$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa File: 1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa (raw, json) Hash identifier: M/+P3C/AnypB2k1GY9i4Esi+thiE2X90hG4kPlxxuF8= Subject key identifier: D2:F8:D9:B8:B1:5D:0C:E6:27:04:95:75:CF:41:A8:3A:90:6B:A0:1B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876FAD3C9FE44B03A7C000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6f:ad:3c:9f:e4:4b:03:a7:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=7eec057a-b4ad-4c2e-8315-1c7095c46a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:75:b9:ad:2a:e6:50:d7:c5:cc:3c:bd:e2: f0:bf:18:94:8a:1f:d3:3f:84:b0:d9:8e:3f:6d:64: 55:0c:00:d3:00:71:05:07:2b:a7:07:09:c3:81:ce: 9e:51:80:0e:18:58:25:8c:42:61:b5:8d:bd:41:e6: b5:09:4a:dc:93:19:3f:c2:05:da:5c:76:af:94:c1: 8f:4d:99:14:19:a1:da:dc:40:77:7d:0a:d2:fe:d9: a7:f0:83:19:3c:7e:2e:c9:28:67:58:de:fe:2c:e0: 98:d1:d3:84:de:9a:31:e7:94:f7:92:e9:50:e3:ac: 0a:16:a2:bc:4e:57:09:cf:0d:12:33:6a:b3:e4:43: 03:f2:28:35:79:94:14:50:04:ad:3f:47:5c:15:7e: 40:be:e0:46:ba:66:b3:6f:0f:00:31:6c:4f:02:6e: a7:75:38:ec:fc:49:2b:6a:b9:a2:3c:2a:69:6c:56: 23:cc:4a:c8:87:eb:8c:cb:05:4a:12:8b:c5:20:b0: 0d:62:21:e4:24:1e:1a:6b:f1:b6:bd:6c:28:fe:4a: 64:0d:72:87:7c:95:fe:0f:de:54:43:c3:9d:7e:81: 41:c1:64:47:7b:9d:0d:21:39:a1:a4:eb:e1:3b:0a: 55:3f:a8:7b:35:ed:7e:2d:40:cc:d4:fb:f5:c8:39: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:D9:B8:B1:5D:0C:E6:27:04:95:75:CF:41:A8:3A:90:6B:A0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e6c4fdc-d237-3069-a177-e9c0a5b32a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e8:3b:41:90:4b:4d:6b:8d:f1:58:32:12:39:d9:97:f5:9f: be:f4:db:56:de:53:fd:0d:19:a7:cb:41:6b:d8:e7:8c:d8:48: b9:8d:e4:d4:c0:8c:ff:05:fe:71:de:75:7a:f1:71:6c:3f:74: d9:a9:52:d6:23:99:d7:51:df:b2:0e:07:9a:24:c8:6d:cf:ca: 10:5a:6d:90:3a:b5:ed:5b:71:3b:b5:96:7e:ed:df:d1:ba:85: 38:c7:16:bb:52:e2:43:e3:ae:b1:9e:d0:a9:dd:58:c0:71:58: 5c:93:f7:79:ae:22:ea:d1:7c:be:9b:2d:f3:de:01:9a:14:27: 8b:3e:20:ad:66:75:0b:c4:8c:ef:af:8c:32:19:44:01:98:f5: 0a:46:0e:28:45:8c:40:99:b1:8e:df:6b:46:d7:9d:9c:1b:19: c2:e6:9c:d3:aa:dc:2c:74:91:59:da:d1:09:67:e8:e5:ce:dd: c1:22:54:64:8a:0e:f9:62:29:4c:3e:e6:d2:e0:3e:7d:b9:8d: 83:3d:de:fb:02:f6:a8:34:ab:c8:18:fa:6f:78:ab:95:06:63: fb:72:2c:33:f4:e7:43:41:e2:29:1c:fa:03:58:98:10:b0:28: ac:72:a8:51:5a:b2:1c:ce:a9:cc:04:31:3b:fa:50:9d:da:fc: 0d:3f:cc:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2+tPJ/kSwOnwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk N2VlYzA1N2EtYjRhZC00YzJlLTgzMTUtMWM3MDk1YzQ2YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXF1ua0q5lDXxcw8veLwvxiUih/TP4Sw2Y4/ bWRVDADTAHEFByunBwnDgc6eUYAOGFgljEJhtY29Qea1CUrckxk/wgXaXHavlMGP TZkUGaHa3EB3fQrS/tmn8IMZPH4uyShnWN7+LOCY0dOE3pox55T3kulQ46wKFqK8 TlcJzw0SM2qz5EMD8ig1eZQUUAStP0dcFX5AvuBGumazbw8AMWxPAm6ndTjs/Ekr armiPCppbFYjzErIh+uMywVKEovFILANYiHkJB4aa/G2vWwo/kpkDXKHfJX+D95U Q8OdfoFBwWRHe50NITmhpOvhOwpVP6h7Ne1+LUDM1Pv1yDkKpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL42bixXQzmJwSVdc9BqDqQa6AbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWU2YzRmZGMtZDIzNy0z MDY5LWExNzctZTljMGE1YjMyYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPoO0GQS01rjfFYMhI52Zf1n77021beU/0NGafLQWvY54zYSLmN5NTA jP8F/nHedXrxcWw/dNmpUtYjmddR37IOB5okyG3PyhBabZA6te1bcTu1ln7t39G6 hTjHFrtS4kPjrrGe0KndWMBxWFyT93muIurRfL6bLfPeAZoUJ4s+IK1mdQvEjO+v jDIZRAGY9QpGDihFjECZsY7fa0bXnZwbGcLmnNOq3Cx0kVna0Qln6OXO3cEiVGSK DvliKUw+5tLgPn25jYM93vsC9qg0q8gY+m94q5UGY/tyLDP050NB4ikc+gNYmBCw KKxyqFFashzOqcwEMTv6UJ3a/A0/zKA= -----END CERTIFICATE-----Generated at Mon Sep 21 12:58:12 2026 by rpki-client