$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d49f4794-3e00-3a03-851b-baf0f635697c.roa File: d49f4794-3e00-3a03-851b-baf0f635697c.roa (raw, json) Hash identifier: cqOFmBTHWlC1fmxHjoda7/BTjPXl0VtJDcaN04S7ioc= Subject key identifier: 32:96:09:6A:B6:41:1D:AB:11:13:39:0F:29:20:C5:35:7A:0A:B3:2E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D143D15B3C3142003409B0280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d49f4794-3e00-3a03-851b-baf0f635697c.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 104.29.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:15:b3:c3:14:20:03:40:9b:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=745ce888-c700-488d-9e7c-f3bbee7550df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a6:c3:37:23:5d:cf:19:62:c1:e2:d8:aa:a0: a8:c8:04:10:e7:9f:e5:4c:61:e5:9c:74:2d:cf:29: e7:fd:9d:2b:3b:4f:7e:39:b7:0b:23:a6:bf:52:2f: 8c:0f:b4:71:d1:9a:07:fd:94:81:ac:c6:c9:31:8b: d9:9f:06:8f:f3:22:b0:9c:c7:48:56:a5:9a:6a:ee: 7b:8b:83:5a:46:0b:87:3d:ff:3a:a8:fa:30:21:6c: 17:14:6a:95:2e:18:e9:03:f7:5d:5d:4c:11:b5:5b: 01:6e:c9:47:58:3a:b5:ea:da:e8:8c:e7:f6:e4:c3: c1:05:65:ae:f7:cd:bd:62:7b:44:79:c6:41:d7:5b: 90:c8:a8:6b:a2:5c:05:08:fa:84:c9:a7:26:e8:d4: 5e:9d:c2:24:4e:b5:c1:84:c6:a6:f7:40:b6:f0:a9: ff:d2:5d:ff:25:02:db:00:6c:92:b0:30:00:6d:b6: 9c:28:33:1a:d9:90:35:18:36:a2:1f:a2:a7:78:d4: 31:02:f1:77:00:33:e9:28:82:fb:63:f6:19:ae:ef: ed:ec:51:60:f0:e3:36:2c:b8:04:53:35:09:9b:b6: 3c:f0:2b:b3:f8:cb:c6:94:58:67:26:70:52:89:59: e3:6d:cc:6f:3d:7e:bc:5b:47:6c:26:ca:e2:0a:b9: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:09:6A:B6:41:1D:AB:11:13:39:0F:29:20:C5:35:7A:0A:B3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d49f4794-3e00-3a03-851b-baf0f635697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:52:f6:ef:80:7d:84:af:0a:8a:79:c5:75:27:ef:08:e9:fd: c4:73:bc:e3:29:30:db:64:d2:35:d5:34:5a:fb:ea:19:24:7b: 23:4a:48:d4:d2:c5:22:56:68:d8:5a:74:14:a4:74:eb:21:7e: f9:7c:1e:7b:aa:51:a3:6a:60:a6:5b:0f:9a:9a:e0:69:c5:24: a5:31:ea:63:26:08:51:6b:67:ad:54:3a:8c:17:47:45:3c:8a: 57:20:7b:0e:47:53:0a:d1:c3:83:85:0b:f0:ca:24:32:95:63: cc:d4:db:ad:7a:c8:69:51:f6:fc:c9:e4:d3:fb:32:ca:4f:bf: 5b:84:69:00:e1:d6:28:c2:91:9c:90:04:3a:97:f1:3f:72:76: 94:64:43:df:6b:50:63:32:e5:e2:af:65:0b:ee:27:1f:6d:2c: 81:77:35:08:f7:7a:da:f5:64:30:72:80:2d:8c:aa:30:77:41: 30:6e:a7:21:1b:d3:a3:2c:60:ee:54:48:e4:cd:2f:03:6a:21: 55:5d:0d:52:c5:fc:b0:1f:93:d5:e7:68:9e:5a:d8:dc:87:aa: 5b:78:b0:b0:9c:9c:2c:cb:58:4c:55:2a:77:13:4a:c3:5c:d3: ba:b9:b0:87:11:5a:97:e1:a3:d7:21:df:23:64:a0:d9:a1:c6: 18:76:1c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPRWzwxQgA0CbAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NzQ1Y2U4ODgtYzcwMC00ODhkLTllN2MtZjNiYmVlNzU1MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKbDNyNdzxliweLYqqCoyAQQ55/lTGHlnHQt zynn/Z0rO09+ObcLI6a/Ui+MD7Rx0ZoH/ZSBrMbJMYvZnwaP8yKwnMdIVqWaau57 i4NaRguHPf86qPowIWwXFGqVLhjpA/ddXUwRtVsBbslHWDq16trojOf25MPBBWWu 9829YntEecZB11uQyKhrolwFCPqEyacm6NRencIkTrXBhMam90C28Kn/0l3/JQLb AGySsDAAbbacKDMa2ZA1GDaiH6KneNQxAvF3ADPpKIL7Y/YZru/t7FFg8OM2LLgE UzUJm7Y88Cuz+MvGlFhnJnBSiVnjbcxvPX68W0dsJsriCrngMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKWCWq2QR2rERM5DykgxTV6CrMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDQ5ZjQ3OTQtM2UwMC0z YTAzLTg1MWItYmFmMGY2MzU2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJS9u+AfYSvCop5xXUn7wjp/cRzvOMpMNtk0jXVNFr76hkkeyNKSNTS xSJWaNhadBSkdOshfvl8HnuqUaNqYKZbD5qa4GnFJKUx6mMmCFFrZ61UOowXR0U8 ilcgew5HUwrRw4OFC/DKJDKVY8zU2616yGlR9vzJ5NP7MspPv1uEaQDh1ijCkZyQ BDqX8T9ydpRkQ99rUGMy5eKvZQvuJx9tLIF3NQj3etr1ZDBygC2MqjB3QTBupyEb 06MsYO5USOTNLwNqIVVdDVLF/LAfk9XnaJ5a2NyHqlt4sLCcnCzLWExVKncTSsNc 07q5sIcRWpfho9ch3yNkoNmhxhh2HCQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:46 2026 by rpki-client