$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd999bd-af23-3680-b517-aff65bf9c530.roa File: 5bd999bd-af23-3680-b517-aff65bf9c530.roa (raw, json) Hash identifier: CfFSCxUSeTA9XR+fKYrjzovNQ4cza9DofFFJMRlXfQo= Subject key identifier: 32:63:60:DE:50:7E:32:24:5B:E1:44:42:71:EF:4D:F4:B9:ED:C4:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFDAE9BA36E0CE81D1A180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd999bd-af23-3680-b517-aff65bf9c530.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.29.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:da:e9:ba:36:e0:ce:81:d1:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=f40027a6-2642-47d7-aa14-0645e9ed9a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:f1:fd:17:13:53:2c:7d:9a:ff:79:10:a5: e7:83:23:4f:c1:58:1c:0c:fc:60:0c:10:c6:52:05: 23:a6:e6:a4:4b:0f:4c:d6:3c:a8:b2:24:e5:28:60: 0d:93:4b:ac:35:44:5c:23:d3:c6:c0:f5:64:87:e0: da:80:c7:5b:6b:1b:39:60:4d:56:d7:c4:68:a8:09: 56:92:0b:4c:10:59:f7:8d:4f:f1:c7:25:59:1b:c7: 6f:6f:e4:97:f4:61:db:c4:15:43:78:28:93:d9:c1: cc:1d:41:ad:f4:1a:81:2b:3b:db:9e:e6:51:a0:0d: 85:16:53:52:05:25:29:bb:eb:af:16:b4:09:2a:b7: ee:35:38:95:48:4b:3e:c6:ba:e4:91:e3:49:08:be: 0c:b1:ad:f5:f7:1b:dc:4d:12:10:a3:03:11:4e:c5: 4b:14:04:c1:fc:71:3e:69:db:97:0a:f4:13:0b:d1: f8:b5:0b:0f:25:7f:71:d9:b4:65:10:84:4b:f6:93: 09:d4:9e:b3:5c:e3:a5:c3:6c:97:d1:3d:32:82:00: 69:10:00:46:14:bb:af:1e:1c:a7:45:0c:2f:85:b3: 10:3f:03:ba:bd:eb:1c:51:07:d8:a7:21:17:1f:e2: 84:0a:50:4f:fd:24:34:19:7d:ee:e0:50:7b:62:90: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:63:60:DE:50:7E:32:24:5B:E1:44:42:71:EF:4D:F4:B9:ED:C4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd999bd-af23-3680-b517-aff65bf9c530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:18:ba:59:e4:a7:46:30:4b:82:b9:06:3b:c6:0b:dc:05:23: 43:2e:bd:11:ed:3c:7e:a9:54:27:ea:33:e0:05:f4:19:c9:76: 92:79:84:00:9e:01:4b:b0:f2:3b:b6:f9:cf:cb:87:9d:0a:91: 5d:41:91:06:88:86:1b:17:6e:87:c3:02:50:c1:25:c5:56:38: 93:80:8b:df:27:9e:a1:b0:26:f5:c1:94:5b:a9:09:79:0e:94: b9:d9:10:a9:be:49:88:44:42:ba:73:59:b9:68:99:7e:f8:3e: c4:e2:b0:a6:47:08:35:a7:dc:b1:6c:fa:e1:39:bf:05:ae:8f: 54:37:97:f0:13:71:34:ce:20:16:48:4b:75:ba:bd:0a:b0:2d: f3:ab:2e:b1:56:7e:4a:af:e7:d5:4f:dd:d5:a6:73:39:74:7b: 97:b2:ea:82:35:0b:e0:39:83:3f:e4:8b:49:4a:63:99:71:4f: 90:f9:be:f8:94:66:f2:a5:5c:be:ff:1b:d5:a7:9c:3b:d4:8e: ec:d5:af:c7:cf:4b:ed:23:66:01:72:58:ff:a5:64:a2:41:ca: 81:8f:de:37:48:1b:82:fd:8e:c4:93:d5:0f:26:92:08:1a:89: 32:26:32:e1:30:35:2f:db:9b:b9:8c:e7:52:a6:c3:4d:19:23: d7:74:3b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39rpujbgzoHRoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZjQwMDI3YTYtMjY0Mi00N2Q3LWFhMTQtMDY0NWU5ZWQ5YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNbx/RcTUyx9mv95EKXngyNPwVgcDPxgDBDG UgUjpuakSw9M1jyosiTlKGANk0usNURcI9PGwPVkh+DagMdbaxs5YE1W18RoqAlW kgtMEFn3jU/xxyVZG8dvb+SX9GHbxBVDeCiT2cHMHUGt9BqBKzvbnuZRoA2FFlNS BSUpu+uvFrQJKrfuNTiVSEs+xrrkkeNJCL4Msa319xvcTRIQowMRTsVLFATB/HE+ aduXCvQTC9H4tQsPJX9x2bRlEIRL9pMJ1J6zXOOlw2yX0T0yggBpEABGFLuvHhyn RQwvhbMQPwO6vescUQfYpyEXH+KEClBP/SQ0GX3u4FB7YpDq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJjYN5QfjIkW+FEQnHvTfS57cQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJkOTk5YmQtYWYyMy0z NjgwLWI1MTctYWZmNjViZjljNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgYulnkp0YwS4K5BjvGC9wFI0MuvRHtPH6pVCfqM+AF9BnJdpJ5hACe AUuw8ju2+c/Lh50KkV1BkQaIhhsXbofDAlDBJcVWOJOAi98nnqGwJvXBlFupCXkO lLnZEKm+SYhEQrpzWblomX74PsTisKZHCDWn3LFs+uE5vwWuj1Q3l/ATcTTOIBZI S3W6vQqwLfOrLrFWfkqv59VP3dWmczl0e5ey6oI1C+A5gz/ki0lKY5lxT5D5vviU ZvKlXL7/G9WnnDvUjuzVr8fPS+0jZgFyWP+lZKJByoGP3jdIG4L9jsST1Q8mkgga iTImMuEwNS/bm7mM51Kmw00ZI9d0O5o= -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:40 2026 by rpki-client