$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa File: 3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa (raw, json) Hash identifier: fIDLUha0ELYHsROIMH8HixMAi5AtPg8S4FRqOFLX1dc= Subject key identifier: BA:C0:86:AF:9E:E3:85:39:43:12:BA:C3:51:4A:AC:59:F5:C1:FF:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877E4E9E1728A4B92993A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7e:4e:9e:17:28:a4:b9:29:93:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=fcea89f7-c44b-454f-ae9c-e3bb0c791517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:f4:e2:27:2e:89:e8:3e:d8:4d:bd:d4:b3: 1a:71:31:d0:5f:28:97:fe:bc:6b:e6:84:cb:a8:d7: 81:95:35:7d:8e:3b:ea:84:66:29:85:96:ca:f0:f0: f5:4c:76:11:85:a4:16:36:9a:8b:b9:c5:20:9d:51: a9:53:be:c3:44:8b:ec:83:10:2b:d3:a7:97:df:19: 8b:e7:1b:89:de:41:7b:cd:ef:ce:3f:b1:3e:72:b0: 9c:98:ce:d9:10:d3:24:84:1a:a5:62:b2:20:34:77: ea:cb:16:0c:a5:f3:15:73:e0:69:1a:06:1c:c7:1a: 23:02:3a:50:a2:27:b4:d0:75:83:21:97:ee:5b:0d: eb:24:9d:05:a7:5f:6d:81:26:a2:4c:49:a1:58:31: 5c:1f:59:06:37:d0:ea:74:17:99:be:60:8f:18:72: 6c:f3:40:56:2b:e8:51:8c:b2:8c:52:73:f9:5c:93: 87:c5:b6:40:4b:b0:42:7b:f0:dd:a6:6a:35:8d:9d: 19:7b:15:8e:c9:03:b1:d4:42:3d:de:5e:b6:94:c0: 18:76:d2:e1:77:8b:b0:b6:ee:55:a5:39:4b:75:85: f7:42:bc:5d:f8:f7:05:30:25:ee:ef:96:1e:5c:9d: 8a:4f:b7:29:11:cf:af:dc:98:dd:50:b8:30:73:e1: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C0:86:AF:9E:E3:85:39:43:12:BA:C3:51:4A:AC:59:F5:C1:FF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d8757f8-661c-3b5d-b5b0-edcd97c04bc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:85:52:f4:5d:03:9d:22:01:fb:00:ab:68:2e:f4:fc:62:ab: dd:f0:ed:69:b7:3e:b8:ad:a7:01:79:02:d2:09:99:a3:b1:a8: 3d:6a:32:95:31:55:8c:2e:2d:6b:0e:38:79:b4:a4:fc:48:a7: 0d:c9:29:4c:3d:24:4c:23:d2:6b:05:65:97:81:d0:5b:ea:8f: fc:da:46:12:36:bd:e0:79:33:4f:9e:75:eb:b9:e2:3d:c8:64: b6:3c:7f:ad:c4:2e:e0:fe:e7:c6:8f:2e:ee:68:7d:b8:ba:53: 42:67:29:53:ac:94:13:9c:9e:ba:dc:44:31:bd:da:8c:54:4e: 20:da:dc:83:6d:a9:09:94:3e:a3:49:51:25:cc:8e:05:f5:8e: 97:fe:0c:dc:94:be:85:7d:79:da:7f:b8:ad:1c:18:65:4e:2a: d9:6a:ac:d0:af:55:4d:2f:2f:ac:d6:03:8d:69:d6:74:59:ac: 5c:86:fe:a2:3b:cf:b7:60:04:24:27:2e:3d:08:58:6f:53:2a: 04:5c:90:7f:61:f7:9d:3c:a4:05:94:39:73:43:fd:89:f4:eb: 0b:0f:0c:c1:8b:d4:f1:d7:63:35:22:c1:af:77:90:ed:47:a1: c1:96:1a:4e:8d:03:c3:a5:9e:27:c3:7f:e9:d5:a3:f1:64:a4: 9a:89:19:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh35OnhcopLkpk6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmNlYTg5ZjctYzQ0Yi00NTRmLWFlOWMtZTNiYjBjNzkxNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4b04icuieg+2E291LMacTHQXyiX/rxr5oTL qNeBlTV9jjvqhGYphZbK8PD1THYRhaQWNpqLucUgnVGpU77DRIvsgxAr06eX3xmL 5xuJ3kF7ze/OP7E+crCcmM7ZENMkhBqlYrIgNHfqyxYMpfMVc+BpGgYcxxojAjpQ oie00HWDIZfuWw3rJJ0Fp19tgSaiTEmhWDFcH1kGN9DqdBeZvmCPGHJs80BWK+hR jLKMUnP5XJOHxbZAS7BCe/Ddpmo1jZ0ZexWOyQOx1EI93l62lMAYdtLhd4uwtu5V pTlLdYX3Qrxd+PcFMCXu75YeXJ2KT7cpEc+v3JjdULgwc+Gh2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrAhq+e44U5QxK6w1FKrFn1wf/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2Q4NzU3ZjgtNjYxYy0z YjVkLWI1YjAtZWRjZDk3YzA0YmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaFUvRdA50iAfsAq2gu9Pxiq93w7Wm3PritpwF5AtIJmaOxqD1qMpUx VYwuLWsOOHm0pPxIpw3JKUw9JEwj0msFZZeB0Fvqj/zaRhI2veB5M0+edeu54j3I ZLY8f63ELuD+58aPLu5ofbi6U0JnKVOslBOcnrrcRDG92oxUTiDa3INtqQmUPqNJ USXMjgX1jpf+DNyUvoV9edp/uK0cGGVOKtlqrNCvVU0vL6zWA41p1nRZrFyG/qI7 z7dgBCQnLj0IWG9TKgRckH9h9508pAWUOXND/Yn06wsPDMGL1PHXYzUiwa93kO1H ocGWGk6NA8OlnifDf+nVo/FkpJqJGX8= -----END CERTIFICATE-----Generated at Tue Sep 22 06:08:47 2026 by rpki-client