCmli8sfpJi QXDtE7Y9lsFv1BRsjgJkI11BN5Uz9s/O8r/0dvLDd4bNp1Cqb1PZu5DnabUKWCo2 ORswg7rjO71lGEsbeq+q76Tt6qae3qtA0UvwUYPlYo/TYi9tQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEM5ZUdc3OgyTHTNdO8l54z/IohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzk4MmFlZGUtZmMxYS0z ZGQzLTk1YjEtMDI2ZTAxYzlmMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVHIfzQbHhu8XwATdKxapOs+lx6ZWwC0EGlwar+llfbRYQ0yA2zSFWX ja4KTu7EQmgblBCCepZX3Wj3iK2uRadgYtOiENdAfp7T9Y960RDk8OocJFYKAZrD BWf5/P9RO93f52Vh09O+AMnZcxfng4Qkp1ERahlWCF7B8QZacM3Sw17iphkjp7hE FwExCVywjLkWRQdLbt05n5pvG9yKUCM9mtXYIaJ1nbXCwwnsWdA7qPbjETH8EHUW nSQRomT0XyA3bNvZAmZEM6of/wcm/1FUNvfdmkgJlSapro/7nrFIq6z8CUq5mKQw L5cbyTH47WUUGLXNIfN7cg9Lf1SPu48= -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:51 2026 by rpki-client