$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa File: 4caa04d7-8937-30a0-9987-0d8e972b0598.roa (raw, json) Hash identifier: /+Zo7CtfgCUmiad7MoKP3c1JSJsWIk4oLcCVktDUSpg= Subject key identifier: 56:92:60:F4:74:4C:8A:93:52:20:3F:38:CD:9F:31:B8:54:69:10:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B7DECC2CB95A2DD192825A880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 104.29.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c2:cb:95:a2:dd:19:28:25:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=3bbaf213-292e-4c7d-bda8-23d543c5ae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:1a:ea:45:de:87:7f:21:1c:56:90:82:2c: 67:46:58:6d:c3:34:a6:6d:42:5b:c9:5c:4c:76:b5: 64:b8:50:0c:06:c5:22:a6:5b:11:08:e5:f1:5b:68: 82:af:db:af:82:b8:86:b8:d9:67:93:e9:9f:f7:5e: 0d:83:3c:09:a7:02:b0:a1:c4:ca:d7:02:c5:ae:d2: 9b:f4:61:68:67:5e:ed:44:b1:95:91:2c:a7:26:ff: 0d:ec:f2:8d:29:22:1f:db:fb:78:ce:f1:b9:32:25: 6a:80:f3:41:96:26:1f:35:50:a4:78:5e:8f:f2:76: 81:9d:7a:da:68:db:b2:b6:22:cc:b5:59:9e:c4:87: 3f:e9:7f:19:a2:73:74:70:8c:12:cf:28:be:31:06: 6e:66:a0:c2:ac:56:9d:27:42:81:45:54:c7:40:54: fc:73:32:2d:d2:83:c1:f4:1b:5e:7e:5c:24:b0:5b: 3f:ff:e0:ca:a2:6c:65:98:f8:d7:fd:28:91:86:78: c8:9e:be:e1:9d:00:90:34:83:00:b0:5b:47:8d:1d: 2a:64:f9:14:ef:5e:e9:f4:ee:fa:13:f9:25:bc:64: da:09:99:5f:35:9a:a3:65:fb:a0:22:c8:38:11:e6: e3:91:9e:11:b0:02:59:37:9b:36:92:fb:fd:0d:f2: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:60:F4:74:4C:8A:93:52:20:3F:38:CD:9F:31:B8:54:69:10:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:a8:48:cb:31:86:ab:4a:04:38:0d:a1:b4:7d:70:c7:9e:b1: 0e:09:ca:a2:a0:89:ac:fe:b0:78:12:0a:02:01:37:0d:c7:1b: d6:92:02:b1:2a:f8:8f:b3:99:82:40:71:ac:2c:b5:cc:df:f1: 6b:48:3b:d0:13:83:2b:21:62:22:0d:3e:e7:a3:15:27:b9:fb: c4:31:de:3c:57:b3:fe:ee:69:3a:6f:4b:dd:9d:1d:b1:83:d3: 66:7f:bd:ef:41:4e:65:51:f2:a6:8c:cc:e8:89:39:b2:c5:15: b1:02:e6:ba:0a:e2:9f:71:e3:9b:34:35:f1:1e:d6:13:45:c2: e0:d2:b2:b5:05:63:fe:72:60:6a:99:c6:f3:e6:35:5b:a2:e1: 5b:0a:16:eb:83:30:e6:be:1c:af:bc:da:9b:78:30:01:ae:91: 33:80:bf:08:39:70:68:22:a3:8a:7a:68:ee:e5:3e:0d:fd:0a: c0:e3:50:51:b5:04:c4:54:39:2d:ad:19:35:d8:a0:8b:3a:4c: 2e:f6:c2:b2:80:43:2f:2d:53:2a:00:93:95:8f:e8:30:7f:ec: 3f:6a:b0:b5:0a:c1:dc:f0:47:12:6e:a0:68:c7:5f:f2:41:3e: f9:5b:4f:fa:b8:3f:93:74:fd:f4:2b:20:7d:75:98:5f:da:7d: f2:57:95:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MLLlaLdGSglqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk M2JiYWYyMTMtMjkyZS00YzdkLWJkYTgtMjNkNTQzYzVhZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ska6kXeh38hHFaQgixnRlhtwzSmbUJbyVxM drVkuFAMBsUiplsRCOXxW2iCr9uvgriGuNlnk+mf914NgzwJpwKwocTK1wLFrtKb 9GFoZ17tRLGVkSynJv8N7PKNKSIf2/t4zvG5MiVqgPNBliYfNVCkeF6P8naBnXra aNuytiLMtVmexIc/6X8ZonN0cIwSzyi+MQZuZqDCrFadJ0KBRVTHQFT8czIt0oPB 9BteflwksFs//+DKomxlmPjX/SiRhnjInr7hnQCQNIMAsFtHjR0qZPkU717p9O76 E/klvGTaCZlfNZqjZfugIsg4EebjkZ4RsAJZN5s2kvv9DfL+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaSYPR0TIqTUiA/OM2fMbhUaRDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGNhYTA0ZDctODkzNy0z MGEwLTk5ODctMGQ4ZTk3MmIwNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmoSMsxhqtKBDgNobR9cMeesQ4JyqKgiaz+sHgSCgIBNw3HG9aSArEq +I+zmYJAcawstczf8WtIO9ATgyshYiINPuejFSe5+8Qx3jxXs/7uaTpvS92dHbGD 02Z/ve9BTmVR8qaMzOiJObLFFbEC5roK4p9x45s0NfEe1hNFwuDSsrUFY/5yYGqZ xvPmNVui4VsKFuuDMOa+HK+82pt4MAGukTOAvwg5cGgio4p6aO7lPg39CsDjUFG1 BMRUOS2tGTXYoIs6TC72wrKAQy8tUyoAk5WP6DB/7D9qsLUKwdzwRxJuoGjHX/JB PvlbT/q4P5N0/fQrIH11mF/affJXlfc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:54 2025 by rpki-client