$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a554f9-ec1c-32dc-8cb1-3cec9fa0f93c.roa File: 70a554f9-ec1c-32dc-8cb1-3cec9fa0f93c.roa (raw, json) Hash identifier: 7BQ4pQJccFkGoJ6BnEL95Q08qR3N7srgSc/lHMfEUko= Subject key identifier: 11:3F:72:BB:96:67:60:D3:B8:40:99:A6:14:F6:6C:96:E4:E3:6C:F6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F1E2CF2AC1B30CE14DCA80840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a554f9-ec1c-32dc-8cb1-3cec9fa0f93c.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 14789 IP address blocks: 104.29.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f2:ac:1b:30:ce:14:dc:a8:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=e19d614f-ed4d-418a-8fc1-d379a2a8080d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:10:89:61:ea:9a:63:e1:23:99:4f:55:db:7b: cc:73:d1:f3:5b:c1:01:b6:7a:df:d9:e0:e8:10:77: 5b:b9:89:e0:ce:42:ed:f8:2c:c7:fa:d3:46:49:78: e8:17:c9:6e:ce:3d:23:ed:8f:45:2e:ca:ba:c8:56: 95:f1:7c:bc:a4:6f:71:e3:6e:b7:35:62:f5:48:b3: fe:62:bf:46:21:d2:74:0c:b6:67:0a:11:14:d0:0d: e8:94:86:b9:c6:bf:51:00:00:05:61:5b:39:f0:88: 62:3d:8b:ab:05:07:ac:d3:75:dc:f0:03:86:7b:4b: 8c:61:d7:96:52:00:85:b9:d5:4b:0a:2b:9e:7c:7b: 62:20:05:36:95:8d:60:36:42:b5:94:6a:f9:06:72: 7c:68:9c:14:a1:1d:58:1f:95:8d:42:d1:18:cb:de: de:90:06:e7:fb:fb:3c:49:83:e5:93:5b:56:ba:f1: 9a:f2:fe:11:23:6b:18:b6:d2:62:e5:4f:67:32:b1: 25:e1:65:8f:8a:fe:ac:52:6a:c4:f3:2a:fc:c7:9a: 23:bd:9b:24:93:2c:44:81:2a:ea:dc:0b:44:9d:e2: 80:f0:a4:76:d1:a7:ad:3c:97:86:23:b6:a8:ec:ab: bb:a1:64:76:3b:18:c6:3c:48:d4:4e:ab:fa:e4:a6: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3F:72:BB:96:67:60:D3:B8:40:99:A6:14:F6:6C:96:E4:E3:6C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a554f9-ec1c-32dc-8cb1-3cec9fa0f93c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:35:e8:02:c8:41:54:17:09:ff:f3:5f:e7:d1:bb:19:ce:ce: 4b:9c:1b:76:ee:e6:ba:c7:3d:0b:6b:78:a4:c4:82:b5:e5:51: 9c:70:3b:c7:c7:82:c9:04:fb:1c:69:9e:74:4a:9b:38:13:c4: 29:9e:f0:79:69:23:44:d0:c7:00:49:8f:6f:e4:db:4c:4b:0d: b3:f4:19:30:02:d5:6b:84:fc:3d:1b:c4:79:9f:04:4a:3b:11: 19:7b:70:8d:6f:80:94:0f:2d:61:d9:36:a3:82:6c:e6:17:2a: 22:21:3f:06:1b:3c:ba:ed:9e:29:5f:e2:6a:30:98:67:bd:8d: 5e:35:5b:f4:0d:96:5c:9c:b0:fc:4f:03:b9:2d:1a:2a:46:2f: 26:c4:1b:41:cb:95:11:07:88:79:4b:17:ab:6c:2b:6c:40:51: bb:5b:43:c0:c1:ed:03:d2:b0:d8:d0:1b:16:85:ee:17:b0:9a: df:3e:48:bc:e0:32:0b:cd:38:c5:31:6c:fb:09:b9:65:ae:3e: 1b:95:86:65:b8:47:9c:4e:73:20:3b:59:2d:9e:68:9a:4a:e6: ba:1a:6d:75:18:6b:8a:79:ec:01:4b:cc:f1:f4:cd:54:aa:0c: dc:22:43:99:1f:ad:9f:b6:7e:c9:7b:6b:78:25:8f:5b:f5:4a: e5:da:58:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPKsGzDOFNyoCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk ZTE5ZDYxNGYtZWQ0ZC00MThhLThmYzEtZDM3OWEyYTgwODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xCJYeqaY+EjmU9V23vMc9HzW8EBtnrf2eDo EHdbuYngzkLt+CzH+tNGSXjoF8luzj0j7Y9FLsq6yFaV8Xy8pG9x4263NWL1SLP+ Yr9GIdJ0DLZnChEU0A3olIa5xr9RAAAFYVs58IhiPYurBQes03Xc8AOGe0uMYdeW UgCFudVLCiuefHtiIAU2lY1gNkK1lGr5BnJ8aJwUoR1YH5WNQtEYy97ekAbn+/s8 SYPlk1tWuvGa8v4RI2sYttJi5U9nMrEl4WWPiv6sUmrE8yr8x5ojvZskkyxEgSrq 3AtEneKA8KR20aetPJeGI7ao7Ku7oWR2OxjGPEjUTqv65Kbt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE/cruWZ2DTuECZphT2bJbk42z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzBhNTU0ZjktZWMxYy0z MmRjLThjYjEtM2NlYzlmYTBmOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE016ALIQVQXCf/zX+fRuxnOzkucG3bu5rrHPQtreKTEgrXlUZxwO8fH gskE+xxpnnRKmzgTxCme8HlpI0TQxwBJj2/k20xLDbP0GTAC1WuE/D0bxHmfBEo7 ERl7cI1vgJQPLWHZNqOCbOYXKiIhPwYbPLrtnilf4mowmGe9jV41W/QNllycsPxP A7ktGipGLybEG0HLlREHiHlLF6tsK2xAUbtbQ8DB7QPSsNjQGxaF7hewmt8+SLzg MgvNOMUxbPsJuWWuPhuVhmW4R5xOcyA7WS2eaJpK5roabXUYa4p57AFLzPH0zVSq DNwiQ5kfrZ+2fsl7a3glj1v1SuXaWME= -----END CERTIFICATE-----Generated at Sun Sep 20 10:23:24 2026 by rpki-client