$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f47a8e90-c906-3cde-bc68-41ddabda4890.roa File: f47a8e90-c906-3cde-bc68-41ddabda4890.roa (raw, json) Hash identifier: pOabpgfzWLSeFbzyPynJxHD5TXJkN/bQ401sru3r/1U= Subject key identifier: 86:8D:D1:32:8F:E8:3B:C3:5E:B2:84:D4:41:A8:17:B8:04:E4:96:F9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F49732602D290B6D092E75280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f47a8e90-c906-3cde-bc68-41ddabda4890.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:26:02:d2:90:b6:d0:92:e7:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0dc6d988-6acd-450a-8cb9-d6c373e21d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:63:c8:16:9d:a8:00:05:9f:0d:3f:ef:33: 22:c7:51:20:ca:f9:2c:19:9a:4c:e1:c3:ad:89:6a: ec:b9:66:63:3c:81:03:fe:f8:ed:4d:4c:2e:39:a6: 31:1a:a5:f4:83:12:1e:fa:d3:1f:9d:6a:46:1b:3a: 20:4b:04:e1:85:7d:b0:38:d9:8e:83:02:c8:04:d9: a2:b7:b5:84:70:6b:5c:85:ca:d2:55:ea:0e:bd:8f: 26:9b:4f:4e:e5:39:98:56:33:99:66:85:c2:9c:9a: fc:f7:fa:b4:7d:e7:99:45:0f:11:c5:93:84:e7:83: c0:ad:c8:87:a1:66:2a:e8:8d:2c:55:b8:fb:0d:23: d1:f3:69:a8:02:24:ef:47:ac:17:d6:59:2b:e8:00: 97:a4:09:e9:e8:29:f4:4f:ca:df:02:77:c3:d4:6a: 02:48:51:dc:9f:97:dd:c8:2b:79:10:f1:71:34:db: 19:c1:20:fc:e0:a4:2a:85:9f:56:9a:74:5a:02:dd: c8:a5:78:78:8d:b2:ae:dd:61:30:48:64:bb:36:96: 18:fa:6d:e4:7f:8e:e6:93:4a:5d:7b:30:05:fd:9d: 98:51:a7:5f:ea:38:2a:d4:47:1c:fb:ee:5a:5c:b1: 65:03:37:97:f4:e8:fb:a8:f4:84:00:cb:4c:e0:a4: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:D1:32:8F:E8:3B:C3:5E:B2:84:D4:41:A8:17:B8:04:E4:96:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f47a8e90-c906-3cde-bc68-41ddabda4890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:32:9e:26:cf:de:88:35:ff:04:10:f4:e0:69:46:1e:a6:74: 52:3c:26:19:19:71:b3:05:83:ef:ad:43:b4:52:15:8e:50:88: 4d:13:13:8e:ae:5e:c7:1a:c8:7c:04:de:59:dc:8d:b8:c1:55: dc:4e:e3:2d:06:72:5e:8a:06:6b:9a:1b:85:77:c3:53:c5:68: 3b:d5:0e:d8:a3:2a:be:02:d5:5c:8f:e8:4c:ef:79:67:8a:04: 4f:f4:47:5e:f3:db:57:92:79:f8:f0:25:b8:3d:ba:cd:86:1e: 05:11:fd:ba:f6:94:1f:56:f2:b1:67:15:35:8f:a0:59:45:f2: 0e:91:7c:f3:e5:93:8c:b9:a9:b3:a3:e1:ce:e0:d6:4d:7d:57: 0e:ff:d3:89:2b:cf:7c:07:ef:36:a4:96:58:6e:ae:2e:14:be: f4:94:36:09:30:9f:a2:fd:db:17:0d:07:e0:03:2e:91:13:12: 3d:89:91:67:d7:d4:02:a9:b6:a6:80:ab:b9:92:16:fd:9e:68: c7:89:1f:a0:8c:1b:db:cc:0f:1f:09:5f:20:13:00:77:a8:71: 34:da:ed:80:d9:a1:98:f2:03:3c:2f:db:c7:29:eb:60:0a:a3: 3c:51:57:9d:da:33:97:1e:08:fe:21:25:c4:6f:61:ce:b4:2f: eb:0f:e2:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyYC0pC20JLnUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGRjNmQ5ODgtNmFjZC00NTBhLThjYjktZDZjMzczZTIxZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLZjyBadqAAFnw0/7zMix1EgyvksGZpM4cOt iWrsuWZjPIED/vjtTUwuOaYxGqX0gxIe+tMfnWpGGzogSwThhX2wONmOgwLIBNmi t7WEcGtchcrSVeoOvY8mm09O5TmYVjOZZoXCnJr89/q0feeZRQ8RxZOE54PArciH oWYq6I0sVbj7DSPR82moAiTvR6wX1lkr6ACXpAnp6Cn0T8rfAnfD1GoCSFHcn5fd yCt5EPFxNNsZwSD84KQqhZ9WmnRaAt3IpXh4jbKu3WEwSGS7NpYY+m3kf47mk0pd ezAF/Z2YUadf6jgq1Ecc++5aXLFlAzeX9Oj7qPSEAMtM4KQ3ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaN0TKP6DvDXrKE1EGoF7gE5Jb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQ3YThlOTAtYzkwNi0z Y2RlLWJjNjgtNDFkZGFiZGE0ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIynibP3og1/wQQ9OBpRh6mdFI8JhkZcbMFg++tQ7RSFY5QiE0TE46u XscayHwE3lncjbjBVdxO4y0Gcl6KBmuaG4V3w1PFaDvVDtijKr4C1VyP6EzveWeK BE/0R17z21eSefjwJbg9us2GHgUR/br2lB9W8rFnFTWPoFlF8g6RfPPlk4y5qbOj 4c7g1k19Vw7/04krz3wH7zakllhuri4UvvSUNgkwn6L92xcNB+ADLpETEj2JkWfX 1AKptqaAq7mSFv2eaMeJH6CMG9vMDx8JXyATAHeocTTa7YDZoZjyAzwv28cp62AK ozxRV53aM5ceCP4hJcRvYc60L+sP4vw= -----END CERTIFICATE-----Generated at Thu Oct 1 13:45:00 2026 by rpki-client