$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa File: 3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa (raw, json) Hash identifier: r6Vw7Cp/vPL7LXlhvn0LLsEg9P8nFNLM1qBbp/3rkPU= Subject key identifier: E6:41:A6:3D:E4:11:24:FF:E3:12:FF:89:89:95:FD:C1:0A:76:1C:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4988276C47E43E0B02E15240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:27:6c:47:e4:3e:0b:02:e1:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d5702fc2-eb47-491c-b826-d2a8e71273b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:74:f0:8f:4d:de:94:f6:03:e8:76:91:2f:93: 72:21:89:34:3b:4a:e4:f3:4d:8f:d3:3f:d3:57:99: 3a:fd:23:99:4a:0c:e5:78:1f:b0:33:00:b5:85:77: 93:da:e6:d2:09:2e:c3:a8:fd:4a:8d:69:79:4d:77: 46:3c:a5:fb:d6:c6:79:60:b4:cd:b5:1f:8d:1e:38: 16:10:34:07:c8:2f:9d:58:ea:1b:a7:97:c4:46:08: 5b:c8:0c:81:5c:d9:00:6b:0f:67:a2:dd:21:a4:8a: 3d:8e:64:39:30:7a:53:f9:22:a3:12:dd:64:65:ae: f1:d2:5f:97:55:a3:83:48:83:47:98:e7:a1:ad:65: ca:57:38:5b:a3:32:4e:7e:56:9f:6e:b0:ee:51:d8: e0:8e:4e:14:58:d6:bd:25:aa:91:f1:85:ec:4a:f0: 45:b2:50:3f:3c:b8:95:cb:3b:1f:b8:53:72:22:4d: 32:d3:70:cf:2d:6a:d8:7c:df:51:6f:82:ef:79:3a: 12:d1:80:34:40:8e:4f:3a:39:ef:a0:ad:53:08:57: f8:af:ad:28:a3:cb:43:e3:17:a5:8a:94:2c:da:e8: 7d:9b:0e:a0:79:d4:d1:7f:9c:e7:b0:3d:20:e8:73: 36:77:86:ce:0a:be:9e:f1:7a:37:18:d8:4f:88:6a: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:41:A6:3D:E4:11:24:FF:E3:12:FF:89:89:95:FD:C1:0A:76:1C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:fa:c0:d0:1b:e4:88:d4:d2:e7:7c:f7:5e:be:99:53:93:05: 9a:49:17:44:74:cc:a5:9e:fd:96:f3:a7:9e:87:36:72:26:81: c9:37:e2:2b:7e:90:70:f9:00:bc:0f:96:d2:10:b7:51:42:af: c9:86:bf:44:72:de:d3:9d:ea:83:ad:8d:52:7f:34:28:0d:6c: 11:b4:c1:30:58:1d:5b:4f:e5:2a:db:1e:d8:44:f3:55:a0:cf: 60:d0:43:fc:ad:8a:f7:00:c7:b3:6d:1f:55:9d:78:56:4d:3c: 08:09:28:ff:de:8e:81:a6:ee:7d:7c:53:2d:31:26:0c:13:68: fc:d4:99:10:7e:57:d2:4f:f0:b9:02:65:bf:3b:b4:ff:cf:4c: 9d:ad:fd:a5:76:53:bb:b8:d3:a8:4a:3d:fc:77:aa:42:6b:49: 1f:fc:62:4b:f2:e6:00:e6:62:fe:1d:a8:7b:34:14:74:50:66: d5:d9:b1:4c:3f:44:7e:63:29:26:1b:0b:df:e3:2d:ef:89:50: aa:5b:f2:16:95:a4:8a:7e:ac:77:0d:21:b8:f4:88:e6:88:64: e7:ad:aa:3b:d7:29:1a:cc:94:b9:84:05:7d:63:58:e7:43:fc: 9f:03:bb:10:5b:b2:55:20:92:c3:0e:b5:2b:e4:b9:38:41:9c: be:72:dd:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCdsR+Q+CwLhUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU3MDJmYzItZWI0Ny00OTFjLWI4MjYtZDJhOGU3MTI3M2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXTwj03elPYD6HaRL5NyIYk0O0rk802P0z/T V5k6/SOZSgzleB+wMwC1hXeT2ubSCS7DqP1KjWl5TXdGPKX71sZ5YLTNtR+NHjgW EDQHyC+dWOobp5fERghbyAyBXNkAaw9not0hpIo9jmQ5MHpT+SKjEt1kZa7x0l+X VaODSINHmOehrWXKVzhbozJOflafbrDuUdjgjk4UWNa9JaqR8YXsSvBFslA/PLiV yzsfuFNyIk0y03DPLWrYfN9Rb4LveToS0YA0QI5POjnvoK1TCFf4r60oo8tD4xel ipQs2uh9mw6gedTRf5znsD0g6HM2d4bOCr6e8Xo3GNhPiGqYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZBpj3kEST/4xL/iYmV/cEKdhyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2U2MWNkNjgtNDE3OS0z ZDkxLWIzMWQtMGQzNTg3YTM1YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALX6wNAb5IjU0ud8916+mVOTBZpJF0R0zKWe/Zbzp56HNnImgck34it+ kHD5ALwPltIQt1FCr8mGv0Ry3tOd6oOtjVJ/NCgNbBG0wTBYHVtP5SrbHthE81Wg z2DQQ/ytivcAx7NtH1WdeFZNPAgJKP/ejoGm7n18Uy0xJgwTaPzUmRB+V9JP8LkC Zb87tP/PTJ2t/aV2U7u406hKPfx3qkJrSR/8Ykvy5gDmYv4dqHs0FHRQZtXZsUw/ RH5jKSYbC9/jLe+JUKpb8haVpIp+rHcNIbj0iOaIZOetqjvXKRrMlLmEBX1jWOdD /J8DuxBbslUgksMOtSvkuThBnL5y3Sk= -----END CERTIFICATE-----Generated at Tue Oct 6 01:18:07 2026 by rpki-client