$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa File: 855c8377-458f-31fc-99a3-78f054769805.roa (raw, json) Hash identifier: 3DCfK6rt91wC+FauBdt26asKAZpmqIGRyynosEsBXl0= Subject key identifier: A8:2A:FA:94:E4:8B:89:E1:54:93:5D:D1:11:CF:1C:47:7F:8D:20:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DF4DB981BFE0399DA95492A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 13335 IP address blocks: 104.29.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:98:1b:fe:03:99:da:95:49:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=0c0ee48f-2376-4a4b-9570-a8b3c19bd0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bd:6d:59:a7:03:a2:4c:f1:53:b7:30:e6:be: ed:64:36:6f:4e:a1:9a:9c:22:87:a0:da:b7:1d:0c: c1:f5:96:50:3d:2c:e0:d8:04:b5:c1:4c:14:b7:2a: 87:00:c6:20:50:be:cf:3d:3c:09:a3:ca:6c:bd:85: 8a:cb:f4:55:13:ca:2a:92:53:27:77:7a:64:fc:70: ef:9c:d0:1d:03:47:b3:e0:36:a9:94:62:ba:4d:dc: 59:36:71:39:14:7c:df:a6:73:8e:ca:e0:57:e4:47: 18:1c:49:f9:81:2f:eb:0a:c7:af:68:d8:a8:1b:a1: a7:fa:02:42:f0:b7:72:b2:36:bb:30:9f:20:b4:71: 6b:53:24:95:36:76:1f:eb:37:31:ae:ac:1b:70:61: 8d:f2:92:5c:39:60:41:a7:ee:e6:33:ce:51:cd:45: 4d:e9:d0:e1:da:43:15:6d:66:fc:a6:b6:98:f3:0f: f2:21:86:45:9b:40:d7:32:88:cc:41:f3:f0:ae:19: ca:94:37:42:69:c0:53:b1:65:66:dd:cf:10:fb:68: cb:60:fe:21:15:1e:f2:09:87:a3:f5:b4:60:4c:a3: 18:36:a1:f2:1e:96:ed:ea:92:e9:2c:95:5f:23:2c: 86:98:bc:9f:2c:db:fa:ae:cc:5e:87:1a:1a:f3:45: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2A:FA:94:E4:8B:89:E1:54:93:5D:D1:11:CF:1C:47:7F:8D:20:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0b:0f:ef:e6:98:b4:f0:7c:34:5b:60:08:e9:9d:e4:48:0b: 01:7b:6d:51:8c:31:08:b6:c4:28:73:80:48:e8:1d:02:76:ee: 1d:b6:1f:d1:09:39:60:26:26:c1:97:f0:21:91:04:4b:f1:d2: c7:06:ee:9e:13:42:e2:3d:dd:94:1c:21:1a:04:ae:ea:d1:4f: bc:12:a3:13:95:6d:81:78:f1:d3:4f:a2:9a:eb:fa:06:72:3b: 11:47:11:19:15:70:0f:27:5a:e2:8e:f9:ee:73:50:92:9e:d2: ed:0c:89:df:38:70:4a:cb:cc:24:e9:0b:48:ca:92:e2:dd:31: 13:b0:85:6c:72:bb:4d:b0:e2:84:bb:e7:00:4f:df:25:cb:fa: 8a:ca:2a:f0:70:06:3c:7c:18:5a:74:b3:db:80:fe:4b:5f:a5: f0:47:ed:cf:0c:47:03:28:bc:2a:27:a9:9a:c3:f3:84:6a:fe: f2:67:c4:c4:f5:d4:a5:6e:78:00:a4:9e:21:dd:a5:c5:ad:f4: 94:6d:f5:ff:76:1b:4e:04:ac:96:54:3d:58:32:c5:06:6f:a8: 33:cb:79:6c:ea:bd:f1:03:2c:a3:ad:60:57:51:37:f5:a2:81: 29:80:d1:a8:db:1f:d8:f9:4b:5d:3c:d3:0f:58:d8:ac:b5:53: c5:67:fd:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025gb/gOZ2pVJKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MGMwZWU0OGYtMjM3Ni00YTRiLTk1NzAtYThiM2MxOWJkMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg71tWacDokzxU7cw5r7tZDZvTqGanCKHoNq3 HQzB9ZZQPSzg2AS1wUwUtyqHAMYgUL7PPTwJo8psvYWKy/RVE8oqklMnd3pk/HDv nNAdA0ez4DaplGK6TdxZNnE5FHzfpnOOyuBX5EcYHEn5gS/rCsevaNioG6Gn+gJC 8Ldysja7MJ8gtHFrUySVNnYf6zcxrqwbcGGN8pJcOWBBp+7mM85RzUVN6dDh2kMV bWb8praY8w/yIYZFm0DXMojMQfPwrhnKlDdCacBTsWVm3c8Q+2jLYP4hFR7yCYej 9bRgTKMYNqHyHpbt6pLpLJVfIyyGmLyfLNv6rsxehxoa80WiOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgq+pTki4nhVJNd0RHPHEd/jSDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODU1YzgzNzctNDU4Zi0z MWZjLTk5YTMtNzhmMDU0NzY5ODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoLD+/mmLTwfDRbYAjpneRICwF7bVGMMQi2xChzgEjoHQJ27h22H9EJ OWAmJsGX8CGRBEvx0scG7p4TQuI93ZQcIRoErurRT7wSoxOVbYF48dNPoprr+gZy OxFHERkVcA8nWuKO+e5zUJKe0u0Mid84cErLzCTpC0jKkuLdMROwhWxyu02w4oS7 5wBP3yXL+orKKvBwBjx8GFp0s9uA/ktfpfBH7c8MRwMovConqZrD84Rq/vJnxMT1 1KVueACkniHdpcWt9JRt9f92G04ErJZUPVgyxQZvqDPLeWzqvfEDLKOtYFdRN/Wi gSmA0ajbH9j5S1080w9Y2Ky1U8Vn/UA= -----END CERTIFICATE-----Generated at Sun Jun 14 01:53:53 2026 by rpki-client