$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa File: 1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa (raw, json) Hash identifier: L/Ozv/E2hK+bAbXwP3IR3d5FANmOkBfp1fSsHCId93s= Subject key identifier: 97:F0:8A:B5:FB:FB:B6:58:EB:99:E6:29:55:17:AD:0F:72:0B:3B:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B52A77CF6582844F8F6E7D910 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 104.29.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:7c:f6:58:28:44:f8:f6:e7:d9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=73fb6713-985c-438c-88c1-511553fc70bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:4f:30:d9:81:dd:c6:b1:68:d8:74:81:2a: 4c:a5:fb:34:ce:3c:cc:bb:46:4d:42:87:88:ef:3a: b0:83:82:5a:50:2c:aa:ae:78:ef:e7:18:bb:8a:94: bd:7f:0e:d3:c3:33:a7:d9:c6:33:9d:96:85:7f:8c: 1f:b3:ef:b2:9d:9b:86:53:f5:4b:6b:ea:ad:eb:83: e8:fb:7b:f1:f6:a5:4c:f9:b0:ce:86:d9:d6:bc:b0: 75:fa:bd:30:85:48:a7:cd:e6:3b:b6:6d:a6:20:92: bc:66:2d:e2:32:83:26:86:57:be:ac:61:ef:4b:03: c3:90:08:27:72:49:a3:84:ff:b2:29:23:13:1e:8a: 1f:f5:98:05:c0:9a:2c:18:c5:f6:fd:f4:a0:ac:5e: 6c:74:d3:66:38:52:25:7c:c6:aa:4c:f1:7d:e3:9f: 30:2b:ca:ec:16:01:76:bf:83:7e:64:0a:35:59:89: 11:a0:98:46:47:f4:2e:d7:f1:f4:10:48:7c:89:7f: fd:96:39:0a:4c:aa:11:22:0c:ec:b7:60:bf:29:c9: ce:bd:6e:7d:ff:90:2d:66:d3:f6:53:af:60:af:25: 7d:68:b5:01:43:79:19:28:11:80:db:a4:cb:9b:85: 1d:ee:22:df:03:e2:ef:0a:1e:8a:cf:ca:3e:92:6a: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F0:8A:B5:FB:FB:B6:58:EB:99:E6:29:55:17:AD:0F:72:0B:3B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:9f:fa:72:70:3b:ec:63:10:b0:14:91:4b:13:e6:20:37:1c: 3e:7b:dd:53:ea:20:b0:94:ab:91:06:95:39:1a:7c:75:0f:ce: 94:17:38:9c:7c:c0:5c:46:d9:c5:6f:90:12:2e:bd:5e:9f:9c: 13:29:50:87:5c:08:e9:d1:b2:9c:f7:4b:d9:2a:61:b9:72:73: 18:74:74:10:1d:96:f3:58:6f:06:6d:a7:18:af:91:fa:22:6a: ce:36:3c:cf:f8:18:aa:c5:b4:f4:93:45:c0:98:c1:eb:02:0f: 0c:18:48:23:ed:07:68:38:6f:0a:39:f9:5b:cb:c1:c5:42:5e: b8:90:cc:71:29:dd:7a:bb:cb:b4:98:47:e8:d0:46:78:c4:2f: 6b:c9:ee:d9:16:ac:c1:a5:a1:49:03:31:8e:89:a1:11:97:27: 51:20:01:ce:6c:c0:f5:c7:e2:e2:95:34:e1:67:39:7c:20:62: fb:03:98:f9:e7:ad:78:a8:c7:d5:72:eb:18:2d:31:08:12:9f: 0d:51:63:3d:6b:6a:6e:c6:ad:d0:e2:96:11:79:3b:46:5a:89: ab:a2:ac:c8:2c:31:ab:a4:d6:bd:a0:b6:22:c8:ce:d5:7a:98: 30:ee:d3:c9:92:81:4f:b6:d2:b7:c2:a2:4a:67:a4:d9:ad:0e: b3:e8:6f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3z2WChE+Pbn2RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NzNmYjY3MTMtOTg1Yy00MzhjLTg4YzEtNTExNTUzZmM3MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq35PMNmB3caxaNh0gSpMpfs0zjzMu0ZNQoeI 7zqwg4JaUCyqrnjv5xi7ipS9fw7TwzOn2cYznZaFf4wfs++ynZuGU/VLa+qt64Po +3vx9qVM+bDOhtnWvLB1+r0whUinzeY7tm2mIJK8Zi3iMoMmhle+rGHvSwPDkAgn ckmjhP+yKSMTHoof9ZgFwJosGMX2/fSgrF5sdNNmOFIlfMaqTPF9458wK8rsFgF2 v4N+ZAo1WYkRoJhGR/Qu1/H0EEh8iX/9ljkKTKoRIgzst2C/KcnOvW59/5AtZtP2 U69gryV9aLUBQ3kZKBGA26TLm4Ud7iLfA+LvCh6Kz8o+kmpSnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfwirX7+7ZY65nmKVUXrQ9yCztQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWNiNWY1ZDgtZDYwNi0z M2YwLWIxODgtMmRiZjFkYTZjY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSf+nJwO+xjELAUkUsT5iA3HD573VPqILCUq5EGlTkafHUPzpQXOJx8 wFxG2cVvkBIuvV6fnBMpUIdcCOnRspz3S9kqYblycxh0dBAdlvNYbwZtpxivkfoi as42PM/4GKrFtPSTRcCYwesCDwwYSCPtB2g4bwo5+VvLwcVCXriQzHEp3Xq7y7SY R+jQRnjEL2vJ7tkWrMGloUkDMY6JoRGXJ1EgAc5swPXH4uKVNOFnOXwgYvsDmPnn rXiox9Vy6xgtMQgSnw1RYz1ram7GrdDilhF5O0ZaiauirMgsMauk1r2gtiLIztV6 mDDu08mSgU+20rfCokpnpNmtDrPob04= -----END CERTIFICATE-----Generated at Sat Nov 1 15:18:06 2025 by rpki-client