$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a280ae-ecc1-329c-84a2-aac0a20f9461.roa File: 25a280ae-ecc1-329c-84a2-aac0a20f9461.roa (raw, json) Hash identifier: fz769m1UXW0ATTzvvsRIHa2CANDqbOgOtQpTt42z9gQ= Subject key identifier: 5A:B4:5E:80:EB:8F:BA:2C:00:BD:71:66:E1:24:E0:5F:60:AA:83:AC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B9DF33513EEFC0D3EAA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a280ae-ecc1-329c-84a2-aac0a20f9461.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b9:df:33:51:3e:ef:c0:d3:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=dc213d35-7ee9-430f-afc3-b5d355bd2cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:e8:6b:2e:57:d8:69:02:5e:39:14:77:cd: 0b:6f:14:15:91:4d:db:73:ac:b4:38:d5:79:d6:16: ab:95:3b:9d:d4:c2:48:7f:8f:9f:4d:31:00:83:cf: eb:15:8d:20:4c:d4:32:33:ad:3f:6d:bb:e9:f8:53: 40:c1:32:f4:48:26:23:37:94:4e:90:2b:91:13:c9: b3:06:8b:3c:fd:33:39:01:de:33:9b:91:92:27:45: e5:b1:9d:26:03:d3:11:36:c0:0f:de:31:ab:37:46: 69:ed:7d:8f:96:46:98:7e:87:68:39:d1:26:49:4b: ad:0b:38:c7:51:70:c5:64:30:8e:ed:b8:cf:ca:88: c5:54:62:6c:f6:d0:8d:41:68:82:bb:52:cb:87:0e: ae:cd:25:69:eb:b7:d3:c6:93:03:49:df:69:41:75: f7:44:60:54:06:21:18:92:34:d8:a6:be:92:96:48: 70:00:a5:1d:2a:be:d4:9f:a6:b9:e9:bf:9c:67:fc: a2:63:6c:4e:37:c0:a5:95:cb:ed:a1:4b:01:59:0f: 7f:81:ea:72:8c:7a:fc:b9:fe:3c:88:24:d4:3f:4d: e8:11:54:81:14:9a:30:58:4c:7c:d0:1f:ec:93:32: 86:4e:75:4e:6a:9b:b5:23:90:66:e1:ce:a2:ee:2a: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B4:5E:80:EB:8F:BA:2C:00:BD:71:66:E1:24:E0:5F:60:AA:83:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a280ae-ecc1-329c-84a2-aac0a20f9461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:c1:74:45:d8:4a:84:66:08:80:ed:fe:e5:a8:98:70:f8:68: e5:5f:fd:df:99:64:5e:58:ba:ae:78:53:b5:10:e0:11:7d:ce: 93:51:a5:1a:17:fa:45:55:21:24:9d:21:b6:6f:cc:0d:d5:ee: 5d:14:f0:69:cb:b1:18:d3:cc:9b:95:33:b2:31:99:e5:d1:76: 75:aa:6c:68:0e:ae:08:67:9e:50:53:a9:67:b2:20:47:43:87: 53:bb:73:05:d1:69:16:1e:f6:91:f7:3a:f1:c2:83:8a:9c:25: c4:de:d5:d7:6d:61:64:e0:4c:3a:c6:47:87:4f:df:89:07:d5: f0:dc:c4:4c:00:ef:0b:b1:ea:2a:39:80:64:51:03:a1:85:18: 0d:03:52:cb:d4:72:5f:79:b6:e7:a4:b6:e5:97:ed:fe:80:4c: b2:d0:33:1e:3a:c9:d1:84:e4:75:11:39:33:79:ba:35:92:91: da:b1:b9:9a:cf:07:f2:02:2b:06:22:74:92:27:70:47:d5:82: c0:65:88:36:fd:f4:39:cc:ae:eb:ff:05:fc:47:d8:1a:e8:6f: ba:7c:3e:e3:5e:07:09:d9:4b:f5:de:94:6e:75:69:dc:01:7f: a2:b5:f8:b9:85:82:a2:b4:42:7d:e8:f8:f8:32:46:1b:fa:71: 6c:a8:4b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7nfM1E+78DT6qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZGMyMTNkMzUtN2VlOS00MzBmLWFmYzMtYjVkMzU1YmQyY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+Hoay5X2GkCXjkUd80LbxQVkU3bc6y0ONV5 1harlTud1MJIf4+fTTEAg8/rFY0gTNQyM60/bbvp+FNAwTL0SCYjN5ROkCuRE8mz Bos8/TM5Ad4zm5GSJ0XlsZ0mA9MRNsAP3jGrN0Zp7X2PlkaYfodoOdEmSUutCzjH UXDFZDCO7bjPyojFVGJs9tCNQWiCu1LLhw6uzSVp67fTxpMDSd9pQXX3RGBUBiEY kjTYpr6SlkhwAKUdKr7Un6a56b+cZ/yiY2xON8CllcvtoUsBWQ9/gepyjHr8uf48 iCTUP03oEVSBFJowWEx80B/skzKGTnVOapu1I5Bm4c6i7iooIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq0XoDrj7osAL1xZuEk4F9gqoOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVhMjgwYWUtZWNjMS0z MjljLTg0YTItYWFjMGEyMGY5NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLBdEXYSoRmCIDt/uWomHD4aOVf/d+ZZF5Yuq54U7UQ4BF9zpNRpRoX +kVVISSdIbZvzA3V7l0U8GnLsRjTzJuVM7IxmeXRdnWqbGgOrghnnlBTqWeyIEdD h1O7cwXRaRYe9pH3OvHCg4qcJcTe1ddtYWTgTDrGR4dP34kH1fDcxEwA7wux6io5 gGRRA6GFGA0DUsvUcl95tuektuWX7f6ATLLQMx46ydGE5HUROTN5ujWSkdqxuZrP B/ICKwYidJIncEfVgsBliDb99DnMruv/BfxH2Brob7p8PuNeBwnZS/XelG51adwB f6K1+LmFgqK0Qn3o+PgyRhv6cWyoS6c= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:03 2025 by rpki-client