$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0864e15e-c58f-3323-9e4f-aa4dc5448ace.roa File: 0864e15e-c58f-3323-9e4f-aa4dc5448ace.roa (raw, json) Hash identifier: DdvC/W1gxHTtYU0aNcxMlGq8Cg5ie+a6a8XOSB860nY= Subject key identifier: CA:13:2E:05:98:BA:17:5F:89:67:06:8C:5C:E8:69:6C:23:F1:E6:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFDDA95F773D4B462B9000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0864e15e-c58f-3323-9e4f-aa4dc5448ace.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:dd:a9:5f:77:3d:4b:46:2b:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=a313fab9-2fed-42e6-b006-e181fcdb3d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:91:5b:14:a6:e3:9a:92:88:86:c1:87:30:ea: 71:79:20:77:b5:44:62:d7:66:80:e3:5d:9b:e8:24: ac:9d:61:1a:f8:2c:67:29:69:db:42:fa:92:2b:01: de:83:8f:21:3e:4e:63:9d:1d:bc:26:94:83:9b:9c: 9e:4b:e3:d9:44:50:f2:ca:f6:e1:82:24:27:e9:84: d4:bf:5b:96:48:a5:35:00:03:62:0e:4f:5c:2a:d1: 8c:e9:6e:f8:9e:e8:2f:c9:1e:10:10:d5:fd:79:5f: c8:ec:c8:70:e6:e3:3d:a8:3c:1e:29:09:f3:28:47: 73:6d:99:42:46:ca:8c:66:7c:0f:50:21:88:e9:c1: 91:66:d5:46:74:b2:ce:36:60:7e:d6:a7:50:a8:21: 52:74:16:48:5f:11:df:e4:9c:ad:27:28:cd:31:55: 0c:bd:36:b5:41:a7:3a:95:3e:d8:9e:d4:a1:22:19: 17:f7:7a:21:99:5e:5f:e3:ee:9e:54:a5:c1:3b:cb: 14:4f:2f:8a:4b:ca:83:16:a5:5c:aa:f5:ba:f8:c9: d1:d1:95:6e:f1:6b:dd:4e:51:e1:e8:61:6c:53:37: c4:b6:b4:f1:71:32:98:08:68:99:15:5e:70:1d:84: e5:4a:b0:ae:bb:c2:3d:8b:a4:2d:76:80:ee:9a:44: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:2E:05:98:BA:17:5F:89:67:06:8C:5C:E8:69:6C:23:F1:E6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0864e15e-c58f-3323-9e4f-aa4dc5448ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:df:d5:46:a3:a4:1f:94:eb:f1:81:63:10:71:2f:b0:48:58: 0f:e9:0c:ee:cb:79:90:08:c2:fc:67:b6:ff:a5:1f:68:fd:a6: 29:96:c1:7f:ec:7c:cc:70:5b:e4:35:0d:24:de:bc:a6:41:c8: e1:65:28:da:cc:c5:0e:7d:84:64:b7:24:cd:7c:d5:51:8e:53: 75:8d:e1:a8:0a:5b:a4:14:8a:88:e9:5a:89:17:03:1a:e9:35: 34:d1:ec:79:40:b7:69:db:10:08:12:5d:6a:b3:41:3c:7b:90: 93:39:b4:81:dc:23:ef:dc:5d:e0:b1:1d:08:19:d8:3b:29:66: ec:c3:5b:f3:e7:84:e6:88:fc:17:74:c0:b9:3a:c2:c0:50:54: 4f:6b:2a:56:fb:b1:20:ad:c5:87:88:d2:7b:4f:70:55:d6:fa: a4:14:f1:67:e9:45:53:5a:78:1e:dc:b2:62:05:6d:cf:9d:1f: 35:8b:14:d0:5a:f2:4a:64:0d:47:a0:c6:3b:d1:4e:af:11:dc: e3:d1:0b:1f:46:dc:15:82:85:d6:f2:6e:0f:c6:79:44:e1:b2: e3:f7:27:73:a8:3a:bc:11:e0:37:23:49:a2:d1:a1:11:9a:4d: ef:60:ec:84:4c:35:41:fd:5a:99:83:5e:ba:c2:e3:8d:52:2a: 20:4a:98:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n392pX3c9S0YrkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YTMxM2ZhYjktMmZlZC00MmU2LWIwMDYtZTE4MWZjZGIzZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJFbFKbjmpKIhsGHMOpxeSB3tURi12aA412b 6CSsnWEa+CxnKWnbQvqSKwHeg48hPk5jnR28JpSDm5yeS+PZRFDyyvbhgiQn6YTU v1uWSKU1AANiDk9cKtGM6W74nugvyR4QENX9eV/I7Mhw5uM9qDweKQnzKEdzbZlC RsqMZnwPUCGI6cGRZtVGdLLONmB+1qdQqCFSdBZIXxHf5JytJyjNMVUMvTa1Qac6 lT7YntShIhkX93ohmV5f4+6eVKXBO8sUTy+KS8qDFqVcqvW6+MnR0ZVu8WvdTlHh 6GFsUzfEtrTxcTKYCGiZFV5wHYTlSrCuu8I9i6QtdoDumkQWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoTLgWYuhdfiWcGjFzoaWwj8eZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDg2NGUxNWUtYzU4Zi0z MzIzLTllNGYtYWE0ZGM1NDQ4YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7f1UajpB+U6/GBYxBxL7BIWA/pDO7LeZAIwvxntv+lH2j9pimWwX/s fMxwW+Q1DSTevKZByOFlKNrMxQ59hGS3JM181VGOU3WN4agKW6QUiojpWokXAxrp NTTR7HlAt2nbEAgSXWqzQTx7kJM5tIHcI+/cXeCxHQgZ2DspZuzDW/PnhOaI/Bd0 wLk6wsBQVE9rKlb7sSCtxYeI0ntPcFXW+qQU8WfpRVNaeB7csmIFbc+dHzWLFNBa 8kpkDUegxjvRTq8R3OPRCx9G3BWChdbybg/GeUThsuP3J3OoOrwR4DcjSaLRoRGa Te9g7IRMNUH9WpmDXrrC441SKiBKmOI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:09:19 2026 by rpki-client