$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa File: 855c8377-458f-31fc-99a3-78f054769805.roa (raw, json) Hash identifier: 2VzMFOicQ+5/dv4VZk6bmRmra64zzdj6Ae5d8SbUxDY= Subject key identifier: 10:D7:99:4C:8B:28:01:0E:B5:A3:8C:5B:F7:BF:B7:CF:99:00:4E:C5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A77820C5E5C968C937F380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:78:20:c5:e5:c9:68:c9:37:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=424ad0f6-013e-4990-af77-0f5c4557d119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:2e:de:73:18:c3:2d:d8:84:43:d2:a9:16: 10:c8:a7:ed:33:08:c6:91:6c:99:83:a6:b9:a8:25: 87:4c:52:94:18:20:27:98:58:be:eb:48:dc:3f:64: 5f:e6:e9:aa:a4:79:23:e6:c2:99:c4:4c:ef:4e:6b: b4:00:f3:76:61:47:ba:20:e5:ad:dd:15:e1:b0:7d: 16:77:ba:c5:2a:a4:71:60:80:ef:1a:da:62:fa:c3: 2c:5b:cf:42:12:68:48:2f:06:47:99:67:32:a3:18: 65:06:20:29:29:38:3a:84:d2:8f:a8:90:90:5d:63: 93:ff:1d:e6:c2:b6:c9:50:a8:29:39:6d:c3:02:94: aa:92:91:05:6a:04:9f:b2:40:81:8d:e1:c4:25:e3: 80:94:fd:ea:de:d8:34:6e:57:cf:0d:33:74:4f:71: 32:45:43:ed:28:9c:18:e0:74:f1:1e:b4:f8:c7:ee: 8e:23:dd:78:19:24:c9:73:82:8c:08:b4:48:54:a8: 95:84:3e:75:bd:e3:45:a2:ea:3b:94:96:33:7f:45: cf:be:e3:9a:01:34:26:3d:e1:af:5b:e4:d4:a7:99: 6d:72:eb:e3:e1:86:de:1e:37:cd:f1:8b:93:5e:01: 9d:46:b3:72:f7:b7:d4:61:05:49:bc:ff:1d:be:23: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D7:99:4C:8B:28:01:0E:B5:A3:8C:5B:F7:BF:B7:CF:99:00:4E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:33:93:bc:3a:f7:51:6a:75:7a:cb:ca:41:21:a6:e8:ea:44: 3a:55:bf:a3:ee:49:5f:fb:44:f9:87:f1:f0:48:aa:b6:04:12: 5e:1a:55:a7:fb:87:70:c1:bc:a7:60:0b:cf:fe:f8:e2:99:69: 6b:e9:ba:1b:87:5e:8f:1f:5e:13:3c:fa:80:ae:18:66:d3:ad: 16:a9:c3:67:b3:87:8a:bd:14:a4:95:0a:f9:c3:9e:8d:92:5a: 64:99:b3:07:98:61:81:d0:dc:64:da:db:57:d4:db:e1:4d:f4: b6:02:98:ac:d9:9e:f6:14:f4:99:6e:c1:2c:0e:7e:d5:7d:80: 18:72:7c:fd:ea:5c:3a:11:cd:d4:d7:97:ac:83:9b:85:3f:22: b1:1d:5c:60:1b:23:2f:a8:4a:1f:55:e4:1d:eb:b4:6c:9c:70: f5:42:4e:76:2a:d6:be:02:c7:b8:76:bb:c0:73:05:0c:ce:9c: 2c:9d:3f:88:c6:55:fe:fe:a4:16:ed:e5:d7:57:b7:9b:41:42: 5a:84:d8:8f:fc:ee:ef:6b:5b:a2:e6:11:05:95:15:78:88:dc: 7c:47:32:0a:c4:65:ee:a3:05:9e:26:53:5a:b1:2a:9c:7c:25: 6e:82:db:fc:1c:74:e0:91:a3:fc:ec:3a:ac:2c:6a:9e:49:50: 50:30:49:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3ggxeXJaMk384AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDI0YWQwZjYtMDEzZS00OTkwLWFmNzctMGY1YzQ1NTdkMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAUu3nMYwy3YhEPSqRYQyKftMwjGkWyZg6a5 qCWHTFKUGCAnmFi+60jcP2Rf5umqpHkj5sKZxEzvTmu0APN2YUe6IOWt3RXhsH0W d7rFKqRxYIDvGtpi+sMsW89CEmhILwZHmWcyoxhlBiApKTg6hNKPqJCQXWOT/x3m wrbJUKgpOW3DApSqkpEFagSfskCBjeHEJeOAlP3q3tg0blfPDTN0T3EyRUPtKJwY 4HTxHrT4x+6OI914GSTJc4KMCLRIVKiVhD51veNFouo7lJYzf0XPvuOaATQmPeGv W+TUp5ltcuvj4YbeHjfN8YuTXgGdRrNy97fUYQVJvP8dviOmeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDXmUyLKAEOtaOMW/e/t8+ZAE7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODU1YzgzNzctNDU4Zi0z MWZjLTk5YTMtNzhmMDU0NzY5ODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8zk7w691FqdXrLykEhpujqRDpVv6PuSV/7RPmH8fBIqrYEEl4aVaf7 h3DBvKdgC8/++OKZaWvpuhuHXo8fXhM8+oCuGGbTrRapw2ezh4q9FKSVCvnDno2S WmSZsweYYYHQ3GTa21fU2+FN9LYCmKzZnvYU9JluwSwOftV9gBhyfP3qXDoRzdTX l6yDm4U/IrEdXGAbIy+oSh9V5B3rtGyccPVCTnYq1r4Cx7h2u8BzBQzOnCydP4jG Vf7+pBbt5ddXt5tBQlqE2I/87u9rW6LmEQWVFXiI3HxHMgrEZe6jBZ4mU1qxKpx8 JW6C2/wcdOCRo/zsOqwsap5JUFAwSRo= -----END CERTIFICATE-----Generated at Sun Oct 19 23:57:54 2025 by rpki-client