$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa File: 972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa (raw, json) Hash identifier: u9KzBHOYTgi/DaZjSrqin4/7B02wsLJp8J0bExnv9Wk= Subject key identifier: 0D:53:18:47:82:2B:89:50:74:3D:A6:C7:DB:93:14:50:49:21:15:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CBDB1D964EBBD6417867B7380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 13335 IP address blocks: 104.29.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:d9:64:eb:bd:64:17:86:7b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=b4090090-6ab6-43ed-adcb-1e0a610aaefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:32:d5:1b:29:ea:e0:0c:9a:7e:f3:f2:bb: 82:da:2e:d3:43:e6:a1:d0:e7:66:31:79:08:ea:d3: 5c:e5:69:0b:a2:62:11:d1:9b:e8:6e:21:f3:c1:b9: 8a:2e:81:11:0b:b8:47:6d:3c:06:8a:6a:c4:93:1b: 78:88:9e:52:35:df:c8:d4:7a:fe:d1:71:1d:47:d2: a3:ec:55:7c:e2:44:46:3a:97:19:eb:19:0d:1a:a9: f8:84:23:a5:e7:d7:d7:2b:81:50:71:a7:2d:b3:8b: 83:bd:e1:51:13:72:3d:83:d0:92:7d:99:0e:97:cc: cc:98:73:06:04:8a:14:a9:d7:0e:ae:bf:d3:eb:56: a8:88:aa:c9:20:34:5f:b9:ea:79:5f:c2:e8:c4:68: 1f:6d:23:18:63:bf:f2:d0:54:07:1d:d3:b5:16:3f: 11:0a:64:b9:8f:33:82:d6:57:b7:46:62:71:fb:57: bc:0c:c3:34:80:65:f2:ee:c4:7b:37:19:18:f5:c7: 69:bf:98:cd:5a:54:a7:20:e6:fd:ff:e2:b1:2b:07: 16:b1:69:79:dc:2c:dc:2a:67:9c:12:f4:0e:95:84: 5b:50:da:4f:3a:aa:70:79:7d:cb:db:a9:bd:da:00: 13:d4:30:96:dd:cf:5f:3e:05:4b:f7:71:ec:af:a0: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:53:18:47:82:2B:89:50:74:3D:A6:C7:DB:93:14:50:49:21:15:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:fc:c2:0b:8e:d7:30:47:c6:69:23:e3:90:a5:1b:3f:d5:9d: 90:41:88:51:f4:78:06:d4:2e:9c:b7:27:84:6d:08:cf:18:28: 77:2e:ca:89:c1:1f:b1:b1:64:39:88:db:9c:66:e2:1b:bd:fb: fb:b9:d3:96:42:c9:82:4e:64:8a:49:48:64:88:68:04:09:76: dd:ce:47:33:16:35:25:cd:ce:16:b7:d4:84:41:ae:80:74:f0: 00:9b:4d:00:92:6d:1f:6c:c5:c0:50:f9:bf:65:94:59:50:b9: 4c:6d:98:ee:c4:06:b4:1e:19:56:60:36:ed:b7:c5:33:95:a0: 2e:61:d1:6c:85:6d:13:22:2c:47:cf:75:c2:a4:eb:e1:ec:97: 52:e0:3e:9f:94:cd:ed:83:2f:42:9e:0d:0d:a7:c5:59:e1:54: 4a:97:a2:5e:e1:9e:28:fc:1a:67:69:15:bf:96:37:e0:77:d8: 62:5a:0c:de:35:ee:df:35:ae:51:eb:d5:20:a4:d4:5e:93:1d: cb:37:7b:17:68:9d:aa:ac:d1:f2:9b:fe:af:f4:46:ff:7c:5b: ec:7d:68:2a:59:13:11:9f:66:ba:26:ae:dd:e2:d0:b4:97:77: 95:5a:ab:06:58:a7:99:d5:d0:cf:83:a3:a5:2f:34:57:07:43: db:08:47:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sdlk671kF4Z7c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk YjQwOTAwOTAtNmFiNi00M2VkLWFkY2ItMWUwYTYxMGFhZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEEy1Rsp6uAMmn7z8ruC2i7TQ+ah0OdmMXkI 6tNc5WkLomIR0ZvobiHzwbmKLoERC7hHbTwGimrEkxt4iJ5SNd/I1Hr+0XEdR9Kj 7FV84kRGOpcZ6xkNGqn4hCOl59fXK4FQcacts4uDveFRE3I9g9CSfZkOl8zMmHMG BIoUqdcOrr/T61aoiKrJIDRfuep5X8LoxGgfbSMYY7/y0FQHHdO1Fj8RCmS5jzOC 1le3RmJx+1e8DMM0gGXy7sR7NxkY9cdpv5jNWlSnIOb9/+KxKwcWsWl53CzcKmec EvQOlYRbUNpPOqpweX3L26m92gAT1DCW3c9fPgVL93Hsr6AY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1TGEeCK4lQdD2mx9uTFFBJIRUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTcyYThmMzctNmExOS0z NWQzLWE0N2EtN2NlNWIzYzM5OTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALT8wguO1zBHxmkj45ClGz/VnZBBiFH0eAbULpy3J4RtCM8YKHcuyonB H7GxZDmI25xm4hu9+/u505ZCyYJOZIpJSGSIaAQJdt3ORzMWNSXNzha31IRBroB0 8ACbTQCSbR9sxcBQ+b9llFlQuUxtmO7EBrQeGVZgNu23xTOVoC5h0WyFbRMiLEfP dcKk6+Hsl1LgPp+Uze2DL0KeDQ2nxVnhVEqXol7hnij8GmdpFb+WN+B32GJaDN41 7t81rlHr1SCk1F6THcs3exdonaqs0fKb/q/0Rv98W+x9aCpZExGfZromrt3i0LSX d5VaqwZYp5nV0M+Do6UvNFcHQ9sIR4U= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:36 2026 by rpki-client