$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa File: 32ff085f-6bc9-3189-b388-01380caf0093.roa (raw, json) Hash identifier: j9eii/u37OEX1/d/cclfjQR+XK8xyxLT0CGLttnwR1E= Subject key identifier: 34:71:00:D0:63:B9:14:AA:66:84:6B:E9:42:FB:15:F6:F6:F9:A9:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD96DB3B6A5F1F94B5000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d9:6d:b3:b6:a5:f1:f9:4b:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=a7c87ea3-889f-41fd-9b8d-2a6dfe5ab45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:18:0d:6f:45:4d:7d:0a:b4:6d:04:aa:2b:87: 22:b0:e6:2c:0b:5a:eb:7a:e6:49:39:98:16:48:5b: 30:bd:8b:0f:ed:a8:f7:70:a6:15:80:fb:95:c7:c0: da:33:7f:8d:d5:b5:7c:8b:99:c0:16:ec:e9:18:18: 1c:e9:80:8f:4c:ef:22:a9:52:e1:1e:3c:52:7c:d3: 67:3a:c0:d6:76:70:f1:46:bd:36:82:7a:08:be:e8: d4:15:ad:a8:97:67:1a:b5:9b:2f:55:fd:99:17:39: 45:87:45:d5:fa:96:51:10:2a:c7:b8:15:cd:fe:4e: fd:69:f3:e8:17:8e:61:84:a7:ab:dc:60:78:69:51: 77:74:5f:cd:1f:ab:be:d5:94:d5:34:88:77:19:1b: 0b:15:18:f0:2b:d3:2d:ce:bb:22:ac:0b:26:48:28: 62:2e:17:f9:a4:8e:ac:cb:34:e4:ec:04:69:3b:b4: cf:50:e7:7d:58:eb:45:a6:fb:ce:6e:8c:af:44:52: 3c:6d:89:39:ee:6d:c9:0c:f0:c3:d7:33:f4:4b:22: 42:0e:b1:25:a7:f6:85:86:c5:2b:ef:85:02:26:07: 2d:ce:83:08:7d:15:3f:7d:13:4d:b5:62:12:72:c3: 3d:c5:d8:2d:91:41:47:f4:3f:6b:cd:c0:59:7e:4f: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:71:00:D0:63:B9:14:AA:66:84:6B:E9:42:FB:15:F6:F6:F9:A9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:45:0e:71:cb:83:2e:95:f2:5e:0d:22:ff:98:a5:d4:d6:03: 90:b1:4d:16:95:7a:b2:39:20:71:4e:4d:47:fa:a8:4d:c1:a7: 02:43:3e:f7:c9:e8:c2:a0:23:79:e0:fc:70:18:bd:87:29:01: eb:19:78:13:39:0f:82:45:81:03:10:7d:29:5a:39:44:b0:8b: cf:02:69:46:3e:16:20:b6:09:78:e4:81:81:fc:ab:43:b8:81: 9f:ac:b4:23:42:3a:c8:45:0c:f2:14:f3:d8:10:20:87:90:c9: ac:7f:88:b5:a2:b5:cc:ba:a3:7c:98:59:77:90:44:d7:b2:bc: 00:4a:d7:5e:e2:95:b2:c9:34:63:99:35:1c:a5:31:18:39:8e: 0d:6b:10:3e:43:64:27:14:9c:8b:af:93:3a:54:74:96:bb:ab: a5:86:86:17:06:60:95:9d:ae:ea:29:1e:6c:79:16:46:7a:cf: e7:36:b8:d4:9d:0d:2c:7c:2b:3f:07:bb:04:b1:9a:cb:d6:51: 75:ba:c5:e1:b7:84:1a:c7:80:5c:49:c2:72:f7:a9:7d:6c:d5: 81:7e:74:9d:b6:2b:a5:41:7d:62:7d:40:59:f5:b2:0a:2c:48: 0c:ba:d3:26:fc:a1:46:81:73:83:fe:4d:1f:c5:de:ec:15:4a: d0:e8:d1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39lts7al8flLUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YTdjODdlYTMtODg5Zi00MWZkLTliOGQtMmE2ZGZlNWFiNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxgNb0VNfQq0bQSqK4cisOYsC1rreuZJOZgW SFswvYsP7aj3cKYVgPuVx8DaM3+N1bV8i5nAFuzpGBgc6YCPTO8iqVLhHjxSfNNn OsDWdnDxRr02gnoIvujUFa2ol2catZsvVf2ZFzlFh0XV+pZRECrHuBXN/k79afPo F45hhKer3GB4aVF3dF/NH6u+1ZTVNIh3GRsLFRjwK9MtzrsirAsmSChiLhf5pI6s yzTk7ARpO7TPUOd9WOtFpvvOboyvRFI8bYk57m3JDPDD1zP0SyJCDrElp/aFhsUr 74UCJgctzoMIfRU/fRNNtWIScsM9xdgtkUFH9D9rzcBZfk93ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRxANBjuRSqZoRr6UL7Ffb2+anWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzJmZjA4NWYtNmJjOS0z MTg5LWIzODgtMDEzODBjYWYwMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5FDnHLgy6V8l4NIv+YpdTWA5CxTRaVerI5IHFOTUf6qE3BpwJDPvfJ 6MKgI3ng/HAYvYcpAesZeBM5D4JFgQMQfSlaOUSwi88CaUY+FiC2CXjkgYH8q0O4 gZ+stCNCOshFDPIU89gQIIeQyax/iLWitcy6o3yYWXeQRNeyvABK117ilbLJNGOZ NRylMRg5jg1rED5DZCcUnIuvkzpUdJa7q6WGhhcGYJWdruopHmx5FkZ6z+c2uNSd DSx8Kz8HuwSxmsvWUXW6xeG3hBrHgFxJwnL3qX1s1YF+dJ22K6VBfWJ9QFn1sgos SAy60yb8oUaBc4P+TR/F3uwVStDo0Us= -----END CERTIFICATE-----Generated at Fri Apr 17 01:59:42 2026 by rpki-client