$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa File: 06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa (raw, json) Hash identifier: 53JTKCN0ER1WcjFSRt6ovFqjjjMKQvMO9MgAuP+yv3I= Subject key identifier: C0:3D:FB:9F:F9:8A:3B:12:D4:D2:AC:82:00:F1:18:16:59:05:D7:E6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877E2115AAB50F12B7F8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7e:21:15:aa:b5:0f:12:b7:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=0086b237-1a8c-480b-81b7-40f8ddd77378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c3:25:a6:52:90:0a:52:ae:10:4b:83:84:f8: d8:32:b7:6e:7c:65:bc:38:96:88:28:15:b2:ff:bf: df:ae:e5:a0:f4:45:1b:a7:45:50:be:8b:bd:4c:20: a4:31:65:5c:f7:d0:aa:92:25:88:bd:83:6e:9a:2c: 3e:ce:14:ca:51:0e:fb:4a:ef:1a:3a:fd:9a:6c:ab: 58:bb:69:38:ba:a4:af:ad:27:ee:ff:a8:3c:6a:12: 75:02:5d:dd:f7:66:dc:8c:73:20:da:30:e4:c6:5e: 30:2f:ae:4a:79:31:78:91:8e:e4:ca:c6:c7:6e:6c: 82:b4:af:c9:08:97:fb:0a:25:87:24:6f:8e:11:80: b5:23:07:41:d1:61:2d:f4:db:83:71:f6:dc:af:5d: 7b:aa:d3:8d:fe:ce:9c:75:a8:8e:72:7b:b8:e8:27: 3f:13:53:d1:b6:b6:a9:7b:a4:9d:74:84:84:51:5d: 4f:fe:25:d5:d6:42:aa:14:f1:cf:aa:16:30:e1:a0: 4e:a6:47:62:37:33:fd:69:02:a2:08:91:ba:85:bc: 17:18:8e:d7:ad:9a:b5:83:5f:f0:c6:50:e2:15:e2: 55:0f:40:86:7f:ea:19:a6:94:50:79:b8:7a:d3:b6: d4:ef:5a:16:a4:c1:12:d7:bd:4f:e5:71:f7:e8:18: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3D:FB:9F:F9:8A:3B:12:D4:D2:AC:82:00:F1:18:16:59:05:D7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06f3895c-528f-3066-a2ca-edf9d6e69fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c1:b1:fd:2b:5f:9b:b9:58:ca:23:62:a0:cf:62:b4:04:fc: 65:1f:e2:ef:45:b0:f4:37:5f:69:68:f5:20:15:e8:0e:a9:38: 08:50:6c:84:30:af:33:bd:d1:74:70:82:b8:12:8a:0f:b9:2b: 68:f6:c9:90:7c:92:70:89:4c:cf:9e:03:54:dd:12:25:13:8a: e2:de:48:3d:81:af:8c:9a:b8:66:44:a3:91:7f:da:9d:03:be: e0:e9:1f:24:54:fb:b5:3b:6a:b0:6a:63:6b:6c:bc:0e:a5:89: 2b:28:8c:04:80:12:eb:bd:db:c0:0c:a5:32:fd:df:56:06:99: 2c:b9:f6:53:0c:5b:12:25:82:c5:0c:cc:1a:3c:a5:1c:f2:e5: c4:c3:a6:13:26:aa:9b:b3:63:95:ae:46:65:58:10:fd:24:10: e2:c0:fa:01:c2:23:b3:1f:73:33:89:4a:59:2e:a9:97:ad:e6: 4f:77:b7:7f:1c:c5:83:6c:99:be:25:44:20:41:f5:63:c4:97: b7:f6:76:b1:ae:5f:3e:86:15:ba:7d:51:fd:3a:73:82:f0:5b: 05:3c:6c:21:56:40:ce:14:bf:45:26:20:39:c6:ad:06:2d:7e: f8:27:d3:5d:74:a7:2e:be:63:43:b2:99:b7:99:f9:d4:9c:f9: db:2a:f7:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh34hFaq1DxK3+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MDA4NmIyMzctMWE4Yy00ODBiLTgxYjctNDBmOGRkZDc3Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcMlplKQClKuEEuDhPjYMrdufGW8OJaIKBWy /7/fruWg9EUbp0VQvou9TCCkMWVc99CqkiWIvYNumiw+zhTKUQ77Su8aOv2abKtY u2k4uqSvrSfu/6g8ahJ1Al3d92bcjHMg2jDkxl4wL65KeTF4kY7kysbHbmyCtK/J CJf7CiWHJG+OEYC1IwdB0WEt9NuDcfbcr117qtON/s6cdaiOcnu46Cc/E1PRtrap e6SddISEUV1P/iXV1kKqFPHPqhYw4aBOpkdiNzP9aQKiCJG6hbwXGI7XrZq1g1/w xlDiFeJVD0CGf+oZppRQebh607bU71oWpMES171P5XH36BidcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA9+5/5ijsS1NKsggDxGBZZBdfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDZmMzg5NWMtNTI4Zi0z MDY2LWEyY2EtZWRmOWQ2ZTY5ZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvBsf0rX5u5WMojYqDPYrQE/GUf4u9FsPQ3X2lo9SAV6A6pOAhQbIQw rzO90XRwgrgSig+5K2j2yZB8knCJTM+eA1TdEiUTiuLeSD2Br4yauGZEo5F/2p0D vuDpHyRU+7U7arBqY2tsvA6liSsojASAEuu928AMpTL931YGmSy59lMMWxIlgsUM zBo8pRzy5cTDphMmqpuzY5WuRmVYEP0kEOLA+gHCI7MfczOJSlkuqZet5k93t38c xYNsmb4lRCBB9WPEl7f2drGuXz6GFbp9Uf06c4LwWwU8bCFWQM4Uv0UmIDnGrQYt fvgn0110py6+Y0OymbeZ+dSc+dsq94A= -----END CERTIFICATE-----Generated at Mon Sep 21 18:43:11 2026 by rpki-client