$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa File: 3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa (raw, json) Hash identifier: FLTELsTKZMQFfXDXQf3PVGyIxeOCDZRRurNskNavH9k= Subject key identifier: 22:22:6A:11:0F:C8:7E:C4:64:D5:80:13:DC:BD:CB:A0:67:05:22:B3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8780FE9152ACB5FB00A280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:80:fe:91:52:ac:b5:fb:00:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=b519a451-ba0b-40ce-9d0c-4f68b2fe29e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:bf:a8:fb:3c:98:00:47:b1:33:1f:43:71: c5:7d:66:a3:24:41:bc:b2:c3:15:06:d7:a0:c0:bc: 24:a3:34:1a:53:15:17:4d:ad:75:32:61:be:96:e3: 55:32:b1:7a:12:07:8f:46:df:24:ce:46:08:9a:e5: 25:e0:70:c2:a1:d8:44:98:43:8a:2a:c9:28:2f:1a: eb:d3:f7:76:00:ce:61:7c:1d:47:1d:e3:23:62:15: ad:8d:c9:f4:94:af:8a:1f:f6:06:4e:42:3a:8a:f6: 5b:b3:06:3b:69:c5:a6:13:2d:47:c2:04:2c:1f:d4: 07:30:03:c7:a4:ed:67:66:d3:8b:1d:d1:bf:08:a0: 49:3b:e8:32:0d:f1:6a:d3:5f:15:0a:2a:d7:5c:40: 67:4e:2a:e6:86:f9:ff:70:87:c2:d4:14:fd:72:b9: 6b:9a:4c:7a:85:19:92:79:a5:a5:3f:72:ae:1c:7d: 56:47:7d:74:67:cc:98:89:81:2b:79:11:21:ad:0c: 95:43:31:95:2b:92:52:3d:d5:24:b8:02:36:75:08: 4b:3e:1b:51:41:26:c8:98:fb:a8:40:c7:d2:b4:86: 1d:b8:4f:69:f8:74:1a:7e:ed:53:63:a0:0e:c8:ab: a4:b7:26:4a:d8:bc:af:10:9a:67:36:2e:35:15:57: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:22:6A:11:0F:C8:7E:C4:64:D5:80:13:DC:BD:CB:A0:67:05:22:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c1:fe:ad:49:4c:d0:e0:e6:e2:f5:ce:d5:18:98:68:3e:0e: 8b:d9:2c:fb:9b:51:73:e6:d2:32:dd:a0:c6:97:4f:4e:42:6a: 70:86:ac:de:12:5f:d5:14:3b:0e:84:56:4f:94:2b:97:dc:c6: c3:a1:4c:15:b6:bb:dd:78:28:a7:24:fe:0c:75:96:4d:00:f9: e6:3a:14:55:7f:4d:c2:0f:ed:f3:bb:57:ba:b6:ea:38:79:06: 8f:51:15:94:f1:29:e3:3e:2a:50:55:e7:42:43:8e:e5:4d:9c: 03:d0:f9:bb:f5:50:85:7f:2b:69:6a:17:93:ce:c2:f4:e5:68: 57:74:27:01:15:4c:87:bb:96:d3:a5:2e:cf:aa:8a:92:dd:cd: 67:89:65:5c:f2:0a:e9:37:e4:08:96:36:35:bd:93:10:29:06: 20:2b:91:84:c7:55:6f:6d:92:67:ff:4b:8a:fd:0e:10:30:af: d0:55:13:09:e4:6b:10:20:57:3a:26:05:26:11:56:b5:12:fb: 0e:84:d2:7e:0b:87:f5:30:b2:14:51:6e:a5:82:bb:75:ba:1b: d8:19:92:7d:63:ce:e2:77:23:10:93:a1:54:56:5a:d3:ef:36: 6b:cf:64:aa:98:5c:cb:88:4f:53:c8:37:f3:35:85:4b:ee:2e: 9d:57:44:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4D+kVKstfsAooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YjUxOWE0NTEtYmEwYi00MGNlLTlkMGMtNGY2OGIyZmUyOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBy/qPs8mABHsTMfQ3HFfWajJEG8ssMVBteg wLwkozQaUxUXTa11MmG+luNVMrF6EgePRt8kzkYImuUl4HDCodhEmEOKKskoLxrr 0/d2AM5hfB1HHeMjYhWtjcn0lK+KH/YGTkI6ivZbswY7acWmEy1HwgQsH9QHMAPH pO1nZtOLHdG/CKBJO+gyDfFq018VCirXXEBnTirmhvn/cIfC1BT9crlrmkx6hRmS eaWlP3KuHH1WR310Z8yYiYEreREhrQyVQzGVK5JSPdUkuAI2dQhLPhtRQSbImPuo QMfStIYduE9p+HQafu1TY6AOyKuktyZK2LyvEJpnNi41FVfZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIiahEPyH7EZNWAE9y9y6BnBSKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2IyZGEwYTEtZWNhNy0z NzdjLThhYTYtZDg2ZjA5Yzk4NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvB/q1JTNDg5uL1ztUYmGg+DovZLPubUXPm0jLdoMaXT05CanCGrN4S X9UUOw6EVk+UK5fcxsOhTBW2u914KKck/gx1lk0A+eY6FFV/TcIP7fO7V7q26jh5 Bo9RFZTxKeM+KlBV50JDjuVNnAPQ+bv1UIV/K2lqF5POwvTlaFd0JwEVTIe7ltOl Ls+qipLdzWeJZVzyCuk35AiWNjW9kxApBiArkYTHVW9tkmf/S4r9DhAwr9BVEwnk axAgVzomBSYRVrUS+w6E0n4Lh/UwshRRbqWCu3W6G9gZkn1jzuJ3IxCToVRWWtPv NmvPZKqYXMuIT1PIN/M1hUvuLp1XRDk= -----END CERTIFICATE-----Generated at Mon Sep 21 20:43:32 2026 by rpki-client