$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa File: 2d04850b-c425-399f-a2a3-1e07cbe5340a.roa (raw, json) Hash identifier: aJof4qhAzNaSpJHoMGq5+JT3+OClk0NSEPwYrlt37IA= Subject key identifier: 26:CC:FF:8E:DC:04:9E:13:94:7D:73:9D:7A:B4:E9:95:75:77:A4:B5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0DA3C305626CE3FDA710 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0d:a3:c3:05:62:6c:e3:fd:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=71d1c63b-5b9a-48d9-8a26-041c72e120a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:d0:38:e9:5c:56:be:76:de:6b:69:3e:94: dc:4e:bb:d5:f3:1b:cc:4b:cd:d8:4a:79:f5:32:fa: f2:b3:92:2f:07:e7:33:85:ce:95:87:e1:6b:60:65: 83:80:3b:ba:62:59:08:25:ce:a6:a5:d8:49:eb:09: fc:eb:c0:6e:9c:fd:93:b3:45:54:2a:36:13:10:41: 9d:df:e1:97:ef:77:8a:10:c0:5c:a1:6c:27:b4:98: 53:b1:90:44:ff:78:7e:36:8b:5b:91:b5:7e:f9:e7: 8e:51:e9:99:74:6c:51:5b:42:0e:3e:bc:65:a9:87: b5:4e:8e:cf:c1:12:71:36:77:aa:c3:4d:2c:01:98: 69:4b:37:a4:1b:46:bc:a7:f6:f5:55:9a:9b:cf:17: b4:e0:7c:e9:39:4f:5c:02:81:6f:fa:0c:6e:17:16: 47:86:46:1d:56:4b:b4:b6:eb:80:f6:d8:83:9d:ed: b4:57:1f:86:46:60:10:ae:36:fe:ec:b7:f3:94:02: 27:41:45:d3:39:28:93:19:35:e7:c8:ac:48:7c:b9: e0:cc:df:78:35:44:37:af:85:e7:be:54:eb:ed:3e: 88:ee:41:75:6e:8d:3f:37:86:74:d5:c6:eb:63:01: e6:15:2a:12:6e:23:a1:89:12:39:ed:7b:70:90:1f: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CC:FF:8E:DC:04:9E:13:94:7D:73:9D:7A:B4:E9:95:75:77:A4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a3:5c:46:0e:c6:2b:77:92:5b:0a:d5:c3:6c:66:73:e5:92: 82:6d:94:01:b4:af:65:02:2d:76:ec:4d:bf:0f:a4:08:27:6e: 84:54:96:d6:29:4a:03:4d:db:1f:d5:9c:74:da:2e:59:3f:2e: 48:48:76:c0:29:98:01:ac:4d:65:32:0e:84:d4:bd:9b:92:9e: f6:5c:32:43:64:54:39:b0:d7:d7:f0:09:7d:38:cb:c9:5a:8d: b4:7c:c5:57:93:e2:e4:e4:27:35:80:cf:93:a7:cd:c3:da:6e: 8b:69:20:28:71:06:15:b8:56:e1:a2:82:52:a4:7e:bf:eb:c0: 12:ee:a8:50:25:2a:c3:b9:c4:52:75:70:9e:33:8a:c1:16:eb: 35:b6:fa:b6:18:7b:c5:33:9d:0c:79:f1:87:9a:52:68:0a:ac: 79:d8:86:76:76:be:54:39:b1:49:59:39:01:23:cd:f0:ee:43: 95:4b:f5:3c:2e:d4:a0:bb:d0:6b:78:5c:21:88:40:38:11:9d: 7d:f7:6f:52:0e:f5:4a:ae:81:4d:72:a6:53:6b:98:62:d1:70: 73:43:8a:c7:65:9f:e1:70:1a:1d:42:40:b7:70:aa:57:de:2d: 45:5c:0e:61:53:9b:13:62:71:44:c4:64:88:db:6c:2a:2f:2a: 46:52:fb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQ2jwwVibOP9pxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NzFkMWM2M2ItNWI5YS00OGQ5LThhMjYtMDQxYzcyZTEyMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOPQOOlcVr523mtpPpTcTrvV8xvMS83YSnn1 Mvrys5IvB+czhc6Vh+FrYGWDgDu6YlkIJc6mpdhJ6wn868BunP2Ts0VUKjYTEEGd 3+GX73eKEMBcoWwntJhTsZBE/3h+NotbkbV++eeOUemZdGxRW0IOPrxlqYe1To7P wRJxNneqw00sAZhpSzekG0a8p/b1VZqbzxe04HzpOU9cAoFv+gxuFxZHhkYdVku0 tuuA9tiDne20Vx+GRmAQrjb+7LfzlAInQUXTOSiTGTXnyKxIfLngzN94NUQ3r4Xn vlTr7T6I7kF1bo0/N4Z01cbrYwHmFSoSbiOhiRI57XtwkB9XRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbM/47cBJ4TlH1znXq06ZV1d6S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmQwNDg1MGItYzQyNS0z OTlmLWEyYTMtMWUwN2NiZTUzNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACejXEYOxit3klsK1cNsZnPlkoJtlAG0r2UCLXbsTb8PpAgnboRUltYp SgNN2x/VnHTaLlk/LkhIdsApmAGsTWUyDoTUvZuSnvZcMkNkVDmw19fwCX04y8la jbR8xVeT4uTkJzWAz5OnzcPabotpIChxBhW4VuGiglKkfr/rwBLuqFAlKsO5xFJ1 cJ4zisEW6zW2+rYYe8UznQx58YeaUmgKrHnYhnZ2vlQ5sUlZOQEjzfDuQ5VL9Twu 1KC70Gt4XCGIQDgRnX33b1IO9UqugU1yplNrmGLRcHNDisdln+FwGh1CQLdwqlfe LUVcDmFTmxNicUTEZIjbbCovKkZS+/Y= -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:09 2025 by rpki-client