$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd824615-63c8-390f-99de-c8c11ef550ae.roa File: dd824615-63c8-390f-99de-c8c11ef550ae.roa (raw, json) Hash identifier: PBlkMVfzSfOTt5maKHm70mcHkHo/pZsd5FvUxFkbDH0= Subject key identifier: 63:1A:BF:93:A7:77:51:BD:99:C9:89:B8:5A:C6:F9:55:14:4C:74:CE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA796034AED2CFFD0D86A5B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd824615-63c8-390f-99de-c8c11ef550ae.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 104.29.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:03:4a:ed:2c:ff:d0:d8:6a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3921d9fd-28da-4141-970a-f6047ceedf69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:3d:5e:8f:5d:9d:67:06:98:13:68:ce:a9: b7:ee:34:f0:cb:e0:ce:c0:fe:3e:c5:72:1b:0e:dd: 76:24:84:a2:27:2c:1d:f3:c4:99:82:82:33:58:ba: e8:db:12:a4:12:25:28:0a:5d:bb:4c:36:20:a3:8b: 70:a4:b9:2a:da:fe:2f:92:3a:fe:74:d5:c2:5f:df: 02:99:e6:c0:31:47:0a:bd:57:1a:e6:b6:01:1a:fb: f7:e7:13:ec:a7:bc:3b:1d:a4:0f:db:cc:8e:6c:3e: c4:3a:f3:fa:a5:99:68:56:eb:9c:93:9c:34:aa:4a: ac:0b:55:9c:a8:7f:f5:cb:df:05:ec:02:2a:1d:3d: 9e:e4:f7:a0:f2:9a:dc:8e:ad:e9:88:32:62:16:ad: 79:6c:fb:ab:e9:a3:d0:ee:e8:a2:32:73:c5:1c:e7: 8f:6b:ed:f7:6b:ca:55:59:f5:1a:56:32:8b:65:6b: cc:cf:fc:e1:c8:fc:b0:7d:2b:c3:37:d8:e9:ea:56: 43:81:23:d5:6e:9c:a6:94:ea:ff:d4:8e:1a:58:49: f1:b9:0b:12:65:5e:f7:62:a4:00:3a:fe:22:e1:95: 62:10:a1:b6:7d:21:04:1c:89:d3:70:25:22:d9:4c: b1:29:00:bb:06:22:55:7e:0a:01:ce:bb:1e:02:2d: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1A:BF:93:A7:77:51:BD:99:C9:89:B8:5A:C6:F9:55:14:4C:74:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd824615-63c8-390f-99de-c8c11ef550ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d2:8a:8e:88:41:8c:b8:dc:b9:4b:b3:a5:2e:31:36:36:19: cc:bf:19:8c:61:93:7c:ba:fc:f0:40:d7:b7:0c:d6:4d:2a:f4: bf:17:59:2a:b3:8e:ae:75:76:ca:90:f7:22:90:3e:cf:36:e1: e8:fb:d7:c1:fb:95:4c:ca:2b:2d:b5:82:21:12:76:66:1f:b0: e4:74:52:6f:e4:2a:66:51:9b:bc:af:e7:38:39:ec:c5:55:80: 61:05:0d:3a:79:3c:64:b8:b1:28:7f:22:1f:44:ef:d5:2f:55: cd:96:c6:f9:57:eb:88:34:00:2c:73:f7:69:fd:d1:5b:e8:54: b8:10:01:a0:db:43:61:0c:86:61:98:7f:5f:85:e0:85:e1:b4: cd:cf:df:a9:02:02:9a:de:e9:8d:7c:de:76:1d:3d:af:1c:c3: fc:cc:e4:8a:91:36:53:17:49:e3:9f:0b:95:44:ed:67:18:91: 59:8f:47:cb:a6:93:3b:00:5b:d1:a4:56:f7:8a:ca:c7:92:80: 91:18:72:4b:9a:e3:6d:52:26:50:7e:fb:99:b0:0a:6b:97:11: c1:68:f5:ee:3d:21:51:28:1f:9a:72:f1:bc:43:1a:8b:94:5d: 79:fa:3f:c0:2f:f6:37:71:fb:38:36:8d:79:a9:03:d1:20:87: 33:29:93:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlgNK7Sz/0NhqW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzkyMWQ5ZmQtMjhkYS00MTQxLTk3MGEtZjYwNDdjZWVkZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovE9Xo9dnWcGmBNozqm37jTwy+DOwP4+xXIb Dt12JISiJywd88SZgoIzWLro2xKkEiUoCl27TDYgo4twpLkq2v4vkjr+dNXCX98C mebAMUcKvVca5rYBGvv35xPsp7w7HaQP28yObD7EOvP6pZloVuuck5w0qkqsC1Wc qH/1y98F7AIqHT2e5Peg8prcjq3piDJiFq15bPur6aPQ7uiiMnPFHOePa+33a8pV WfUaVjKLZWvMz/zhyPywfSvDN9jp6lZDgSPVbpymlOr/1I4aWEnxuQsSZV73YqQA Ov4i4ZViEKG2fSEEHInTcCUi2UyxKQC7BiJVfgoBzrseAi27fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMav5Ond1G9mcmJuFrG+VUUTHTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGQ4MjQ2MTUtNjNjOC0z OTBmLTk5ZGUtYzhjMTFlZjU1MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLSio6IQYy43LlLs6UuMTY2Gcy/GYxhk3y6/PBA17cM1k0q9L8XWSqz jq51dsqQ9yKQPs824ej718H7lUzKKy21giESdmYfsOR0Um/kKmZRm7yv5zg57MVV gGEFDTp5PGS4sSh/Ih9E79UvVc2WxvlX64g0ACxz92n90VvoVLgQAaDbQ2EMhmGY f1+F4IXhtM3P36kCApre6Y183nYdPa8cw/zM5IqRNlMXSeOfC5VE7WcYkVmPR8um kzsAW9GkVveKyseSgJEYckua421SJlB++5mwCmuXEcFo9e49IVEoH5py8bxDGouU XXn6P8Av9jdx+zg2jXmpA9EghzMpkwU= -----END CERTIFICATE-----Generated at Wed Jul 29 08:42:46 2026 by rpki-client