$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a00064a-145e-3c02-8448-2633ec776c90.roa File: 0a00064a-145e-3c02-8448-2633ec776c90.roa (raw, json) Hash identifier: wToRTDiSJITnpet8l+Rb4Z7OHxcHUMl5ecKYaXHz4yM= Subject key identifier: 9F:57:05:6E:0C:97:8F:FB:D1:2A:6C:91:A2:9C:54:7D:6A:73:72:C6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFDF0A507A3CB46815100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a00064a-145e-3c02-8448-2633ec776c90.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fd:f0:a5:07:a3:cb:46:81:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=6f6268d6-cf85-4106-9dfc-87f42c842ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:56:80:64:dd:c7:47:17:39:7b:2f:a0:40: 22:15:de:4d:d6:2f:c1:f3:d3:16:9f:b9:c2:cd:03: ae:f0:20:34:73:56:7a:d6:32:8b:e6:04:da:43:57: 81:63:0d:1f:e1:0c:7d:95:e1:4e:a2:5e:06:b8:88: 4e:c3:0c:b2:3c:42:57:f3:e3:f3:8f:b7:7c:f3:b5: e1:9d:f4:a6:9d:6f:f3:37:ea:63:3f:3a:99:77:ff: b1:88:82:3b:b5:c3:18:37:f9:dc:e8:34:75:ef:45: bb:1b:a0:9c:d3:92:1b:aa:34:6e:a7:83:bf:b6:7b: 09:78:d3:2e:8a:77:a9:51:5c:2e:05:43:29:e5:68: d2:82:d6:c4:b7:35:f6:b4:8f:b5:35:fd:13:c1:d6: ee:3c:85:24:1f:f0:fe:53:bf:da:e4:96:b0:69:57: 39:17:b7:6d:00:57:b5:5d:f0:d7:0d:4e:37:e1:ff: fc:ac:81:1c:f2:9e:26:11:c5:c2:c3:14:5a:d7:7b: ab:e5:37:69:ac:9d:9b:f8:a5:5c:d1:98:e3:63:68: d6:c7:6d:cb:d1:5d:da:77:50:83:78:05:2b:19:30: 70:31:b5:39:ba:e1:2a:9c:57:37:36:38:5a:7a:d1: 39:50:03:47:c7:55:75:57:3c:71:bd:93:d7:a8:ca: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:57:05:6E:0C:97:8F:FB:D1:2A:6C:91:A2:9C:54:7D:6A:73:72:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a00064a-145e-3c02-8448-2633ec776c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ce:b2:58:2b:4b:b4:03:dd:7d:37:8d:4f:f0:37:f6:8f:a1: cf:fb:f1:5f:10:af:26:96:b5:0f:68:11:8f:bb:08:f7:24:8b: 05:4b:94:8c:a0:32:96:b2:04:61:6e:70:af:49:40:cf:50:70: 9d:f8:ce:60:c0:86:70:e0:08:48:a5:e2:ef:14:f7:f8:e5:58: b2:37:3b:2f:f0:0f:54:54:d8:f5:03:c4:ad:7f:fa:fd:ba:d1: 46:a2:9f:07:e9:69:54:65:49:96:0e:9d:ee:cb:8c:4e:8a:16: 53:25:40:55:c7:a3:82:4d:7a:9c:fe:55:78:ea:36:56:73:d0: aa:9c:51:1b:ec:70:99:0b:a3:aa:07:ca:d8:04:42:8a:78:6e: a8:28:83:51:94:6c:f0:65:e1:53:ba:4b:44:1e:be:5c:a0:95: 71:9c:01:f3:78:95:e9:72:c2:4e:61:18:8b:66:68:a6:4f:a7: ab:8b:58:28:f9:b9:44:7e:5a:68:84:5e:61:4a:29:05:88:ad: 1a:f4:ce:78:17:76:43:15:e6:4f:6e:e0:30:ce:22:cf:4e:34: bb:0c:4b:e4:ce:27:d2:73:eb:c6:61:5f:78:49:0b:8e:91:87: 7a:48:cc:57:e4:b4:1b:62:c9:f0:53:b1:b2:bf:a7:ee:37:d4: 15:5f:44:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP3wpQejy0aBUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NmY2MjY4ZDYtY2Y4NS00MTA2LTlkZmMtODdmNDJjODQyZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiJWgGTdx0cXOXsvoEAiFd5N1i/B89MWn7nC zQOu8CA0c1Z61jKL5gTaQ1eBYw0f4Qx9leFOol4GuIhOwwyyPEJX8+Pzj7d887Xh nfSmnW/zN+pjPzqZd/+xiII7tcMYN/nc6DR170W7G6Cc05IbqjRup4O/tnsJeNMu inepUVwuBUMp5WjSgtbEtzX2tI+1Nf0TwdbuPIUkH/D+U7/a5JawaVc5F7dtAFe1 XfDXDU434f/8rIEc8p4mEcXCwxRa13ur5TdprJ2b+KVc0ZjjY2jWx23L0V3ad1CD eAUrGTBwMbU5uuEqnFc3NjhaetE5UANHx1V1VzxxvZPXqMqmtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9XBW4Ml4/70SpskaKcVH1qc3LGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGEwMDA2NGEtMTQ1ZS0z YzAyLTg0NDgtMjYzM2VjNzc2YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3OslgrS7QD3X03jU/wN/aPoc/78V8QryaWtQ9oEY+7CPckiwVLlIyg MpayBGFucK9JQM9QcJ34zmDAhnDgCEil4u8U9/jlWLI3Oy/wD1RU2PUDxK1/+v26 0UainwfpaVRlSZYOne7LjE6KFlMlQFXHo4JNepz+VXjqNlZz0KqcURvscJkLo6oH ytgEQop4bqgog1GUbPBl4VO6S0QevlyglXGcAfN4lelywk5hGItmaKZPp6uLWCj5 uUR+WmiEXmFKKQWIrRr0zngXdkMV5k9u4DDOIs9ONLsMS+TOJ9Jz68ZhX3hJC46R h3pIzFfktBtiyfBTsbK/p+431BVfRCA= -----END CERTIFICATE-----Generated at Sun Nov 2 04:25:48 2025 by rpki-client