$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa File: 29937129-8e48-32c7-aae7-869e514cab8d.roa (raw, json) Hash identifier: 8aVjVteHVF5TDh53td9CIqxNw1gGKumXkXoCSpnGitM= Subject key identifier: 58:D9:A0:75:49:4F:54:7D:4C:EC:1A:B5:79:13:59:89:BF:90:76:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8766D34105CCAD4C31B580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.17.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:66:d3:41:05:cc:ad:4c:31:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=a1fcb318-3eac-4592-960e-8a7f28af1de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:96:a2:25:cb:78:78:83:a6:a7:7d:a8:fd: 5b:cf:b0:7b:2c:07:ac:d2:93:53:41:c1:71:19:84: 0c:a0:a2:92:cd:ef:1e:9c:de:1c:54:8a:9d:d9:ed: 0a:cf:83:71:a0:38:12:9e:27:0a:b4:c6:00:0c:91: 83:97:d3:fc:28:50:8e:76:c9:22:12:68:02:d0:f9: 02:71:3b:7d:1c:d5:17:49:e1:57:b6:4a:28:c6:ba: da:74:67:a0:8a:6c:2c:f6:3c:cf:61:4f:d5:a8:26: 11:d3:b0:7a:16:04:e1:30:ed:5b:11:84:f7:99:6d: c0:43:83:37:cf:73:b6:c4:31:07:f2:be:ce:6d:4b: c7:53:2d:8b:41:ac:cf:51:51:41:48:8e:98:f0:66: 11:94:cc:ad:f6:5b:28:43:c7:2d:b7:42:0c:cd:55: e8:73:46:6a:a2:61:3e:23:61:a8:15:30:0e:35:53: 19:fb:66:8e:59:c6:5f:07:7f:5b:b5:2d:57:a9:a4: 4b:89:67:87:4b:dd:f5:fe:4b:03:c0:e7:18:c5:f6: 58:75:74:cb:11:7f:fe:ee:75:1d:8f:38:3a:c9:1a: a1:07:d5:9a:95:df:f6:e6:28:07:a1:87:25:1e:94: f0:54:8f:d5:df:b4:e3:16:81:3d:1b:2c:9f:64:61: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:A0:75:49:4F:54:7D:4C:EC:1A:B5:79:13:59:89:BF:90:76:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ae:1d:59:dd:d4:e4:bf:f6:3f:1d:d7:70:9c:9c:c1:eb:0d: 39:a6:a8:ee:98:21:18:5c:93:d6:25:c9:e7:e2:56:6a:61:b5: aa:bb:99:b8:b5:27:e7:40:3a:e9:9d:21:0f:eb:75:07:c1:c0: 63:50:3d:63:16:c2:3b:de:8b:0f:79:5b:dc:95:23:66:9f:0c: d3:ac:63:cc:d8:15:eb:77:71:da:98:2d:a4:c7:90:87:09:6b: 8d:39:38:ea:45:44:e4:da:a7:56:2d:e1:78:25:df:49:f2:45: f9:79:28:6d:c4:93:a9:56:66:64:1b:37:3c:cc:a9:cc:3f:2a: 57:fc:92:59:a7:96:5e:f3:fa:db:1d:7c:32:7d:6b:db:85:ee: ca:a9:36:4c:0e:c0:3f:aa:3a:ad:4c:82:2d:85:93:c6:52:c0: 76:67:fd:bd:1a:da:53:aa:6f:ed:a2:54:81:36:b4:6a:b3:de: 78:93:ec:a9:06:0c:3c:05:ef:fc:37:af:2a:5b:38:69:90:47: 47:ac:8a:04:17:f0:3e:6d:41:5f:a1:b8:98:9e:78:d1:12:18: 84:0d:8b:1e:20:e8:f2:f0:20:74:33:33:44:96:00:5d:5e:99: 48:9a:76:ce:c2:dc:73:86:3c:aa:61:94:5c:0c:f7:32:58:b3: a6:c2:36:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2bTQQXMrUwxtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YTFmY2IzMTgtM2VhYy00NTkyLTk2MGUtOGE3ZjI4YWYxZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEaWoiXLeHiDpqd9qP1bz7B7LAes0pNTQcFx GYQMoKKSze8enN4cVIqd2e0Kz4NxoDgSnicKtMYADJGDl9P8KFCOdskiEmgC0PkC cTt9HNUXSeFXtkooxrradGegimws9jzPYU/VqCYR07B6FgThMO1bEYT3mW3AQ4M3 z3O2xDEH8r7ObUvHUy2LQazPUVFBSI6Y8GYRlMyt9lsoQ8ctt0IMzVXoc0ZqomE+ I2GoFTAONVMZ+2aOWcZfB39btS1XqaRLiWeHS931/ksDwOcYxfZYdXTLEX/+7nUd jzg6yRqhB9Wald/25igHoYclHpTwVI/V37TjFoE9GyyfZGHmWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjZoHVJT1R9TOwatXkTWYm/kHbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjk5MzcxMjktOGU0OC0z MmM3LWFhZTctODY5ZTUxNGNhYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJauHVnd1OS/9j8d13CcnMHrDTmmqO6YIRhck9YlyefiVmphtaq7mbi1 J+dAOumdIQ/rdQfBwGNQPWMWwjveiw95W9yVI2afDNOsY8zYFet3cdqYLaTHkIcJ a405OOpFROTap1Yt4Xgl30nyRfl5KG3Ek6lWZmQbNzzMqcw/Klf8klmnll7z+tsd fDJ9a9uF7sqpNkwOwD+qOq1Mgi2Fk8ZSwHZn/b0a2lOqb+2iVIE2tGqz3niT7KkG DDwF7/w3rypbOGmQR0esigQX8D5tQV+huJieeNESGIQNix4g6PLwIHQzM0SWAF1e mUiads7C3HOGPKphlFwM9zJYs6bCNps= -----END CERTIFICATE-----Generated at Tue Sep 22 11:32:47 2026 by rpki-client