$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29c14df9-8e10-3dcc-ae26-74f5dadc8fe9.roa File: 29c14df9-8e10-3dcc-ae26-74f5dadc8fe9.roa (raw, json) Hash identifier: t9OC6biwUES9SsfpH+n/ckR64yBR8mzstYcNW4sf9ho= Subject key identifier: 28:34:99:3D:DD:23:7F:56:92:DF:39:F0:CC:93:8B:5D:D7:5B:95:B5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C451F1E0335C87433640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29c14df9-8e10-3dcc-ae26-74f5dadc8fe9.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.27.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c4:51:f1:e0:33:5c:87:43:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=fba8e05a-3cb5-4cf9-a305-cfa426182a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:54:20:55:96:66:11:76:5c:b6:8c:35:14: 1a:de:81:dd:fd:fc:5b:c1:43:19:89:39:fc:f7:25: ca:84:db:27:2f:60:ca:4b:77:0b:b2:9e:64:93:3d: d4:3f:a6:69:fc:f5:95:0e:cd:57:37:9b:44:99:df: 95:da:2d:92:b0:99:d5:62:3c:7f:aa:44:1e:e4:9f: a5:a6:4c:dc:6b:0a:03:31:18:d2:0f:5a:75:1e:da: 4c:ef:02:6b:21:19:ec:95:5d:09:c1:2a:30:b6:7f: 03:80:da:e1:ba:cd:f6:58:38:5c:0b:69:03:7f:b1: b6:bb:91:b3:c3:97:cc:09:c0:7a:a0:14:db:94:99: 26:9f:81:90:4b:47:36:af:a7:05:3c:d0:49:0f:19: 02:6f:53:9f:f0:89:a0:63:87:3e:11:5b:b3:d3:ba: f6:bc:5c:be:88:5d:3d:ca:f4:fe:d3:80:f6:a9:ca: 6f:f3:31:74:a4:df:cd:d7:73:48:7e:22:ad:c0:8d: b4:d0:71:a3:d5:58:99:a5:88:89:16:ad:7e:c2:44: 5d:de:f5:84:36:b4:60:5b:be:43:6c:60:31:e2:6e: 58:af:76:66:84:dd:f8:4f:14:8d:71:98:e1:39:da: b9:3c:cf:32:b8:51:f0:b9:f2:e6:49:b4:2e:14:c1: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:99:3D:DD:23:7F:56:92:DF:39:F0:CC:93:8B:5D:D7:5B:95:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29c14df9-8e10-3dcc-ae26-74f5dadc8fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ff:6d:2b:1b:6d:11:37:60:e2:94:86:88:1d:cc:39:c1:6a: 1d:68:f0:d1:97:db:af:cc:b9:54:44:3c:7f:49:89:c7:7b:10: 76:8d:20:af:da:70:79:35:7a:64:72:8b:d0:e2:8c:ba:60:09: 1c:08:4f:75:f3:93:2c:e6:aa:01:74:c5:03:35:88:b7:7a:5a: 75:f1:7c:e3:23:d1:07:40:88:63:19:a1:d3:6a:2f:e6:76:a4: 21:5e:42:43:3b:2f:06:8f:74:cf:69:84:02:1d:09:32:b5:a6: 28:ca:93:b9:aa:3f:18:eb:c6:7d:72:ac:d5:34:90:5a:92:c8: cb:9c:26:fe:de:26:9e:79:bf:ae:92:d1:82:a2:19:87:a6:af: 32:94:36:98:07:77:6d:24:70:56:91:24:fa:5b:fd:84:ac:97: f7:aa:98:a9:64:0b:93:db:18:08:0d:f1:ec:ce:ed:50:85:aa: 97:15:76:56:09:a1:4c:1d:f6:d9:4d:e0:aa:6a:71:01:d2:68: 23:dc:e0:34:9d:57:a1:ff:42:e4:20:d7:95:9b:0b:59:49:9f: cc:15:e2:f6:b7:34:1a:4b:5f:34:a9:52:93:fd:da:ad:15:9b: 81:43:58:04:63:64:d9:b9:be:93:94:e4:a1:be:b0:b2:40:43: 1c:7f:bb:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8RR8eAzXIdDNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZmJhOGUwNWEtM2NiNS00Y2Y5LWEzMDUtY2ZhNDI2MTgyYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5UIFWWZhF2XLaMNRQa3oHd/fxbwUMZiTn8 9yXKhNsnL2DKS3cLsp5kkz3UP6Zp/PWVDs1XN5tEmd+V2i2SsJnVYjx/qkQe5J+l pkzcawoDMRjSD1p1HtpM7wJrIRnslV0JwSowtn8DgNrhus32WDhcC2kDf7G2u5Gz w5fMCcB6oBTblJkmn4GQS0c2r6cFPNBJDxkCb1Of8ImgY4c+EVuz07r2vFy+iF09 yvT+04D2qcpv8zF0pN/N13NIfiKtwI200HGj1ViZpYiJFq1+wkRd3vWENrRgW75D bGAx4m5Yr3ZmhN34TxSNcZjhOdq5PM8yuFHwufLmSbQuFMHxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg0mT3dI39Wkt858MyTi13XW5W1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjljMTRkZjktOGUxMC0z ZGNjLWFlMjYtNzRmNWRhZGM4ZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7/bSsbbRE3YOKUhogdzDnBah1o8NGX26/MuVREPH9Jicd7EHaNIK/a cHk1emRyi9DijLpgCRwIT3XzkyzmqgF0xQM1iLd6WnXxfOMj0QdAiGMZodNqL+Z2 pCFeQkM7LwaPdM9phAIdCTK1pijKk7mqPxjrxn1yrNU0kFqSyMucJv7eJp55v66S 0YKiGYemrzKUNpgHd20kcFaRJPpb/YSsl/eqmKlkC5PbGAgN8ezO7VCFqpcVdlYJ oUwd9tlN4KpqcQHSaCPc4DSdV6H/QuQg15WbC1lJn8wV4va3NBpLXzSpUpP92q0V m4FDWARjZNm5vpOU5KG+sLJAQxx/u7s= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:27 2025 by rpki-client