$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa File: 1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa (raw, json) Hash identifier: tAsfH1bTS2UaFCYFdf59zfxsp68Q7OKXGmAwFlia2Y0= Subject key identifier: D7:84:63:6D:10:32:B5:C2:D6:A6:D1:37:51:07:06:1A:EF:76:EB:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFF150191B126E4264B080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f1:50:19:1b:12:6e:42:64:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=1b61a8bf-998f-4a2d-9c13-9b2dcf2963b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:6a:6f:20:29:51:12:4e:40:a5:76:57:c8: 17:89:d3:4b:57:04:8f:33:02:11:f7:17:44:80:8a: a4:bc:6d:9f:67:58:f4:54:a8:96:b5:ca:05:30:db: 97:90:59:16:3e:af:7a:c9:1c:56:45:2c:c1:27:96: f3:dd:20:b8:a2:04:b2:c6:43:15:38:ac:cb:ae:06: 96:15:7f:ba:57:ae:d2:cf:ef:13:ff:d3:c6:8a:a1: a5:64:61:ce:83:fa:49:25:36:b1:d3:0e:fc:f8:c2: 5a:3c:20:9c:ae:a9:49:2e:15:b6:8a:77:58:b1:86: 61:6f:89:1e:ed:08:b5:03:eb:cd:8c:18:2a:24:09: 79:1b:74:c0:9b:c2:96:4a:17:ec:c0:02:29:77:69: 2b:e6:ac:19:c9:93:0d:a1:31:f2:d4:be:01:1d:de: ca:25:52:2e:02:39:c6:a9:b9:62:0c:04:87:e0:93: 57:8e:c3:d9:26:36:38:61:0e:df:34:11:1e:2f:74: 80:fc:90:a5:55:3c:21:d3:60:6e:27:77:43:12:c4: fa:2e:f5:2a:b9:49:dd:3f:e6:45:cf:23:cf:94:b8: 5b:f3:94:89:d9:9d:31:c6:5f:d5:4c:c8:89:89:12: 34:76:a6:1c:f5:27:cf:01:05:bb:8a:82:06:7b:9c: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:84:63:6D:10:32:B5:C2:D6:A6:D1:37:51:07:06:1A:EF:76:EB:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fdf6b80-c6cd-3f32-a9be-4a4beab5bde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e3:46:b3:be:85:da:fd:37:c3:3a:76:f4:e0:d3:a1:f3:df: 5c:1b:08:d3:3d:fc:6e:11:ea:bd:ef:1a:b8:95:d9:c5:93:92: 24:49:ab:b2:29:51:8e:e0:50:7f:7e:dc:52:e3:b1:9d:27:18: 06:d1:8a:3c:f4:4c:03:6d:fc:da:ba:b7:e0:1b:e9:b4:33:bc: 97:6a:1a:77:32:92:94:cc:36:32:b0:6d:0c:2f:90:49:8c:81: dd:6b:f9:9b:c0:09:15:10:35:e6:e3:27:87:51:c8:fc:e3:94: 05:39:ac:3b:98:d0:bb:73:85:76:61:db:a9:7f:d0:21:3c:3e: b0:0f:ef:6e:5f:55:0e:8d:ac:2c:fc:3b:4a:8e:18:81:c0:9b: 58:4e:1c:eb:f6:b1:3b:d0:4d:ae:b4:04:39:ed:e6:1f:d3:12: 54:99:ab:17:d6:9f:9d:5b:be:23:a5:df:ae:fd:16:49:e2:4b: 64:79:fd:91:e7:4d:a2:85:74:c8:20:46:8b:bb:45:6d:07:8d: 95:1e:65:7d:f7:be:64:a8:42:8c:52:9d:9b:38:61:82:ce:5d: 38:2b:94:b2:8e:50:3d:da:7e:36:dc:9f:09:e1:21:78:fe:5a: 69:89:2e:7d:84:9c:df:62:b7:a7:a4:7e:9e:f7:eb:36:2f:0c: 54:e5:4f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/FQGRsSbkJksIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MWI2MWE4YmYtOTk4Zi00YTJkLTljMTMtOWIyZGNmMjk2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZhqbyApURJOQKV2V8gXidNLVwSPMwIR9xdE gIqkvG2fZ1j0VKiWtcoFMNuXkFkWPq96yRxWRSzBJ5bz3SC4ogSyxkMVOKzLrgaW FX+6V67Sz+8T/9PGiqGlZGHOg/pJJTax0w78+MJaPCCcrqlJLhW2indYsYZhb4ke 7Qi1A+vNjBgqJAl5G3TAm8KWShfswAIpd2kr5qwZyZMNoTHy1L4BHd7KJVIuAjnG qbliDASH4JNXjsPZJjY4YQ7fNBEeL3SA/JClVTwh02BuJ3dDEsT6LvUquUndP+ZF zyPPlLhb85SJ2Z0xxl/VTMiJiRI0dqYc9SfPAQW7ioIGe5wxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeEY20QMrXC1qbRN1EHBhrvduviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWZkZjZiODAtYzZjZC0z ZjMyLWE5YmUtNGE0YmVhYjViZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnjRrO+hdr9N8M6dvTg06Hz31wbCNM9/G4R6r3vGriV2cWTkiRJq7Ip UY7gUH9+3FLjsZ0nGAbRijz0TANt/Nq6t+Ab6bQzvJdqGncykpTMNjKwbQwvkEmM gd1r+ZvACRUQNebjJ4dRyPzjlAU5rDuY0LtzhXZh26l/0CE8PrAP725fVQ6NrCz8 O0qOGIHAm1hOHOv2sTvQTa60BDnt5h/TElSZqxfWn51bviOl3679FkniS2R5/ZHn TaKFdMggRou7RW0HjZUeZX33vmSoQoxSnZs4YYLOXTgrlLKOUD3afjbcnwnhIXj+ WmmJLn2EnN9it6ekfp736zYvDFTlT/w= -----END CERTIFICATE-----Generated at Fri Apr 17 07:31:06 2026 by rpki-client