$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa File: 44dc2154-dfb0-3282-ae78-26a93970380b.roa (raw, json) Hash identifier: qJ6JDWwcIeqzU9SovU4JIEmJ1m3WMYKJj24qWcJTmMg= Subject key identifier: 16:47:9B:73:EE:58:91:F0:22:4B:D3:7A:FF:A1:C6:8A:59:18:EA:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFECB362F29C578F5D5400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ec:b3:62:f2:9c:57:8f:5d:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=b6191ec6-984e-4c10-885b-d727612a1df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:ff:cd:0c:11:aa:c8:20:cf:b8:6e:28:eb: 19:51:f8:a3:51:27:52:9f:29:68:01:d2:3e:75:8b: 35:2a:83:43:99:ad:d0:f3:8b:45:24:e5:ba:2d:fa: b1:35:21:48:03:aa:3f:47:96:d8:a5:18:a9:e1:35: 5e:78:1a:ef:5b:87:28:17:1c:7e:31:c5:9f:66:fc: 17:68:aa:2c:86:1d:c0:d5:ff:fa:50:57:0e:18:ad: 75:a9:90:66:b6:98:42:00:02:fe:c4:d8:12:a3:ac: 9f:32:63:46:3a:30:0c:a2:50:bd:09:c6:14:51:f9: 9b:71:a5:c3:50:48:48:c9:0d:2b:fd:6f:32:cf:fa: 6b:70:8c:56:72:7c:e3:65:be:8b:10:0b:fb:20:ff: c2:47:ea:57:a9:c3:98:d5:98:0f:59:86:e8:72:41: e8:bd:16:b7:a8:bf:05:f2:fb:bd:fc:b7:5b:ab:6e: d7:47:40:fa:c5:71:ad:93:33:70:82:92:ce:76:d4: 86:c7:09:b5:c4:d8:52:10:da:a1:4c:2f:74:a4:77: f0:50:a1:e1:48:25:db:16:60:eb:b7:4c:37:2f:ae: 7e:8c:7e:74:17:71:7d:b4:50:fc:e2:30:70:a7:9d: 9e:22:33:b6:3c:2d:4d:14:a5:b5:9b:17:28:67:a4: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:47:9B:73:EE:58:91:F0:22:4B:D3:7A:FF:A1:C6:8A:59:18:EA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:a4:7d:b0:a5:dc:b3:b8:91:96:43:e7:17:01:c8:a0:51:35: f6:49:fe:22:cf:56:e7:b1:4a:c2:b9:f5:ff:99:49:2b:2f:58: f8:ac:d7:69:ff:3f:5f:9a:ae:4f:8d:c1:9d:bc:97:f8:c3:dc: 5f:48:47:3a:9f:bf:ee:69:1b:8c:ad:b0:23:06:bf:13:8d:1d: d0:0e:e8:38:8d:d5:76:63:2e:c7:a7:3a:e6:4f:a2:0e:05:01: da:6a:67:0a:6b:61:c6:72:75:7a:6d:d7:c9:b1:28:9c:42:1a: 74:fc:80:46:db:31:40:c8:2d:92:58:28:06:3b:c7:31:ef:90: cc:fa:ab:0d:6f:78:05:30:9b:5a:21:70:b7:d1:9c:8d:7a:cf: 96:1c:94:6f:65:4b:67:a4:39:77:76:80:9b:bc:38:18:a8:81: 47:66:ef:5e:70:01:04:13:63:0f:28:1f:f6:c9:22:d1:b3:3b: 8e:de:51:55:b5:db:50:b3:26:7c:d8:2d:ac:d2:81:5c:60:bc: 65:6b:f4:8b:31:f2:bd:84:8c:a5:b2:1d:f2:02:ab:01:23:a7: b3:cb:8e:3f:80:05:e0:0e:d1:50:b7:b2:07:56:c3:0f:6e:ca: 67:1b:0c:ee:01:23:14:69:21:ac:e2:d1:78:cb:fb:2a:1e:e4: 01:5e:76:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+yzYvKcV49dVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YjYxOTFlYzYtOTg0ZS00YzEwLTg4NWItZDcyNzYxMmExZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqD/zQwRqsggz7huKOsZUfijUSdSnyloAdI+ dYs1KoNDma3Q84tFJOW6LfqxNSFIA6o/R5bYpRip4TVeeBrvW4coFxx+McWfZvwX aKoshh3A1f/6UFcOGK11qZBmtphCAAL+xNgSo6yfMmNGOjAMolC9CcYUUfmbcaXD UEhIyQ0r/W8yz/prcIxWcnzjZb6LEAv7IP/CR+pXqcOY1ZgPWYbockHovRa3qL8F 8vu9/Ldbq27XR0D6xXGtkzNwgpLOdtSGxwm1xNhSENqhTC90pHfwUKHhSCXbFmDr t0w3L65+jH50F3F9tFD84jBwp52eIjO2PC1NFKW1mxcoZ6Q2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZHm3PuWJHwIkvTev+hxopZGOrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDRkYzIxNTQtZGZiMC0z MjgyLWFlNzgtMjZhOTM5NzAzODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALykfbCl3LO4kZZD5xcByKBRNfZJ/iLPVuexSsK59f+ZSSsvWPis12n/ P1+ark+NwZ28l/jD3F9IRzqfv+5pG4ytsCMGvxONHdAO6DiN1XZjLsenOuZPog4F AdpqZwprYcZydXpt18mxKJxCGnT8gEbbMUDILZJYKAY7xzHvkMz6qw1veAUwm1oh cLfRnI16z5YclG9lS2ekOXd2gJu8OBiogUdm715wAQQTYw8oH/bJItGzO47eUVW1 21CzJnzYLazSgVxgvGVr9Isx8r2EjKWyHfICqwEjp7PLjj+ABeAO0VC3sgdWww9u ymcbDO4BIxRpIazi0XjL+yoe5AFedrk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:15:07 2026 by rpki-client