$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567043b4-0b80-3a50-9ce7-4382798826fd.roa File: 567043b4-0b80-3a50-9ce7-4382798826fd.roa (raw, json) Hash identifier: qBBByykQ7iGeu8ApmOHLYX4/SyIpWRfpHAI8gxutrgw= Subject key identifier: 96:F1:E0:12:42:E1:BF:A1:86:AD:A0:9F:CB:E0:46:87:79:BA:C9:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A736B48DEBC3610BF0A980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567043b4-0b80-3a50-9ce7-4382798826fd.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:36:b4:8d:eb:c3:61:0b:f0:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=3879c87c-2de5-4c24-a832-ef75c08d257b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:02:70:61:3b:61:cf:31:04:d3:45:a2:26: 53:75:97:da:99:fb:75:5c:15:7f:52:b7:e5:fb:15: 1a:e1:b2:ea:2b:02:80:90:b7:54:32:b5:f0:e6:7f: 87:85:fe:85:93:f0:08:4d:c5:38:de:b4:17:99:e3: 4f:dd:18:04:0a:0d:ea:79:22:3f:ec:b0:a7:aa:88: 55:de:b0:d4:2f:da:78:1c:a1:1c:cb:57:72:62:1b: e3:2b:44:f9:c9:bf:20:6f:80:4b:90:5c:87:fb:6f: 5d:09:a8:bd:21:05:7b:4b:81:b6:dc:04:d0:4e:4a: d0:b8:b1:b0:ec:6b:9f:02:60:33:1f:96:fc:76:1c: 54:25:a2:fe:95:f9:f8:b7:5a:fe:3a:4b:bb:dd:44: 9f:99:5e:75:55:35:f1:82:27:2d:9e:bc:e5:86:39: 74:a2:39:d9:1a:9c:6f:74:2e:26:31:e1:0d:a7:4f: d3:98:df:51:f7:d5:b7:d1:49:c2:88:24:1d:b5:58: 73:a2:e4:46:3b:3f:50:99:22:6f:36:02:b3:e8:b0: 33:a3:60:13:0f:d9:ac:fb:69:5d:22:46:7f:a8:b7: bd:8e:83:de:e2:c2:b1:de:54:4e:cf:ed:9c:63:cc: 76:1c:c2:fe:c8:99:42:47:25:9b:00:08:39:21:e3: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F1:E0:12:42:E1:BF:A1:86:AD:A0:9F:CB:E0:46:87:79:BA:C9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567043b4-0b80-3a50-9ce7-4382798826fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:53:cd:59:41:08:97:1f:8c:ca:a9:ed:9b:ca:b4:3c:ba:8f: b1:7f:fa:7c:d2:a6:f8:88:c6:10:2c:a0:d4:ff:10:c4:30:fe: fe:03:f2:18:4c:94:2e:f2:77:6b:c1:be:0e:4d:5e:80:59:fd: 54:f8:b4:77:02:5c:26:a9:30:41:f4:28:75:14:0e:f5:08:12: 79:1d:5d:df:74:96:31:f7:9d:12:54:40:48:9b:dc:81:2c:83: 4a:3f:de:ee:80:23:00:37:4d:d2:cb:6f:4a:61:1d:ad:f6:33: 7f:49:98:84:23:6d:9e:b2:65:f3:5d:2c:06:15:32:16:7d:33: a4:b4:a2:fa:b5:a3:2b:8c:13:5e:9a:e0:02:11:5e:17:80:a8: 39:eb:64:d6:0b:7c:59:db:98:6d:3e:2e:92:35:be:e0:fa:d2: 07:0e:67:3d:c6:e3:41:60:0c:1d:f1:0c:85:54:b8:e1:21:8c: e4:bc:5f:b2:9d:97:5e:d3:f0:87:aa:82:98:57:e2:55:94:71: d6:b6:d4:43:37:d6:5d:df:22:b7:11:9c:91:c5:05:2e:4c:0c: 7a:50:08:7b:b7:d2:21:cf:13:4d:c2:e8:4f:d0:c9:8d:27:11: 9a:27:c5:09:3f:cf:0a:52:48:a9:b0:56:db:b5:68:27:72:73: f9:56:bd:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpza0jevDYQvwqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk Mzg3OWM4N2MtMmRlNS00YzI0LWE4MzItZWY3NWMwOGQyNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy4CcGE7Yc8xBNNFoiZTdZfamft1XBV/Urfl +xUa4bLqKwKAkLdUMrXw5n+Hhf6Fk/AITcU43rQXmeNP3RgECg3qeSI/7LCnqohV 3rDUL9p4HKEcy1dyYhvjK0T5yb8gb4BLkFyH+29dCai9IQV7S4G23ATQTkrQuLGw 7GufAmAzH5b8dhxUJaL+lfn4t1r+Oku73USfmV51VTXxgictnrzlhjl0ojnZGpxv dC4mMeENp0/TmN9R99W30UnCiCQdtVhzouRGOz9QmSJvNgKz6LAzo2ATD9ms+2ld IkZ/qLe9joPe4sKx3lROz+2cY8x2HML+yJlCRyWbAAg5IePnowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbx4BJC4b+hhq2gn8vgRod5uslgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTY3MDQzYjQtMGI4MC0z YTUwLTljZTctNDM4Mjc5ODgyNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFTzVlBCJcfjMqp7ZvKtDy6j7F/+nzSpviIxhAsoNT/EMQw/v4D8hhM lC7yd2vBvg5NXoBZ/VT4tHcCXCapMEH0KHUUDvUIEnkdXd90ljH3nRJUQEib3IEs g0o/3u6AIwA3TdLLb0phHa32M39JmIQjbZ6yZfNdLAYVMhZ9M6S0ovq1oyuME16a 4AIRXheAqDnrZNYLfFnbmG0+LpI1vuD60gcOZz3G40FgDB3xDIVUuOEhjOS8X7Kd l17T8IeqgphX4lWUcda21EM31l3fIrcRnJHFBS5MDHpQCHu30iHPE03C6E/QyY0n EZonxQk/zwpSSKmwVtu1aCdyc/lWvf8= -----END CERTIFICATE-----Generated at Sun Oct 19 21:13:31 2025 by rpki-client