$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/371e585c-cf3a-3fd5-b36e-6faca7eccab9.roa File: 371e585c-cf3a-3fd5-b36e-6faca7eccab9.roa (raw, json) Hash identifier: 86Jt9FZitMLBt7JhIpr+IMpEtNRFeaMPYxKY35ZFuII= Subject key identifier: 5F:D2:C3:2E:B6:B7:3E:B6:E3:3F:FC:3C:24:F8:8E:54:E0:20:E1:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFAC8EFB270E6B9CEE880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/371e585c-cf3a-3fd5-b36e-6faca7eccab9.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fa:c8:ef:b2:70:e6:b9:ce:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=1f65405d-6900-4aec-bad5-129fc61d77cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:8a:cd:b0:aa:f4:9a:52:1d:b1:a0:d3:de: cc:f5:fc:d7:0c:59:67:a8:f8:cc:3f:e5:d3:dc:17: f6:8d:d4:ee:53:a7:3a:f8:24:bd:91:37:5c:84:3e: 74:46:e4:3e:5f:d5:48:6f:2f:53:c5:37:82:09:a6: 29:f2:44:1a:98:81:41:1d:2d:f1:5e:f2:99:5b:25: d7:60:44:26:df:1c:de:b9:97:0c:78:45:b8:be:7d: c3:6d:8f:10:a3:96:b2:50:ab:3b:ae:fd:65:00:94: 96:b1:6f:e3:ae:01:e1:f7:66:88:e9:3a:55:f4:72: 53:d6:08:34:cb:91:f2:12:66:d7:66:59:e6:da:73: 06:f4:2d:5d:aa:f1:ee:99:c0:f2:e6:8d:0d:ee:e4: 56:36:62:45:a2:21:12:fa:60:9e:4a:83:7b:79:4e: 03:be:94:10:05:90:1d:b1:70:d0:87:12:64:ab:5b: 95:4e:25:d4:38:d7:3f:fb:7b:07:ab:f6:3f:12:ad: 28:6c:8a:d8:90:41:f8:74:78:7d:c1:5b:77:75:5b: 6e:4e:3f:21:a1:f2:52:43:f8:d4:df:2a:62:24:7c: 98:4b:f0:f3:46:77:93:b2:b7:4d:41:76:57:21:63: b8:d7:3b:89:30:45:1c:4f:9b:33:9d:66:39:b9:d0: 77:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D2:C3:2E:B6:B7:3E:B6:E3:3F:FC:3C:24:F8:8E:54:E0:20:E1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/371e585c-cf3a-3fd5-b36e-6faca7eccab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:ec:a4:e4:96:95:c9:32:41:9d:4f:2b:d4:b0:56:33:89:d9: 32:b0:8c:46:37:db:42:57:67:0f:a2:62:ca:0c:69:7c:d3:ce: c0:53:cd:06:3c:6b:e9:93:4b:a3:22:6f:0f:b8:bb:30:e7:50: e8:f1:13:ea:cf:c3:1d:9b:10:ec:48:93:ab:6c:18:c2:dd:13: 65:f9:56:5e:a5:d1:bc:80:51:37:25:a5:04:a5:89:22:78:72: b6:15:80:d9:75:d8:56:f3:94:a7:75:e0:de:8c:e6:a1:bf:eb: 14:9b:9c:9c:e8:16:94:dd:d0:03:f2:00:f0:aa:29:7f:dc:4b: b1:b1:7e:fc:c4:b0:30:b1:b5:a6:b4:48:e7:29:8e:d5:6e:e4: dc:dc:ed:5c:b7:7d:a2:45:46:90:31:c2:ac:5b:f4:0b:0b:5b: e0:8c:a2:d1:ef:b6:d8:09:55:cc:ed:7a:81:63:bb:e8:57:4a: 73:3d:af:a0:0b:c6:2c:94:5c:53:f3:fb:16:cb:7a:d2:26:47: 10:3c:99:44:8f:4e:b2:b1:84:a8:77:6b:65:ff:0d:ff:ae:0b: ab:b3:51:de:d4:9c:1d:ed:7a:2b:55:38:19:f0:92:67:b1:93: f8:09:f0:d1:33:35:84:e3:40:57:75:0b:20:07:cc:65:d9:33: 8e:52:19:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPrI77Jw5rnO6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MWY2NTQwNWQtNjkwMC00YWVjLWJhZDUtMTI5ZmM2MWQ3N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9GKzbCq9JpSHbGg097M9fzXDFlnqPjMP+XT 3Bf2jdTuU6c6+CS9kTdchD50RuQ+X9VIby9TxTeCCaYp8kQamIFBHS3xXvKZWyXX YEQm3xzeuZcMeEW4vn3DbY8Qo5ayUKs7rv1lAJSWsW/jrgHh92aI6TpV9HJT1gg0 y5HyEmbXZlnm2nMG9C1dqvHumcDy5o0N7uRWNmJFoiES+mCeSoN7eU4DvpQQBZAd sXDQhxJkq1uVTiXUONc/+3sHq/Y/Eq0obIrYkEH4dHh9wVt3dVtuTj8hofJSQ/jU 3ypiJHyYS/DzRneTsrdNQXZXIWO41zuJMEUcT5sznWY5udB3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/Swy62tz624z/8PCT4jlTgIOFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzcxZTU4NWMtY2YzYS0z ZmQ1LWIzNmUtNmZhY2E3ZWNjYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTspOSWlckyQZ1PK9SwVjOJ2TKwjEY320JXZw+iYsoMaXzTzsBTzQY8 a+mTS6Mibw+4uzDnUOjxE+rPwx2bEOxIk6tsGMLdE2X5Vl6l0byAUTclpQSliSJ4 crYVgNl12FbzlKd14N6M5qG/6xSbnJzoFpTd0APyAPCqKX/cS7GxfvzEsDCxtaa0 SOcpjtVu5Nzc7Vy3faJFRpAxwqxb9AsLW+CMotHvttgJVczteoFju+hXSnM9r6AL xiyUXFPz+xbLetImRxA8mUSPTrKxhKh3a2X/Df+uC6uzUd7UnB3teitVOBnwkmex k/gJ8NEzNYTjQFd1CyAHzGXZM45SGQw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:50 2025 by rpki-client