$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa File: 2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa (raw, json) Hash identifier: kwTq49eqjE3CNzPwCz9UB7kXnE+OHODuDV+K3OPRGd8= Subject key identifier: 43:B5:B8:B0:6D:F7:18:17:07:3C:0C:DF:7D:52:54:22:62:D5:92:4D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD8E2F5D10E2FDF394200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d8:e2:f5:d1:0e:2f:df:39:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=b47229f8-0ede-4a1f-8357-f3cfd486f632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:e7:02:75:a0:a2:77:a7:62:d1:9d:24:8f: a3:d2:b5:b0:04:19:7f:ff:41:23:5d:55:2d:e5:3f: 39:2b:b9:d2:b9:7e:41:ba:a3:ff:08:9d:92:14:db: 05:53:ab:c5:b1:6c:0c:fa:6f:1c:39:d8:26:01:07: 7e:be:ce:03:6c:3f:ac:0c:7a:9f:f9:8c:33:a4:f3: aa:db:7e:8e:5b:cc:14:71:2e:f7:c7:79:65:00:45: 3b:26:11:49:60:90:79:51:ba:8c:27:da:9c:5a:2e: 11:4f:5a:9f:1a:2c:a6:ea:3b:71:2e:74:2a:df:71: ef:ef:cf:56:22:02:ed:18:15:42:98:3b:95:6a:87: 44:9b:2c:45:99:13:b9:fe:30:d7:bc:00:37:5b:ea: f0:e1:fa:b1:2d:96:76:ad:7f:3f:c5:47:62:21:63: 40:43:aa:0e:61:49:61:f7:30:34:5c:3f:a6:fc:99: 01:15:06:6f:01:fd:5d:4f:12:a9:17:d9:06:2d:34: c4:4e:e3:0c:34:52:8f:67:92:39:fa:ad:1e:a3:98: c2:8f:76:8e:4f:ef:3d:88:d8:83:fd:59:be:d9:57: e9:91:a4:0d:dc:05:c8:39:ff:52:97:12:c0:78:ea: 4c:45:3d:50:d3:5f:b2:94:a1:c7:51:5f:be:7e:7e: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B5:B8:B0:6D:F7:18:17:07:3C:0C:DF:7D:52:54:22:62:D5:92:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e6:62:55:e1:de:c9:6f:8d:81:f9:be:5a:f6:83:91:7c:12: ec:ae:39:80:a4:0d:d4:75:b9:1f:42:c0:a6:a2:bc:70:6a:1e: fc:4a:de:94:7c:ee:da:ad:49:18:db:21:ca:aa:56:a5:d2:d9: 70:28:51:55:67:16:c6:5f:d5:66:8a:7c:47:db:f4:33:2f:1b: e7:52:2f:dc:d1:e7:87:bd:2a:c5:f3:21:72:21:38:d2:22:79: 24:08:8c:08:c3:91:92:41:ed:a9:9e:c6:14:8a:20:d9:ad:dd: 67:d8:bf:71:c1:26:a0:e2:6c:c2:5f:64:06:85:68:11:2b:e3: a3:04:fb:ae:87:20:3d:8f:d0:75:7f:b1:7c:b7:b4:62:24:0d: 7e:76:28:e0:82:3c:cc:06:01:ca:7c:a5:41:61:40:fc:dc:65: f9:fb:29:d6:ef:b4:c2:91:59:1e:d2:38:73:36:f1:ad:6b:30: 9f:a1:0e:38:34:cf:79:71:47:9d:04:bf:ed:72:fc:30:ae:da: 37:61:e8:3a:bb:9d:84:67:08:51:da:78:92:35:49:63:a1:9d: d4:e3:e2:66:6a:d1:61:f2:d2:64:b1:c4:50:84:bd:10:07:5b: b4:07:fa:00:49:68:b2:8e:19:a8:0b:24:a8:45:ab:a7:30:21: 4c:f9:62:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39ji9dEOL985QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YjQ3MjI5ZjgtMGVkZS00YTFmLTgzNTctZjNjZmQ0ODZmNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+vnAnWgonenYtGdJI+j0rWwBBl//0EjXVUt 5T85K7nSuX5BuqP/CJ2SFNsFU6vFsWwM+m8cOdgmAQd+vs4DbD+sDHqf+YwzpPOq 236OW8wUcS73x3llAEU7JhFJYJB5UbqMJ9qcWi4RT1qfGiym6jtxLnQq33Hv789W IgLtGBVCmDuVaodEmyxFmRO5/jDXvAA3W+rw4fqxLZZ2rX8/xUdiIWNAQ6oOYUlh 9zA0XD+m/JkBFQZvAf1dTxKpF9kGLTTETuMMNFKPZ5I5+q0eo5jCj3aOT+89iNiD /Vm+2VfpkaQN3AXIOf9SlxLAeOpMRT1Q01+ylKHHUV++fn6adwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO1uLBt9xgXBzwM331SVCJi1ZJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM4OWRhODItN2MxMy0z NzhhLWJmYjItZjhmMWRlOTQwZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3mYlXh3slvjYH5vlr2g5F8EuyuOYCkDdR1uR9CwKaivHBqHvxK3pR8 7tqtSRjbIcqqVqXS2XAoUVVnFsZf1WaKfEfb9DMvG+dSL9zR54e9KsXzIXIhONIi eSQIjAjDkZJB7amexhSKINmt3WfYv3HBJqDibMJfZAaFaBEr46ME+66HID2P0HV/ sXy3tGIkDX52KOCCPMwGAcp8pUFhQPzcZfn7KdbvtMKRWR7SOHM28a1rMJ+hDjg0 z3lxR50Ev+1y/DCu2jdh6Dq7nYRnCFHaeJI1SWOhndTj4mZq0WHy0mSxxFCEvRAH W7QH+gBJaLKOGagLJKhFq6cwIUz5Yn8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:48:29 2026 by rpki-client