$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3eae6188-900e-3023-ba80-0aa4fa0e6f26.roa File: 3eae6188-900e-3023-ba80-0aa4fa0e6f26.roa (raw, json) Hash identifier: Z5lRaUKe0oSUawUkdoEIgXcBlTI1yEKYb+hE0dCb+AM= Subject key identifier: C6:B4:5B:ED:7F:02:49:BC:90:B7:21:85:B1:1F:D2:FE:35:A6:F4:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A768E93A01813D61302580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3eae6188-900e-3023-ba80-0aa4fa0e6f26.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:68:e9:3a:01:81:3d:61:30:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=d0cfe238-5701-4d0d-99d6-1b866b72b1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:4b:3d:64:d3:05:60:7e:d6:bc:8a:83:3a: 6d:5a:0a:d5:6d:4b:ad:ac:f8:dd:b1:93:e9:4f:de: 38:d8:09:0d:ea:ad:8a:66:ca:7b:9f:8e:89:e9:06: 14:4e:fb:74:63:65:37:bc:65:ab:0d:74:93:5b:fc: 3e:c0:4e:77:e3:e1:d4:f4:3d:83:05:e2:67:1c:9f: e3:c1:74:ef:1c:56:5b:f6:26:70:d8:18:58:63:30: 08:29:8a:7f:0e:33:e4:dd:48:71:41:2f:63:67:0b: 66:4f:5a:85:96:86:59:a9:a7:5f:6f:a7:ad:c2:6e: 8d:a4:ab:fb:3e:b2:67:08:fd:84:1d:e2:4f:f3:00: b2:cb:27:17:92:c7:a1:ee:67:bf:4c:4c:60:2d:95: d4:c1:25:ed:7a:0b:ba:ed:72:af:b4:e5:41:91:08: ab:5c:9a:c7:c7:54:8f:a4:60:b6:45:87:81:1f:5b: 9a:c2:50:78:59:df:d7:dc:0f:cb:ee:c1:84:cd:cf: 08:02:a6:6f:c2:33:87:9b:ac:f6:ea:77:70:f9:8a: b8:67:b9:2a:9e:ea:4b:a5:b4:38:cf:70:b7:ec:10: b2:f1:e7:ef:f0:66:32:c4:e6:ef:e6:e7:03:32:81: cd:39:a6:67:76:f7:d6:3b:d0:8b:2b:02:ae:54:74: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B4:5B:ED:7F:02:49:BC:90:B7:21:85:B1:1F:D2:FE:35:A6:F4:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3eae6188-900e-3023-ba80-0aa4fa0e6f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:af:5a:f4:a8:4e:89:ec:3c:49:36:d6:90:3b:a9:e7:0f:e0: 00:f9:61:40:82:b6:25:b6:25:dc:51:d7:3f:66:12:6f:89:bd: d5:52:a2:65:54:8e:d9:b9:03:79:fd:77:c2:12:9d:60:43:20: 09:bb:b6:f9:5e:74:c3:bb:f3:eb:6d:0e:86:89:f1:27:bb:d4: 5f:58:5b:8b:17:d9:71:97:7d:d1:ef:74:04:d0:56:6d:0a:f0: 1d:e0:6e:81:98:fa:8f:29:e1:44:3c:c0:81:bf:4a:ab:69:63: d1:17:f5:85:26:9f:10:e9:22:c0:14:70:ae:8e:4e:09:d6:ae: c0:26:8d:cb:7a:7f:df:2d:aa:eb:58:bd:1a:90:85:9f:26:cd: e8:13:1f:74:a2:80:92:a8:26:aa:ae:bb:78:5a:a2:35:11:8b: ae:ce:14:d9:ef:8c:25:2d:a9:c2:a2:1f:48:af:64:2a:e0:e2: 66:37:fe:8d:64:8a:9c:2d:f9:1a:cd:a8:b3:3f:cc:b7:dd:7c: 84:38:db:74:cc:63:54:04:fd:5e:1c:61:1c:ae:f0:14:7a:6f: 5a:bd:49:5b:d7:9b:69:0f:73:ca:db:5b:2a:9e:f5:39:c0:e7: 1d:c7:6a:f7:0f:a9:1b:fc:5a:8f:7f:df:d4:dc:e6:75:bb:d4: cd:e8:6b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2jpOgGBPWEwJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZDBjZmUyMzgtNTcwMS00ZDBkLTk5ZDYtMWI4NjZiNzJiMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOpLPWTTBWB+1ryKgzptWgrVbUutrPjdsZPp T9442AkN6q2KZsp7n46J6QYUTvt0Y2U3vGWrDXSTW/w+wE534+HU9D2DBeJnHJ/j wXTvHFZb9iZw2BhYYzAIKYp/DjPk3UhxQS9jZwtmT1qFloZZqadfb6etwm6NpKv7 PrJnCP2EHeJP8wCyyycXkseh7me/TExgLZXUwSXtegu67XKvtOVBkQirXJrHx1SP pGC2RYeBH1uawlB4Wd/X3A/L7sGEzc8IAqZvwjOHm6z26ndw+Yq4Z7kqnupLpbQ4 z3C37BCy8efv8GYyxObv5ucDMoHNOaZndvfWO9CLKwKuVHRXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa0W+1/Akm8kLchhbEf0v41pvQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2VhZTYxODgtOTAwZS0z MDIzLWJhODAtMGFhNGZhMGU2ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCvWvSoTonsPEk21pA7qecP4AD5YUCCtiW2JdxR1z9mEm+JvdVSomVU jtm5A3n9d8ISnWBDIAm7tvledMO78+ttDoaJ8Se71F9YW4sX2XGXfdHvdATQVm0K 8B3gboGY+o8p4UQ8wIG/SqtpY9EX9YUmnxDpIsAUcK6OTgnWrsAmjct6f98tqutY vRqQhZ8mzegTH3SigJKoJqquu3haojURi67OFNnvjCUtqcKiH0ivZCrg4mY3/o1k ipwt+RrNqLM/zLfdfIQ423TMY1QE/V4cYRyu8BR6b1q9SVvXm2kPc8rbWyqe9TnA 5x3HavcPqRv8Wo9/39Tc5nW71M3oa4g= -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:53 2025 by rpki-client