$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d49f4794-3e00-3a03-851b-baf0f635697c.roa File: d49f4794-3e00-3a03-851b-baf0f635697c.roa (raw, json) Hash identifier: LylPL+5zR7oVSyaiLp6z0IfYPxIoSNRpA3OoyS10ptc= Subject key identifier: FF:A5:19:F9:46:99:D1:68:36:1C:4C:13:E2:75:0E:29:74:D8:C6:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A7278039314DDEAF358CD8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d49f4794-3e00-3a03-851b-baf0f635697c.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:27:80:39:31:4d:de:af:35:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=14d5ce9b-e50d-4ef2-a89e-f53c32279670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:84:f0:1c:f9:75:7a:5a:e6:2c:29:2e:6f: f8:26:31:72:23:16:6d:29:f5:ff:ae:cf:88:79:f2: f9:d8:f3:d6:41:6d:a9:81:19:7c:2d:0a:e8:1d:0a: 08:86:43:a6:65:f0:21:f3:17:95:ad:14:87:a0:4c: d3:5f:8c:c9:12:bf:cf:cf:83:d6:21:84:8b:bb:7e: e8:51:4c:e7:91:73:39:98:06:6e:4d:8e:a6:2f:fd: af:86:c9:66:14:18:49:5d:3c:67:65:f8:c2:90:12: 54:c3:7f:34:6f:01:5c:89:68:22:4d:e9:49:82:4b: 60:a6:4d:bd:33:d6:03:5d:ca:ed:00:5d:da:18:17: 71:ee:be:bc:5f:81:34:1d:0b:d1:d0:ed:e2:ab:81: f8:e4:b4:83:85:87:50:76:b0:cc:a1:a2:9a:d8:d3: d6:79:7a:70:26:63:8f:3f:a3:1e:2b:6d:a6:61:20: dd:10:8f:4e:98:9d:de:99:02:ed:6d:29:fe:a7:9c: 56:bf:0c:38:34:89:68:34:ad:54:ca:5e:ab:fa:95: d5:97:9d:59:8e:26:6f:33:de:ce:ce:50:d7:4f:55: 0d:ec:74:40:d6:76:33:28:b3:ae:bb:67:91:f6:95: df:c7:b2:dc:a3:13:a0:ac:da:1b:33:a1:50:97:ee: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A5:19:F9:46:99:D1:68:36:1C:4C:13:E2:75:0E:29:74:D8:C6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d49f4794-3e00-3a03-851b-baf0f635697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:f5:30:da:00:0a:99:db:1c:c5:1d:e7:8e:fd:87:e8:b2:60: 0e:89:01:40:8e:7b:8b:b0:e6:a5:eb:d5:7e:9e:06:d5:b7:a1: d8:ab:b1:fa:10:8e:8b:bb:f7:9f:8b:ca:49:05:71:73:cc:cb: 3b:68:a3:49:f0:cf:df:cf:08:c1:d0:1b:d9:4b:22:8e:48:fe: 72:f5:db:fe:8f:3b:ec:f5:8f:65:47:52:93:66:b3:7c:92:85: f2:9e:db:49:8e:05:cd:ea:d4:15:ed:e5:3b:7d:a2:ea:5c:e5: 06:0e:21:5b:9c:b0:b5:fb:06:82:8e:f8:9b:f2:be:21:10:c8: d3:80:21:7e:f1:64:eb:ea:b2:07:68:36:48:70:5c:89:87:b3: 2f:16:ca:24:d5:6b:1d:ca:34:3c:99:82:5a:b0:90:50:06:71: 48:18:1f:1d:45:bf:aa:fb:b5:ea:53:9b:ef:03:1b:6e:d8:f1: c5:75:80:e5:7a:5d:b0:d4:dd:10:f4:70:47:61:d9:37:fa:46: f6:f1:08:f9:b2:89:ce:93:53:15:0f:31:f2:82:aa:56:3e:f4: 14:ad:e3:a9:91:f6:4e:69:9a:9a:81:ca:97:e0:d8:df:3a:5f: 2e:9d:b0:ba:73:44:4e:66:90:60:ac:9b:ff:65:98:1a:e9:b5: 46:1b:35:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpyeAOTFN3q81jNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MTRkNWNlOWItZTUwZC00ZWYyLWE4OWUtZjUzYzMyMjc5NjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4yE8Bz5dXpa5iwpLm/4JjFyIxZtKfX/rs+I efL52PPWQW2pgRl8LQroHQoIhkOmZfAh8xeVrRSHoEzTX4zJEr/Pz4PWIYSLu37o UUznkXM5mAZuTY6mL/2vhslmFBhJXTxnZfjCkBJUw380bwFciWgiTelJgktgpk29 M9YDXcrtAF3aGBdx7r68X4E0HQvR0O3iq4H45LSDhYdQdrDMoaKa2NPWeXpwJmOP P6MeK22mYSDdEI9OmJ3emQLtbSn+p5xWvww4NIloNK1Uyl6r+pXVl51ZjiZvM97O zlDXT1UN7HRA1nYzKLOuu2eR9pXfx7LcoxOgrNobM6FQl+6XawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+lGflGmdFoNhxME+J1Dil02MZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDQ5ZjQ3OTQtM2UwMC0z YTAzLTg1MWItYmFmMGY2MzU2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMP1MNoACpnbHMUd5479h+iyYA6JAUCOe4uw5qXr1X6eBtW3odirsfoQ jou795+LykkFcXPMyztoo0nwz9/PCMHQG9lLIo5I/nL12/6PO+z1j2VHUpNms3yS hfKe20mOBc3q1BXt5Tt9oupc5QYOIVucsLX7BoKO+JvyviEQyNOAIX7xZOvqsgdo NkhwXImHsy8WyiTVax3KNDyZglqwkFAGcUgYHx1Fv6r7tepTm+8DG27Y8cV1gOV6 XbDU3RD0cEdh2Tf6RvbxCPmyic6TUxUPMfKCqlY+9BSt46mR9k5pmpqBypfg2N86 Xy6dsLpzRE5mkGCsm/9lmBrptUYbNfs= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:05 2025 by rpki-client