$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa File: 32ff085f-6bc9-3189-b388-01380caf0093.roa (raw, json) Hash identifier: QJot6B1WivevqG8LmM/q4jGj2RR0wPIoqJgmUpGXQSU= Subject key identifier: 73:1E:F1:29:71:DD:8B:7B:A8:A3:58:86:02:82:84:26:38:31:23:E4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876BC1D11096539101BA40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6b:c1:d1:10:96:53:91:01:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=9d152fa2-fa46-45d3-b0e3-cc124545e9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:ff:48:5a:92:f2:6d:3f:69:e5:56:d4:26: 30:3f:3e:0a:7f:4f:a2:df:d8:09:d2:02:52:54:fb: 1a:98:ae:1a:26:63:6d:c6:92:7a:5d:38:5b:11:f8: 6d:c4:9e:04:ef:b1:46:b7:6c:cd:dc:15:77:2e:f3: 01:ff:00:b8:c2:bd:5e:c6:83:e3:6d:f6:29:e7:12: 20:63:a5:f6:33:dd:91:9c:48:62:d6:e7:5a:39:72: 65:ac:9b:90:d3:b2:e5:73:9f:30:43:1f:3d:ec:c3: be:d5:ab:ca:b1:fe:98:fe:47:83:11:04:45:b5:89: 52:13:f2:8d:5a:ae:9c:74:5c:4c:89:bc:d0:61:c9: 17:38:2d:e7:4f:be:b5:bb:13:cf:55:6b:99:1e:f3: ce:be:73:47:6e:1d:56:97:9c:c9:75:68:8b:a0:08: 96:4f:bb:12:fc:96:aa:8e:b5:1f:47:d5:44:fb:b3: 26:64:a5:d7:87:0a:a0:ff:1c:c9:89:86:d0:49:07: 10:34:28:27:3e:eb:fb:3d:ee:e2:78:5c:0a:5f:c5: 97:fd:89:79:93:55:bd:a5:cc:49:a5:f3:6f:00:a4: 70:96:13:ae:9f:c7:d8:b6:41:7c:67:45:34:e4:32: 5b:2e:c7:fc:c9:ed:4d:69:da:d2:80:72:7b:e4:d8: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1E:F1:29:71:DD:8B:7B:A8:A3:58:86:02:82:84:26:38:31:23:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:40:3c:d8:7b:46:0e:13:9e:39:38:6a:73:2d:95:0e:c5:c5: f5:fc:3a:30:54:38:01:f9:82:2b:e1:80:1f:16:12:78:88:3b: bd:ac:d7:2e:89:f3:ac:bc:c4:fc:2d:f7:8a:66:f6:07:41:b1: 20:f3:53:ba:52:50:90:f0:3e:be:60:35:83:cd:98:da:00:7d: 77:a3:1b:08:33:09:26:68:5b:00:a4:56:60:3f:92:9c:4f:8f: 81:e8:9c:eb:77:8a:79:4e:9a:ad:dd:85:7d:79:56:fd:79:b1: b4:e5:82:1e:2e:46:b6:7b:dc:04:98:a6:ac:31:b8:38:0b:bc: 8a:e3:78:f6:d6:3d:9d:c8:8a:1c:a3:d5:2e:c0:fd:20:b3:31: 73:03:1c:18:2c:47:ff:cf:69:d6:ad:73:1f:51:4c:45:11:25: 6f:77:1c:fe:d5:5f:a8:c2:96:df:2c:91:77:cc:c0:5d:c2:d2: f2:96:0d:56:bb:4c:f9:ce:eb:d1:c8:fa:a1:ca:a1:17:ba:21: 69:f7:bc:2e:4d:24:e7:32:89:9e:c2:82:ee:6a:c1:81:02:5d: a0:49:94:2a:cb:15:07:cb:26:5b:0f:e1:64:92:07:e0:c4:8b: e3:ec:17:f9:33:b4:1e:7d:86:36:5e:f7:0f:fc:22:c3:81:f7: e9:45:1e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2vB0RCWU5EBukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OWQxNTJmYTItZmE0Ni00NWQzLWIwZTMtY2MxMjQ1NDVlOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojv/SFqS8m0/aeVW1CYwPz4Kf0+i39gJ0gJS VPsamK4aJmNtxpJ6XThbEfhtxJ4E77FGt2zN3BV3LvMB/wC4wr1exoPjbfYp5xIg Y6X2M92RnEhi1udaOXJlrJuQ07Llc58wQx897MO+1avKsf6Y/keDEQRFtYlSE/KN Wq6cdFxMibzQYckXOC3nT761uxPPVWuZHvPOvnNHbh1Wl5zJdWiLoAiWT7sS/Jaq jrUfR9VE+7MmZKXXhwqg/xzJiYbQSQcQNCgnPuv7Pe7ieFwKX8WX/Yl5k1W9pcxJ pfNvAKRwlhOun8fYtkF8Z0U05DJbLsf8ye1NadrSgHJ75NgzBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMe8Slx3Yt7qKNYhgKChCY4MSPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzJmZjA4NWYtNmJjOS0z MTg5LWIzODgtMDEzODBjYWYwMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhAPNh7Rg4Tnjk4anMtlQ7FxfX8OjBUOAH5givhgB8WEniIO72s1y6J 86y8xPwt94pm9gdBsSDzU7pSUJDwPr5gNYPNmNoAfXejGwgzCSZoWwCkVmA/kpxP j4HonOt3inlOmq3dhX15Vv15sbTlgh4uRrZ73ASYpqwxuDgLvIrjePbWPZ3Iihyj 1S7A/SCzMXMDHBgsR//Padatcx9RTEURJW93HP7VX6jClt8skXfMwF3C0vKWDVa7 TPnO69HI+qHKoRe6IWn3vC5NJOcyiZ7Cgu5qwYECXaBJlCrLFQfLJlsP4WSSB+DE i+PsF/kztB59hjZe9w/8IsOB9+lFHj8= -----END CERTIFICATE-----Generated at Tue Sep 22 17:52:15 2026 by rpki-client