$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa File: 2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa (raw, json) Hash identifier: vk5ucvurv8gov0Kefof7zHt+cINqnqGMz6ONxdf7TiM= Subject key identifier: 95:3C:7A:D9:55:18:65:73:16:DB:AC:5B:CB:84:F4:B7:05:F9:95:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667B8F7BB4E6B6D8E5B9740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:b8:f7:bb:4e:6b:6d:8e:5b:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=3c96fe55-e921-4603-9a14-d56dcc365085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:1b:1f:4a:53:24:8b:02:a6:6c:1d:96:d7: 7c:1c:b6:17:33:d4:5a:4c:38:1b:be:72:07:bc:99: a2:cd:82:70:cf:fe:45:78:d0:e2:04:7a:3a:c0:34: b4:10:b1:0f:0c:f1:4e:89:23:af:b2:2e:7c:60:01: 54:49:48:e1:c2:c3:39:3f:32:3d:8c:da:c5:98:bd: 55:f1:c9:2b:d4:e9:c9:98:0c:d4:c7:5e:a7:d0:e6: 19:f4:79:0a:b8:54:7c:43:07:c3:df:18:e3:21:c7: 84:81:42:93:15:ef:af:93:a9:b0:d3:2b:13:ae:f0: 46:6a:86:60:97:d5:d5:98:71:78:a5:da:88:6c:d5: 8a:ce:42:81:b0:32:80:7e:5f:83:ef:4b:03:95:7c: fc:00:60:a3:51:72:05:87:b4:71:dd:8b:27:0a:45: d1:93:80:25:08:d4:a5:b1:fd:1a:e0:02:f9:90:5f: 5d:1d:c1:b4:31:80:5e:28:e3:8f:08:7e:5d:d6:0b: 18:ec:3f:25:4e:36:f3:50:40:8f:c4:ab:d0:c7:3f: 1c:42:62:18:f0:5f:e6:2a:1a:d0:ec:f7:d5:b2:55: 3d:c9:10:91:b7:7c:bf:53:4a:8a:30:f4:67:d2:f5: 44:39:4c:b7:5a:75:73:5a:2e:5f:25:63:86:ac:7e: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3C:7A:D9:55:18:65:73:16:DB:AC:5B:CB:84:F4:B7:05:F9:95:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:55:1e:3a:ff:6a:af:61:7a:17:89:91:05:ee:93:ee:a7:c0: 60:8d:4a:93:f1:c9:f2:06:b2:18:66:4a:0e:1a:dd:5f:c1:bc: 86:ba:37:40:36:b8:6d:9b:45:93:3c:30:b6:20:33:74:ea:d2: 86:73:e6:b0:71:06:3e:05:6b:06:05:29:8d:b5:a7:c3:9f:0a: e7:88:38:e9:63:ab:7d:8b:6c:9d:12:29:ae:c0:72:c1:30:b2: 2d:1b:20:7c:6f:03:9f:52:32:36:61:87:5d:85:14:89:2b:88: 4e:ce:1e:8d:4b:33:24:75:eb:6e:9e:5d:7d:a3:e7:6e:c8:97: ca:9a:61:18:24:69:0d:30:04:c5:02:c9:e6:cc:fb:ed:21:94: 48:a0:12:97:9f:c7:08:69:dd:1a:f0:0e:15:f2:eb:c1:ac:06: ac:fd:30:af:9d:4b:9f:f9:ca:38:9b:81:2e:b5:bf:7f:a0:76: 71:e5:88:58:48:b9:19:03:bd:51:9e:ef:db:12:61:b6:c3:19: 8a:22:6c:b0:6f:57:1d:59:18:11:12:3f:8e:5c:3d:26:f0:a5: 72:35:c2:47:52:7c:a8:e9:94:4e:fa:e8:1e:b7:3e:2c:d0:52: 87:a1:98:09:0d:0f:59:c8:57:8d:f9:31:6b:48:bd:ce:c1:4b: 80:f8:51:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7j3u05rbY5bl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk M2M5NmZlNTUtZTkyMS00NjAzLTlhMTQtZDU2ZGNjMzY1MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpgbH0pTJIsCpmwdltd8HLYXM9RaTDgbvnIH vJmizYJwz/5FeNDiBHo6wDS0ELEPDPFOiSOvsi58YAFUSUjhwsM5PzI9jNrFmL1V 8ckr1OnJmAzUx16n0OYZ9HkKuFR8QwfD3xjjIceEgUKTFe+vk6mw0ysTrvBGaoZg l9XVmHF4pdqIbNWKzkKBsDKAfl+D70sDlXz8AGCjUXIFh7Rx3YsnCkXRk4AlCNSl sf0a4AL5kF9dHcG0MYBeKOOPCH5d1gsY7D8lTjbzUECPxKvQxz8cQmIY8F/mKhrQ 7PfVslU9yRCRt3y/U0qKMPRn0vVEOUy3WnVzWi5fJWOGrH6XVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU8etlVGGVzFtusW8uE9LcF+ZVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM4OWRhODItN2MxMy0z NzhhLWJmYjItZjhmMWRlOTQwZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdVHjr/aq9heheJkQXuk+6nwGCNSpPxyfIGshhmSg4a3V/BvIa6N0A2 uG2bRZM8MLYgM3Tq0oZz5rBxBj4FawYFKY21p8OfCueIOOljq32LbJ0SKa7AcsEw si0bIHxvA59SMjZhh12FFIkriE7OHo1LMyR1626eXX2j527Il8qaYRgkaQ0wBMUC yebM++0hlEigEpefxwhp3RrwDhXy68GsBqz9MK+dS5/5yjibgS61v3+gdnHliFhI uRkDvVGe79sSYbbDGYoibLBvVx1ZGBESP45cPSbwpXI1wkdSfKjplE766B63PizQ UoehmAkND1nIV435MWtIvc7BS4D4UYE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:18 2025 by rpki-client