$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa File: 2d04850b-c425-399f-a2a3-1e07cbe5340a.roa (raw, json) Hash identifier: 7H+nGgyx4+RDbf+DC6759ysNAgcq0KzbHBmoMI8vvZI= Subject key identifier: F8:1C:57:14:0E:F6:F3:77:E6:29:53:44:33:3E:5F:FA:4C:7B:C5:29 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFF0B505061C7075EFB1C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f0:b5:05:06:1c:70:75:ef:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=7f4c1381-c761-43a5-b6c6-76b0c856186f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:ed:d7:1d:e3:e0:a5:6b:c6:e1:8d:cc:be: 38:ef:61:70:82:f1:2a:b1:36:05:cc:77:7f:fa:d0: 12:72:3a:90:ab:84:2f:db:f3:50:2a:3c:4b:29:35: c1:cc:6e:f7:1b:8a:72:60:80:4b:23:65:d2:19:e3: 7c:01:6a:b6:27:f4:f1:bf:84:2d:3c:45:3b:41:ba: 2a:90:56:53:a6:3a:ed:53:c6:cc:30:6a:19:b9:76: 5f:6e:eb:49:0e:a5:d4:0b:a0:f5:cd:a6:82:70:0f: c5:38:be:0d:da:83:b2:2b:5b:fd:2f:23:fe:bb:7d: 9c:5f:ec:6f:22:ad:bd:3e:7d:2e:8a:a9:53:e0:f5: bd:02:bf:47:fb:b8:f6:d9:b5:57:02:62:2d:f8:bd: dc:fe:24:58:5f:d3:1a:0b:e0:74:8c:bd:12:d6:e8: b8:dc:97:b0:86:9b:58:b9:2e:54:87:c0:18:a2:5d: 1e:7c:e1:9e:a1:10:cd:24:3b:78:51:f8:6a:07:c4: aa:66:65:24:c9:9d:47:5d:c4:71:88:98:68:b6:04: 92:a1:ea:7e:16:7a:1c:ab:9f:46:e7:6c:0a:54:6e: 72:10:4e:ad:8d:72:e6:9d:a6:be:71:19:80:26:93: d8:cc:83:13:ac:0f:9b:5d:e5:74:7a:80:c9:93:1e: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1C:57:14:0E:F6:F3:77:E6:29:53:44:33:3E:5F:FA:4C:7B:C5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8b:77:56:73:2f:6c:cc:84:83:87:f3:14:c1:36:f6:33:c5: c6:27:87:cf:f9:a9:ed:a6:b3:d0:57:39:db:56:7d:ba:f8:c1: f9:62:ea:71:3b:10:a2:45:7e:73:36:2d:a2:68:85:fe:cd:82: b1:5b:81:67:df:15:4f:a5:e7:d3:06:f4:4d:59:29:fe:29:6e: 94:1b:17:94:9f:ab:d6:49:83:97:91:7e:b6:b6:9a:52:da:64: d9:96:ef:7c:90:29:04:f5:c3:26:c8:76:3b:ca:f5:c3:71:06: ee:3e:99:58:18:30:31:70:76:4c:ea:25:87:e1:e5:cd:c6:0b: e7:4c:76:d0:c5:4b:e1:15:9f:80:f8:ff:5a:de:24:8e:27:0d: dd:56:3a:b6:76:ea:e7:49:0f:39:ba:ed:6d:38:3e:b8:fe:a0: a3:0a:5c:35:95:18:9b:1d:dc:18:a4:24:4e:ba:38:e5:b4:ce: 65:a3:82:79:86:b5:04:53:62:ff:ae:bd:97:03:77:ad:06:6b: c1:67:f4:e5:eb:c0:c7:55:9f:9f:df:2b:11:f8:3e:54:65:a1: 13:77:8c:ad:4e:96:31:30:84:7c:a7:55:77:4c:3a:23:40:14: bb:be:39:4f:d9:1a:ec:5f:29:15:85:e6:aa:29:6f:3d:d2:61: 37:2d:7a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/C1BQYccHXvscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk N2Y0YzEzODEtYzc2MS00M2E1LWI2YzYtNzZiMGM4NTYxODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQvt1x3j4KVrxuGNzL4472FwgvEqsTYFzHd/ +tAScjqQq4Qv2/NQKjxLKTXBzG73G4pyYIBLI2XSGeN8AWq2J/Txv4QtPEU7Qboq kFZTpjrtU8bMMGoZuXZfbutJDqXUC6D1zaaCcA/FOL4N2oOyK1v9LyP+u32cX+xv Iq29Pn0uiqlT4PW9Ar9H+7j22bVXAmIt+L3c/iRYX9MaC+B0jL0S1ui43JewhptY uS5Uh8AYol0efOGeoRDNJDt4UfhqB8SqZmUkyZ1HXcRxiJhotgSSoep+Fnocq59G 52wKVG5yEE6tjXLmnaa+cRmAJpPYzIMTrA+bXeV0eoDJkx4jkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgcVxQO9vN35ilTRDM+X/pMe8UpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmQwNDg1MGItYzQyNS0z OTlmLWEyYTMtMWUwN2NiZTUzNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiLd1ZzL2zMhIOH8xTBNvYzxcYnh8/5qe2ms9BXOdtWfbr4wfli6nE7 EKJFfnM2LaJohf7NgrFbgWffFU+l59MG9E1ZKf4pbpQbF5Sfq9ZJg5eRfra2mlLa ZNmW73yQKQT1wybIdjvK9cNxBu4+mVgYMDFwdkzqJYfh5c3GC+dMdtDFS+EVn4D4 /1reJI4nDd1WOrZ26udJDzm67W04Prj+oKMKXDWVGJsd3BikJE66OOW0zmWjgnmG tQRTYv+uvZcDd60Ga8Fn9OXrwMdVn5/fKxH4PlRloRN3jK1OljEwhHynVXdMOiNA FLu+OU/ZGuxfKRWF5qopbz3SYTcteqQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:50:46 2026 by rpki-client