$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa File: 3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa (raw, json) Hash identifier: 6bZMVsbonXJtQQ5uu3tos5xtcKIQ6I3PgzbiB3uwX4Y= Subject key identifier: 31:86:5F:CB:4D:FA:DE:7A:11:44:59:43:EE:16:48:14:37:59:4F:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DFA709AB0FB2942F23F558BF0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 13335 IP address blocks: 104.29.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:9a:b0:fb:29:42:f2:3f:55:8b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=585dccb2-fbb6-4e1e-915e-11f0fb90effc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:f3:34:5e:3d:7c:25:d5:b0:80:e9:a8:49: 03:1f:5b:6e:06:03:b6:ba:fe:84:d0:85:16:09:ac: 95:c3:f4:0b:8b:02:42:81:0d:6e:cc:34:7a:16:95: 0e:60:30:c5:5e:f4:94:b1:ea:e4:14:48:d2:88:02: f5:2b:8f:4c:23:0f:17:68:4f:95:fd:1f:78:95:ae: 0e:3a:87:51:70:91:13:db:88:6b:03:65:06:3c:7f: b9:d2:74:6d:d0:1f:21:41:0a:64:c1:2f:92:3f:0a: be:19:48:ff:67:51:b0:36:42:bb:04:a9:22:79:c3: 95:85:e0:9d:e0:cf:50:12:77:7e:e5:dc:ff:6c:7f: 90:61:ad:fa:ff:fc:8d:0f:21:e8:b8:e2:32:09:a0: 96:af:6b:1e:59:37:70:70:7c:4f:50:d4:33:7b:e2: 31:9f:b5:26:fa:c5:de:8e:c3:24:fc:cd:28:03:67: 52:1c:29:10:3c:bc:4a:1c:a6:68:a3:ab:07:18:ba: 02:6d:d2:52:69:81:a7:9f:6d:f7:bc:e9:d5:28:d7: bd:18:6e:d1:4a:17:87:26:ac:18:ad:f6:b5:05:da: 40:70:bf:04:d3:92:90:44:e7:13:70:04:f7:ea:b2: 0d:17:82:ea:57:ce:32:2a:66:a9:72:84:b7:86:a7: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:86:5F:CB:4D:FA:DE:7A:11:44:59:43:EE:16:48:14:37:59:4F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ed:b4:7b:e3:5a:84:4b:12:e5:c4:5b:e6:ed:bb:25:43:76: 0d:a9:98:de:be:98:78:7b:60:f8:ab:de:a6:2e:3d:b0:4b:61: 2e:33:4e:61:f0:e9:0a:88:f3:d0:fb:90:20:26:7a:cc:b9:3d: c9:2b:a7:c1:96:25:51:74:2b:8a:83:7a:70:aa:ff:c0:ff:c9: e5:c0:cc:a7:22:55:67:17:3c:4d:d7:f4:72:fd:d5:25:27:bd: 56:5a:6f:ab:55:a7:73:cb:1b:b5:e4:b4:8b:5c:68:25:b8:bb: f2:3f:69:31:fe:7a:88:3c:5e:65:7e:3f:75:ce:e8:ee:a1:85: 7c:b9:9a:20:8d:24:0c:e0:1a:cd:c5:c0:39:71:45:4d:2c:ae: 7a:fc:dd:3b:9d:2c:2e:11:c8:6e:c3:3a:f1:91:90:7b:8c:32: 3a:13:37:d0:c8:15:7a:b8:6c:74:34:ec:96:fa:01:f0:03:4d: 34:99:d0:e4:23:e8:1a:42:8e:6d:03:bd:10:fd:68:1c:02:1b: c7:f5:62:55:35:73:7e:e7:91:d1:c2:a0:aa:84:02:58:a8:6f: 4f:c0:d6:c1:05:ed:a3:c3:d9:db:13:c4:dc:de:71:2e:56:f3: 9e:b9:f8:ae:df:d7:a6:1b:83:d7:da:4c:b5:d4:f8:54:e9:59: 7a:60:c7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cJqw+ylC8j9Vi/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NTg1ZGNjYjItZmJiNi00ZTFlLTkxNWUtMTFmMGZiOTBlZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTnzNF49fCXVsIDpqEkDH1tuBgO2uv6E0IUW CayVw/QLiwJCgQ1uzDR6FpUOYDDFXvSUserkFEjSiAL1K49MIw8XaE+V/R94la4O OodRcJET24hrA2UGPH+50nRt0B8hQQpkwS+SPwq+GUj/Z1GwNkK7BKkiecOVheCd 4M9QEnd+5dz/bH+QYa36//yNDyHouOIyCaCWr2seWTdwcHxPUNQze+Ixn7Um+sXe jsMk/M0oA2dSHCkQPLxKHKZoo6sHGLoCbdJSaYGnn233vOnVKNe9GG7RSheHJqwY rfa1BdpAcL8E05KQROcTcAT36rINF4LqV84yKmapcoS3hqdYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGGX8tN+t56EURZQ+4WSBQ3WU/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzk4MmFlZGUtZmMxYS0z ZGQzLTk1YjEtMDI2ZTAxYzlmMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTttHvjWoRLEuXEW+btuyVDdg2pmN6+mHh7YPir3qYuPbBLYS4zTmHw 6QqI89D7kCAmesy5Pckrp8GWJVF0K4qDenCq/8D/yeXAzKciVWcXPE3X9HL91SUn vVZab6tVp3PLG7XktItcaCW4u/I/aTH+eog8XmV+P3XO6O6hhXy5miCNJAzgGs3F wDlxRU0srnr83TudLC4RyG7DOvGRkHuMMjoTN9DIFXq4bHQ07Jb6AfADTTSZ0OQj 6BpCjm0DvRD9aBwCG8f1YlU1c37nkdHCoKqEAliob0/A1sEF7aPD2dsTxNzecS5W 8565+K7f16Ybg9faTLXU+FTpWXpgx0E= -----END CERTIFICATE-----Generated at Sun Jun 14 00:56:11 2026 by rpki-client