$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/017b7c57-5307-3fbe-8230-884dc70a40ad.roa File: 017b7c57-5307-3fbe-8230-884dc70a40ad.roa (raw, json) Hash identifier: Pv0oqqQ6OXQtMN/NJ4Q7kqVBMGZksc7FuIKEt3uAKro= Subject key identifier: 38:96:AA:AB:FE:D2:CF:44:67:6F:A9:43:A7:96:E1:4E:30:8E:5A:D5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C52196EE908825745380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/017b7c57-5307-3fbe-8230-884dc70a40ad.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c5:21:96:ee:90:88:25:74:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=e5e7657d-0a03-437c-b39f-e5224b85afee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:11:c5:6f:ea:5e:d7:a5:69:59:de:4f:da: cb:91:5a:ab:7a:78:56:d7:f2:d5:34:95:1a:b0:9c: 43:ce:22:7b:1b:6e:68:a1:73:97:84:58:ba:d7:bf: c7:b3:4e:c1:ea:8e:0d:ba:7c:9f:7a:80:b1:99:99: 07:3a:cf:90:20:0d:0d:83:e7:46:4a:af:40:b0:e4: 56:80:90:f9:8c:e1:5c:9f:56:0a:5e:c5:47:7b:89: ad:3d:a9:eb:eb:6c:4e:d3:4b:af:c7:2b:0c:1a:02: f3:84:3b:07:08:64:04:1d:2f:24:1e:63:80:40:d0: 77:59:87:be:2f:f2:88:e1:9b:7c:dd:7d:89:50:16: ee:c4:98:e6:8f:f7:e9:b7:ce:0a:41:3a:86:fe:e9: 08:52:24:32:3c:7d:88:3d:31:89:a8:90:98:24:ce: 34:87:dc:27:52:2c:a6:f1:8c:8c:5e:4d:0f:18:72: 9b:7d:08:41:e1:14:61:79:14:13:96:74:d7:fb:fe: a7:1c:37:56:c7:55:e7:9f:f6:b2:db:5c:40:23:f8: 8c:3b:39:bb:26:40:7f:ab:46:20:a8:61:e0:e7:40: 33:86:53:ac:0a:bd:c2:61:92:11:69:d4:97:1b:37: 6b:5a:fa:b6:c7:55:ff:48:75:ae:6b:a4:43:0f:90: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:96:AA:AB:FE:D2:CF:44:67:6F:A9:43:A7:96:E1:4E:30:8E:5A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/017b7c57-5307-3fbe-8230-884dc70a40ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:5e:84:ec:be:da:c9:a4:17:2e:c3:0b:1b:ae:76:4d:02:55: 36:20:47:fc:e0:11:4d:7f:4b:44:b8:71:fd:72:52:6d:65:ef: a3:e0:24:1d:4f:40:29:11:22:27:a4:28:af:c5:d7:03:6a:a6: b3:4a:81:b4:be:b4:71:b1:58:33:1b:15:04:42:97:09:2d:cb: ca:87:8a:f5:3c:67:2f:a7:50:8d:25:77:bb:76:c6:ea:53:60: 7b:f2:31:17:16:f4:91:05:62:ea:08:77:fc:36:e2:c8:51:36: a7:0c:0b:c1:07:cf:27:07:90:66:73:4c:d1:28:27:54:ec:72: 6c:80:74:e6:2f:bd:4e:0b:2d:f8:95:45:c9:8d:d0:08:06:56: a2:b0:a2:46:bb:e5:49:46:a1:55:f5:aa:a3:86:5e:5b:ca:e8: 3d:75:89:f8:86:7e:de:d3:95:88:e7:f8:57:d2:cd:42:2d:ef: a3:e2:3c:1c:44:7c:11:9e:a8:7d:43:1e:3a:4f:05:8c:6c:f9: 29:9c:f2:19:92:1b:0c:88:07:1f:4c:14:bd:02:a9:15:6b:ad: 86:73:89:8c:fe:ce:2f:30:e6:0d:47:7e:fd:c8:1b:c0:20:75: 42:a4:3c:2b:1b:2e:f5:59:7c:9c:30:c5:05:33:5f:62:8f:72: 50:52:73:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8Uhlu6QiCV0U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZTVlNzY1N2QtMGEwMy00MzdjLWIzOWYtZTUyMjRiODVhZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmsRxW/qXtelaVneT9rLkVqrenhW1/LVNJUa sJxDziJ7G25ooXOXhFi617/Hs07B6o4NunyfeoCxmZkHOs+QIA0Ng+dGSq9AsORW gJD5jOFcn1YKXsVHe4mtPanr62xO00uvxysMGgLzhDsHCGQEHS8kHmOAQNB3WYe+ L/KI4Zt83X2JUBbuxJjmj/fpt84KQTqG/ukIUiQyPH2IPTGJqJCYJM40h9wnUiym 8YyMXk0PGHKbfQhB4RRheRQTlnTX+/6nHDdWx1Xnn/ay21xAI/iMOzm7JkB/q0Yg qGHg50AzhlOsCr3CYZIRadSXGzdrWvq2x1X/SHWua6RDD5CZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiWqqv+0s9EZ2+pQ6eW4U4wjlrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDE3YjdjNTctNTMwNy0z ZmJlLTgyMzAtODg0ZGM3MGE0MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJehOy+2smkFy7DCxuudk0CVTYgR/zgEU1/S0S4cf1yUm1l76PgJB1P QCkRIiekKK/F1wNqprNKgbS+tHGxWDMbFQRClwkty8qHivU8Zy+nUI0ld7t2xupT YHvyMRcW9JEFYuoId/w24shRNqcMC8EHzycHkGZzTNEoJ1TscmyAdOYvvU4LLfiV RcmN0AgGVqKwoka75UlGoVX1qqOGXlvK6D11ifiGft7TlYjn+FfSzUIt76PiPBxE fBGeqH1DHjpPBYxs+Smc8hmSGwyIBx9MFL0CqRVrrYZziYz+zi8w5g1Hfv3IG8Ag dUKkPCsbLvVZfJwwxQUzX2KPclBSc/E= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:41 2025 by rpki-client