$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa File: 5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa (raw, json) Hash identifier: iEre91MrPb9kzmwJBMvffNeSL6QgYYFT24b6+mjrI3c= Subject key identifier: C5:E0:68:1C:DC:AE:92:8B:4E:8A:84:2E:8F:F3:07:A9:E9:90:FB:69 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A7728179D4206D6AC15000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:72:81:79:d4:20:6d:6a:c1:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=0c41d56c-3dd0-41ea-827f-b3433be822f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:51:23:ac:41:22:03:12:b5:dc:c1:9e:35: a5:34:53:8a:0a:e2:ad:0d:e0:cb:38:85:0f:71:a5: e1:f6:c2:d8:be:5b:bf:92:6b:2d:1a:f2:48:e7:ec: 98:17:d8:c1:3a:70:9f:ad:5d:01:e3:0a:77:fa:c9: be:9d:70:0f:3e:bc:b4:8e:67:03:2c:1a:e5:91:e1: a6:06:c9:48:0c:8e:d0:25:73:fa:31:c9:44:13:3f: 85:de:df:aa:24:ca:3e:b1:73:c4:29:78:7c:48:f9: 1a:77:26:cb:14:a5:3e:75:46:fb:3c:cf:31:4a:e4: 8f:63:64:45:eb:7a:82:56:df:68:9c:26:a3:45:e4: 61:4e:dc:7a:45:55:7d:5e:84:b5:f1:5c:9a:16:98: 0b:c5:de:32:7d:84:8a:a8:b7:45:d9:e1:da:cd:95: f8:bb:7b:06:28:d3:15:5e:5d:26:34:37:50:2e:80: f4:01:67:4f:88:17:2c:79:04:c8:f4:2f:c2:4a:0b: e5:a5:32:67:d5:78:cd:f9:62:4a:79:9f:ad:46:86: f0:fc:53:a0:3c:14:28:e9:88:52:2d:0e:64:da:4a: 86:d0:d7:aa:72:4f:ad:87:4b:b7:25:59:87:12:f6: 8a:14:f2:ea:97:b6:3c:b3:cc:22:67:47:93:88:04: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E0:68:1C:DC:AE:92:8B:4E:8A:84:2E:8F:F3:07:A9:E9:90:FB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5af1731e-ccf7-3985-a31e-bfdbe03f2911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2d:08:f8:06:29:32:0a:ed:51:a0:6c:f6:6b:c7:a8:b3:4e: 96:3e:d4:a7:00:3d:a5:e4:af:ef:1e:00:a5:f5:c1:35:05:f5: 27:b3:2d:bd:86:3c:b9:f1:a6:d7:e1:16:2c:1e:f4:75:db:6d: 1c:5e:c6:3c:3f:8d:9b:ef:8f:fd:6f:ab:90:6e:c4:88:93:c3: f2:5a:85:2a:8f:9d:fa:e0:88:08:db:8e:38:35:0f:84:a7:8f: e8:5c:7a:f4:d4:ed:3e:c6:6c:74:72:cc:74:9b:db:ae:13:9e: a5:7a:ba:69:30:fb:63:63:21:79:62:99:48:65:15:cb:ba:33: 04:66:81:e8:37:5a:57:14:c8:80:e4:63:8b:c5:d2:e9:fe:c6: 54:f3:e1:dc:eb:a8:64:3b:75:8b:c2:de:0d:be:a7:d3:1c:33: fc:cb:aa:60:b8:fa:91:22:99:d2:f4:99:ad:7c:4c:0c:5c:29: 37:2a:29:c4:46:4c:40:04:05:e4:50:67:69:c7:49:f7:bd:ba: fc:64:bc:34:75:5b:36:1d:a6:a0:58:b7:ea:93:df:87:b0:e8: 85:cb:e2:0e:fd:ab:48:36:b3:51:94:93:f5:3e:4e:94:33:aa: 95:b6:85:01:f7:18:c8:30:39:84:e2:37:56:d2:07:50:ce:f9: a2:c9:44:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3KBedQgbWrBUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MGM0MWQ1NmMtM2RkMC00MWVhLTgyN2YtYjM0MzNiZTgyMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUFRI6xBIgMStdzBnjWlNFOKCuKtDeDLOIUP caXh9sLYvlu/kmstGvJI5+yYF9jBOnCfrV0B4wp3+sm+nXAPPry0jmcDLBrlkeGm BslIDI7QJXP6MclEEz+F3t+qJMo+sXPEKXh8SPkadybLFKU+dUb7PM8xSuSPY2RF 63qCVt9onCajReRhTtx6RVV9XoS18VyaFpgLxd4yfYSKqLdF2eHazZX4u3sGKNMV Xl0mNDdQLoD0AWdPiBcseQTI9C/CSgvlpTJn1XjN+WJKeZ+tRobw/FOgPBQo6YhS LQ5k2kqG0Neqck+th0u3JVmHEvaKFPLql7Y8s8wiZ0eTiASUvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXgaBzcrpKLToqELo/zB6npkPtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWFmMTczMWUtY2NmNy0z OTg1LWEzMWUtYmZkYmUwM2YyOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwtCPgGKTIK7VGgbPZrx6izTpY+1KcAPaXkr+8eAKX1wTUF9SezLb2G PLnxptfhFiwe9HXbbRxexjw/jZvvj/1vq5BuxIiTw/JahSqPnfrgiAjbjjg1D4Sn j+hcevTU7T7GbHRyzHSb264TnqV6umkw+2NjIXlimUhlFcu6MwRmgeg3WlcUyIDk Y4vF0un+xlTz4dzrqGQ7dYvC3g2+p9McM/zLqmC4+pEimdL0ma18TAxcKTcqKcRG TEAEBeRQZ2nHSfe9uvxkvDR1WzYdpqBYt+qT34ew6IXL4g79q0g2s1GUk/U+TpQz qpW2hQH3GMgwOYTiN1bSB1DO+aLJRLk= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:35 2025 by rpki-client