$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa File: 17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa (raw, json) Hash identifier: KASsECTUCbBLWA0KL18UmJcf+MpuQ/4AmzWOlCa3JMw= Subject key identifier: 24:CA:BA:C3:E2:BB:21:2E:70:21:CE:A2:85:F2:BD:A9:EE:84:94:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DF4DB332F73E8F4740373D380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 13335 IP address blocks: 104.29.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:33:2f:73:e8:f4:74:03:73:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=bfee7f5d-e390-4fa2-80fb-95f433b3ef47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:39:bb:fe:58:5e:0e:76:e5:0f:52:36:4b:87: 6c:da:32:54:c3:6d:66:23:7f:ef:8e:68:7d:e0:ae: e0:10:ed:eb:66:15:db:43:37:e2:8b:db:56:78:26: c8:fa:fb:25:b0:9a:e1:15:5b:63:c7:d8:f3:77:f7: f2:af:ae:9f:cc:bf:21:48:b3:b6:d1:8b:fc:9b:da: b1:38:4b:5a:cc:6a:df:da:13:e9:04:61:c6:d8:e6: 4a:9e:6a:f5:9b:ef:91:1d:6e:9b:8c:9b:a0:d2:7c: b3:22:36:5d:ec:0f:1d:89:61:cd:b3:d2:38:71:87: 0c:b4:d4:1c:fd:15:21:c4:39:70:42:56:cb:6d:9f: d9:3d:1b:0d:02:de:31:52:c6:79:73:4b:31:12:e0: 1e:f8:38:87:c9:de:59:ea:3c:61:5d:da:7e:32:fd: 22:c9:ac:4c:55:df:b4:d8:93:2d:05:31:cd:a7:24: bf:ec:a1:9a:f7:8c:81:14:b3:21:28:d3:d5:11:ac: 06:7f:0b:93:41:e8:9d:9d:28:4f:f8:65:a8:2a:e5: 32:d7:35:26:20:8f:b0:cb:c7:c7:ae:b9:7b:86:83: 15:c8:3c:1f:15:c1:9c:d4:79:e9:3d:c5:7e:03:e9: 26:c5:fc:1a:eb:79:c5:1d:2c:8b:63:43:26:bc:7a: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:BA:C3:E2:BB:21:2E:70:21:CE:A2:85:F2:BD:A9:EE:84:94:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7d7f6-5c6a-3953-9d1e-bbd2aa6cc6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3f:43:eb:3f:30:34:56:8f:3f:05:ee:7d:da:c2:f6:92:ff: 63:9f:e1:84:57:80:d0:d4:10:53:3e:5b:01:73:ed:67:18:3b: 9a:c5:7a:41:04:84:f9:38:0d:99:92:e7:73:24:93:cc:f0:30: 6c:4f:fc:7d:e0:df:84:d5:ca:ea:3a:72:9f:f1:7b:c1:d9:d1: c1:ec:18:fe:f9:a3:1e:5b:79:95:f2:be:66:af:08:38:65:cf: 7b:63:e7:e6:de:22:12:e3:58:2a:bf:f6:4a:e2:73:4b:e0:b7: 61:27:ec:4a:4f:91:69:24:47:24:87:2d:39:9e:f1:6b:bd:5a: cb:63:53:4d:52:fc:3b:be:f0:be:9c:1d:64:19:26:b0:02:c7: a2:9b:25:57:f6:15:2b:73:cd:b8:2a:03:40:00:4a:9b:e9:ec: 98:14:ee:8c:d8:bf:75:30:ee:3e:70:ce:76:ad:95:9f:1c:d3: 29:98:79:b8:b0:40:80:b5:b3:c0:76:47:56:45:ef:9b:db:0d: 82:a9:69:b2:1c:a4:7f:5d:89:ee:82:b8:0d:2b:4a:c8:b3:67: 2d:af:d7:e3:ac:97:c8:ff:d2:e2:c2:aa:0c:de:0c:21:a5:b1: d3:07:e6:db:20:f6:1b:37:d2:aa:38:77:3b:15:dd:01:85:63: 7a:c2:b4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE302zMvc+j0dANz04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YmZlZTdmNWQtZTM5MC00ZmEyLTgwZmItOTVmNDMzYjNlZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzm7/lheDnblD1I2S4ds2jJUw21mI3/vjmh9 4K7gEO3rZhXbQzfii9tWeCbI+vslsJrhFVtjx9jzd/fyr66fzL8hSLO20Yv8m9qx OEtazGrf2hPpBGHG2OZKnmr1m++RHW6bjJug0nyzIjZd7A8diWHNs9I4cYcMtNQc /RUhxDlwQlbLbZ/ZPRsNAt4xUsZ5c0sxEuAe+DiHyd5Z6jxhXdp+Mv0iyaxMVd+0 2JMtBTHNpyS/7KGa94yBFLMhKNPVEawGfwuTQeidnShP+GWoKuUy1zUmII+wy8fH rrl7hoMVyDwfFcGc1HnpPcV+A+kmxfwa63nFHSyLY0MmvHq2cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTKusPiuyEucCHOooXyvanuhJSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdmN2Q3ZjYtNWM2YS0z OTUzLTlkMWUtYmJkMmFhNmNjNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg/Q+s/MDRWjz8F7n3awvaS/2Of4YRXgNDUEFM+WwFz7WcYO5rFekEE hPk4DZmS53Mkk8zwMGxP/H3g34TVyuo6cp/xe8HZ0cHsGP75ox5beZXyvmavCDhl z3tj5+beIhLjWCq/9kric0vgt2En7EpPkWkkRySHLTme8Wu9WstjU01S/Du+8L6c HWQZJrACx6KbJVf2FStzzbgqA0AASpvp7JgU7ozYv3Uw7j5wznatlZ8c0ymYebiw QIC1s8B2R1ZF75vbDYKpabIcpH9die6CuA0rSsizZy2v1+Osl8j/0uLCqgzeDCGl sdMH5tsg9hs30qo4dzsV3QGFY3rCtFo= -----END CERTIFICATE-----Generated at Tue Jun 2 21:36:37 2026 by rpki-client