$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa File: 3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa (raw, json) Hash identifier: r6+LimC5w+CIj8XxI+bbBeegMJ9FOSfUJBVgZHVMvvs= Subject key identifier: E7:8E:31:3A:AC:D1:6E:E4:AD:33:5D:FA:62:59:54:F5:1C:45:B6:5F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824B009B311C8575034ACE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.29.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:b0:09:b3:11:c8:57:50:34:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=9b7b7e6f-b4dc-40c1-9747-2e74b0f92f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:e4:50:7b:68:2a:c4:d3:c6:b5:76:07:e0: fc:b7:70:9f:06:36:eb:5d:ac:03:ba:46:a8:01:4e: 08:ce:cd:a5:fd:b6:31:24:aa:56:8a:54:8b:ae:d5: 48:68:8b:b7:5b:c8:41:ad:16:36:e0:63:81:04:a1: 8a:09:a0:a4:78:55:f8:9d:45:84:8f:06:10:aa:3d: 37:90:1b:7b:85:cd:7d:6f:89:0d:14:fa:17:98:2e: fe:3e:17:b9:4f:31:8b:cb:d5:7e:6b:60:09:7d:c8: a7:e0:34:b7:e1:44:1e:00:3f:4d:a2:ac:1a:c1:51: d9:65:f3:3b:28:b2:2d:5b:4b:6f:10:04:68:f8:10: 17:9f:93:42:95:73:3a:86:57:42:00:79:dc:b1:36: eb:1c:55:24:42:39:e2:cf:15:5c:8e:ff:fd:0a:33: 74:d4:a4:f2:fa:6f:f3:28:37:d6:27:cf:bb:61:94: 3d:dd:7a:0a:72:6b:70:24:a3:a7:c6:3a:da:21:72: f2:ce:ef:7d:e2:ad:8a:03:31:52:9f:32:55:0f:34: 13:d7:38:36:5b:b7:ea:e1:82:4a:59:11:21:6a:9c: cb:99:0c:eb:a1:cd:97:e4:0f:a8:f5:5d:a0:a1:5c: 96:51:e6:e8:55:0e:9f:d7:e7:57:19:88:b3:dd:fa: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8E:31:3A:AC:D1:6E:E4:AD:33:5D:FA:62:59:54:F5:1C:45:B6:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:55:93:ab:18:44:df:75:85:40:2c:c9:26:e9:ec:e8:88:f0: 17:00:15:6d:13:7a:06:af:98:e1:57:24:bb:6f:d3:16:d4:64: 65:37:75:ec:ae:e5:b5:5c:20:ed:8b:f0:ee:f5:f1:7f:d4:43: 54:c6:ed:92:2e:04:1d:29:4a:c2:aa:17:13:fb:a4:b0:3d:2c: 22:dc:5c:74:ac:a7:02:ca:96:53:1f:a8:31:fe:8e:d1:30:93: 92:38:4a:a3:5c:0e:ca:43:77:07:ca:10:d9:64:be:a2:1d:7e: 40:5e:b5:e3:5e:c2:d7:61:16:4c:48:dd:59:56:90:ed:27:2e: d8:31:48:b3:b2:58:ba:89:b3:bd:79:03:10:b0:61:fc:16:d0: ef:fb:0f:af:28:45:a0:68:7b:f1:35:0c:72:3f:4e:fc:02:a9: 12:ff:49:84:47:03:f0:37:48:25:ba:01:a6:09:72:8d:9d:e5: f7:a6:7b:d5:a7:29:49:8c:24:82:cc:36:c6:c7:e5:3d:b8:ad: f0:4e:2a:7f:58:b4:85:57:f5:cb:a8:25:b6:08:27:5b:61:dc: cc:0c:fe:7d:ae:f7:fa:0d:8b:64:6a:95:1e:39:a5:cd:d6:ae: 2e:75:1c:df:7f:4f:3a:5c:25:c7:09:63:8a:54:a0:24:0d:a3: f4:a0:51:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLAJsxHIV1A0rOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk OWI3YjdlNmYtYjRkYy00MGMxLTk3NDctMmU3NGIwZjkyZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9HkUHtoKsTTxrV2B+D8t3CfBjbrXawDukao AU4Izs2l/bYxJKpWilSLrtVIaIu3W8hBrRY24GOBBKGKCaCkeFX4nUWEjwYQqj03 kBt7hc19b4kNFPoXmC7+Phe5TzGLy9V+a2AJfcin4DS34UQeAD9NoqwawVHZZfM7 KLItW0tvEARo+BAXn5NClXM6hldCAHncsTbrHFUkQjnizxVcjv/9CjN01KTy+m/z KDfWJ8+7YZQ93XoKcmtwJKOnxjraIXLyzu994q2KAzFSnzJVDzQT1zg2W7fq4YJK WREhapzLmQzroc2X5A+o9V2goVyWUeboVQ6f1+dXGYiz3fo4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeOMTqs0W7krTNd+mJZVPUcRbZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2IyZGEwYTEtZWNhNy0z NzdjLThhYTYtZDg2ZjA5Yzk4NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxVk6sYRN91hUAsySbp7OiI8BcAFW0TegavmOFXJLtv0xbUZGU3deyu 5bVcIO2L8O718X/UQ1TG7ZIuBB0pSsKqFxP7pLA9LCLcXHSspwLKllMfqDH+jtEw k5I4SqNcDspDdwfKENlkvqIdfkBeteNewtdhFkxI3VlWkO0nLtgxSLOyWLqJs715 AxCwYfwW0O/7D68oRaBoe/E1DHI/TvwCqRL/SYRHA/A3SCW6AaYJco2d5feme9Wn KUmMJILMNsbH5T24rfBOKn9YtIVX9cuoJbYIJ1th3MwM/n2u9/oNi2RqlR45pc3W ri51HN9/TzpcJccJY4pUoCQNo/SgUcI= -----END CERTIFICATE-----Generated at Thu Jul 23 23:18:59 2026 by rpki-client