$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa File: 3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa (raw, json) Hash identifier: 77nvlI9mbFP8Ke3Q5KzgZn55TYrmhoKtqnmo56FKpTE= Subject key identifier: B6:B3:8A:62:34:EA:0B:82:DE:7C:F5:21:7C:10:8E:93:11:DB:3E:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA79855FD8517C57DE31AC1C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 104.29.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:55:fd:85:17:c5:7d:e3:1a:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0fa56f83-a061-4ff0-92a8-efaac1c9562a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:2a:78:bf:6e:f5:bd:a4:60:c2:0e:d6:ca: ec:c1:1b:e8:ff:cc:60:e7:28:19:39:70:f4:46:c4: 84:e6:04:d6:77:dc:8f:5c:7f:9e:eb:d5:32:1c:b3: a9:91:eb:e7:c1:8e:51:a9:b4:1d:8b:1b:14:62:ec: 04:38:af:63:c0:48:d9:b6:33:a3:6f:ca:01:ab:29: a4:4e:99:3c:a7:94:61:89:b2:4e:4b:d7:bd:15:30: 3a:77:7d:bd:5d:8c:ba:09:55:7e:9b:70:17:bd:58: a2:52:b6:b1:52:5f:30:09:78:86:59:2f:dc:58:a9: a3:74:57:b7:15:10:0c:bc:99:8d:12:83:4f:71:75: 53:d4:3a:67:c7:47:e5:13:3e:a2:3e:c4:6f:73:6e: da:cc:78:58:56:93:55:08:00:70:d6:70:ae:ac:87: 81:b4:6e:40:82:20:b8:18:fa:5e:1a:57:f4:bc:bc: 65:6e:5d:77:53:99:87:cc:21:08:f9:26:c7:7c:1c: a1:82:61:94:31:b4:0b:97:cf:0e:dd:4c:1a:01:35: 92:77:77:fe:89:30:ae:ba:52:fc:45:a0:c8:df:63: 40:70:f8:fe:03:0a:ca:f5:a3:0f:79:a1:74:bd:2f: 91:10:07:13:8b:93:b3:47:8b:a5:46:c0:cc:b8:8e: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B3:8A:62:34:EA:0B:82:DE:7C:F5:21:7C:10:8E:93:11:DB:3E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:99:5c:ae:9a:76:f1:b9:de:77:d5:a9:e5:e7:ef:d1:c6:a9: 78:36:ff:7e:00:de:43:00:75:8d:01:51:06:ad:46:60:66:25: 67:ab:a9:6f:79:aa:4b:bc:7e:61:e7:3f:58:63:69:9a:02:87: de:17:7c:f6:57:7a:2f:1b:d8:97:f3:9d:69:69:a2:e1:29:be: 64:9d:cf:69:ed:88:42:44:78:37:2e:76:60:e3:12:b2:87:1a: ce:ec:f7:ae:27:fe:f0:68:98:ef:dd:4b:7f:c2:9d:9c:3a:89: f3:ef:23:e8:40:de:7b:60:e8:78:8d:86:32:de:96:67:c3:64: 31:66:a9:1b:fe:1b:f8:7d:96:72:44:9a:1f:5b:e6:7a:70:8c: 03:4c:d2:42:2a:8a:1d:5b:e4:b5:ca:26:d7:cc:00:06:26:58: 63:ad:ae:0a:07:4e:72:09:d1:8c:81:55:7f:c5:d4:c3:c2:49: 5b:f8:ff:44:ae:d8:22:9c:06:ff:f2:2d:63:d2:bc:bf:b4:64: 9e:95:09:ef:f3:ca:7d:96:22:e4:56:5f:0a:9b:5a:1c:93:d3: 21:bd:51:83:20:ce:6b:9d:83:05:e3:98:76:af:3f:f0:e5:1d: 36:73:05:bb:3f:63:d3:ba:85:84:f5:dc:89:16:47:f2:11:bd: 92:7b:a5:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmFX9hRfFfeMawcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGZhNTZmODMtYTA2MS00ZmYwLTkyYTgtZWZhYWMxYzk1NjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMkqeL9u9b2kYMIO1srswRvo/8xg5ygZOXD0 RsSE5gTWd9yPXH+e69UyHLOpkevnwY5RqbQdixsUYuwEOK9jwEjZtjOjb8oBqymk Tpk8p5RhibJOS9e9FTA6d329XYy6CVV+m3AXvViiUraxUl8wCXiGWS/cWKmjdFe3 FRAMvJmNEoNPcXVT1Dpnx0flEz6iPsRvc27azHhYVpNVCABw1nCurIeBtG5AgiC4 GPpeGlf0vLxlbl13U5mHzCEI+SbHfByhgmGUMbQLl88O3UwaATWSd3f+iTCuulL8 RaDI32NAcPj+AwrK9aMPeaF0vS+REAcTi5OzR4ulRsDMuI4SUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLazimI06guC3nz1IXwQjpMR2z4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzk4MmFlZGUtZmMxYS0z ZGQzLTk1YjEtMDI2ZTAxYzlmMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSZXK6advG53nfVqeXn79HGqXg2/34A3kMAdY0BUQatRmBmJWerqW95 qku8fmHnP1hjaZoCh94XfPZXei8b2JfznWlpouEpvmSdz2ntiEJEeDcudmDjErKH Gs7s964n/vBomO/dS3/CnZw6ifPvI+hA3ntg6HiNhjLelmfDZDFmqRv+G/h9lnJE mh9b5npwjANM0kIqih1b5LXKJtfMAAYmWGOtrgoHTnIJ0YyBVX/F1MPCSVv4/0Su 2CKcBv/yLWPSvL+0ZJ6VCe/zyn2WIuRWXwqbWhyT0yG9UYMgzmudgwXjmHavP/Dl HTZzBbs/Y9O6hYT13IkWR/IRvZJ7pUE= -----END CERTIFICATE-----Generated at Wed Jul 29 03:43:06 2026 by rpki-client