$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3835e3c3-0143-3079-b1da-f63b9a0937fe.roa File: 3835e3c3-0143-3079-b1da-f63b9a0937fe.roa (raw, json) Hash identifier: yP0u9g0Obpk4K7GEd/4hScEI3VWk38s9XlgrjiguyrI= Subject key identifier: D1:E9:B0:3B:22:71:97:7C:C2:74:CD:84:12:EA:6F:64:63:5A:0D:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFDA2AEEF8519A9EF6E780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3835e3c3-0143-3079-b1da-f63b9a0937fe.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:da:2a:ee:f8:51:9a:9e:f6:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=28800f72-d913-4f92-a9b9-52d7af0f2cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:e9:90:6f:c1:6e:ab:3f:ab:d8:68:34:45: d5:73:ca:f8:d5:b7:b3:c1:02:40:30:9d:5a:2f:a5: 36:77:50:85:eb:4b:7a:e6:1e:a0:68:b9:f5:fd:87: 10:f9:c8:c6:dc:50:d1:c1:c6:78:5a:ce:03:26:b7: 13:80:a2:9e:fc:8f:56:37:74:79:78:f3:1f:64:ab: 13:a3:44:37:bf:42:0f:d3:b0:06:b1:9c:83:5f:68: a6:e0:5d:d2:9c:0d:75:e7:78:59:f6:b6:51:71:56: 55:96:98:a2:92:2c:2f:2a:e1:39:55:06:9f:7f:56: 05:9f:78:61:a5:9f:3e:cf:6e:8d:fb:6f:49:44:76: 7c:50:a9:fc:4c:f5:68:09:d5:0c:f7:70:18:cb:2c: 95:de:6c:d4:a9:70:8a:e7:cb:7e:8d:d3:28:a6:47: ea:cd:0a:cf:d8:8f:24:7f:13:7b:3f:2b:57:a3:f1: a3:78:01:b5:a2:05:3f:24:ae:53:c6:b6:5c:a2:a4: ba:c9:26:03:94:79:51:5d:94:1f:e0:66:a1:01:97: 6a:65:08:73:45:72:37:19:5d:10:78:f8:62:e8:f2: fe:d2:73:a6:25:67:1a:88:1c:72:2a:7a:3b:97:6b: ea:6b:ce:d7:c3:db:e8:0c:ef:b5:d7:fa:d4:84:6d: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:B0:3B:22:71:97:7C:C2:74:CD:84:12:EA:6F:64:63:5A:0D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3835e3c3-0143-3079-b1da-f63b9a0937fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:bd:15:2b:54:16:70:5b:5d:a8:89:75:da:a9:28:00:52:8d: 8b:24:64:82:da:24:0a:8f:84:7c:bb:47:3f:42:c0:72:39:26: 99:54:18:03:0f:fe:da:b1:8b:e6:af:f0:1f:8b:f0:55:8e:95: 78:1d:0a:53:e8:1a:61:1e:24:9d:d4:d4:d4:2a:7f:71:43:6d: 74:b3:5c:93:e5:45:13:01:f2:f6:34:92:36:27:dd:35:0a:ac: ce:4b:6d:a3:d7:db:89:cc:dd:bb:4c:33:f4:62:5a:b9:b0:59: cd:b2:0f:d4:e7:e0:09:0b:5b:6f:97:4c:74:68:ab:19:c9:00: c6:61:14:60:c9:64:e5:5b:d9:86:3e:ea:35:42:5b:6b:84:ec: f5:b7:06:4c:4c:ac:5b:33:2c:bd:16:93:08:23:84:4f:bf:1d: ec:01:dc:a8:b4:d2:40:b1:c3:b2:a2:29:13:28:1c:64:e5:2e: cf:66:38:82:77:80:16:e5:7f:53:b4:e7:92:ea:c6:48:b9:b2: 0b:43:d0:b5:1b:ca:64:b9:05:ac:de:c4:a0:9d:ef:e2:a6:d3: 9f:5d:78:99:ce:8c:44:85:31:a1:f8:ae:d1:0f:c9:5b:28:e3: 7c:1f:2f:cf:11:00:b2:2a:70:65:cf:bf:1a:d0:4a:7b:57:93: f1:00:47:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39oq7vhRmp7254AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk Mjg4MDBmNzItZDkxMy00ZjkyLWE5YjktNTJkN2FmMGYyY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWfpkG/Bbqs/q9hoNEXVc8r41bezwQJAMJ1a L6U2d1CF60t65h6gaLn1/YcQ+cjG3FDRwcZ4Ws4DJrcTgKKe/I9WN3R5ePMfZKsT o0Q3v0IP07AGsZyDX2im4F3SnA1153hZ9rZRcVZVlpiikiwvKuE5VQaff1YFn3hh pZ8+z26N+29JRHZ8UKn8TPVoCdUM93AYyyyV3mzUqXCK58t+jdMopkfqzQrP2I8k fxN7PytXo/GjeAG1ogU/JK5TxrZcoqS6ySYDlHlRXZQf4GahAZdqZQhzRXI3GV0Q ePhi6PL+0nOmJWcaiBxyKno7l2vqa87Xw9voDO+11/rUhG3wvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHpsDsicZd8wnTNhBLqb2RjWg17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzgzNWUzYzMtMDE0My0z MDc5LWIxZGEtZjYzYjlhMDkzN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALa9FStUFnBbXaiJddqpKABSjYskZILaJAqPhHy7Rz9CwHI5JplUGAMP /tqxi+av8B+L8FWOlXgdClPoGmEeJJ3U1NQqf3FDbXSzXJPlRRMB8vY0kjYn3TUK rM5LbaPX24nM3btMM/RiWrmwWc2yD9Tn4AkLW2+XTHRoqxnJAMZhFGDJZOVb2YY+ 6jVCW2uE7PW3BkxMrFszLL0WkwgjhE+/HewB3Ki00kCxw7KiKRMoHGTlLs9mOIJ3 gBblf1O055Lqxki5sgtD0LUbymS5BazexKCd7+Km059deJnOjESFMaH4rtEPyVso 43wfL88RALIqcGXPvxrQSntXk/EARxk= -----END CERTIFICATE-----Generated at Fri Apr 17 20:07:33 2026 by rpki-client