$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa File: 47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa (raw, json) Hash identifier: rsbv4zk9DOQYi4FRwcdjxP+/6Qykgto+fwHNmCNCKsc= Subject key identifier: 40:5B:80:B6:DE:0A:0C:C8:F0:61:83:82:3B:FA:F5:3E:7B:3F:69:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFDBA76E1FD761F970300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fd:ba:76:e1:fd:76:1f:97:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=068e5bb3-865b-498e-ae03-e628505233f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:88:f0:22:19:4e:c4:3a:77:77:20:41:5a: 09:f5:87:1d:29:99:f8:89:8e:1f:55:3b:ae:a2:37: 05:c1:fe:29:46:f1:13:cc:d2:b8:46:73:53:56:e7: d1:8c:4d:40:0f:ae:7c:72:91:e7:db:8c:9f:09:aa: 19:2d:32:9a:e0:0d:40:73:71:90:5b:fb:b7:b0:da: a9:93:b4:84:8b:dd:df:63:c2:13:64:32:74:3d:90: 9d:59:ef:27:ce:27:09:d1:fb:c7:13:c4:65:af:b9: 74:21:6c:36:d6:04:7c:36:02:cc:00:e3:61:0f:50: 27:f9:7b:9d:f4:ed:ef:75:a3:77:17:49:c8:35:c4: b9:7c:64:6a:ce:24:38:32:fe:cc:0b:2e:54:e3:b9: 58:bf:12:fd:a9:d1:f4:dd:19:3e:33:64:34:31:3e: 9c:e1:0f:7c:fa:89:95:55:6b:6b:df:c9:e1:83:3c: d5:98:02:45:4b:94:65:b4:36:fa:31:14:0d:17:2e: b0:de:33:3a:a3:48:9d:3c:12:f4:35:fe:7b:54:de: f4:3a:67:62:9c:4b:cc:7d:5a:22:6b:89:74:47:29: c8:7b:80:0e:48:ed:54:bd:1f:ef:d6:b4:57:ad:77: f5:43:da:f5:7a:8d:0a:ee:2a:18:ca:f9:b0:a5:af: 61:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5B:80:B6:DE:0A:0C:C8:F0:61:83:82:3B:FA:F5:3E:7B:3F:69:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ba:86:fb:db:85:c2:b1:0d:6e:66:45:53:65:a0:99:8d:3b: 19:00:49:81:4e:ad:73:6d:52:68:bd:96:11:e2:8e:80:74:d9: 59:b9:0f:a6:16:e7:18:a9:64:d6:71:90:05:79:e1:a3:dc:06: 80:6c:62:15:e4:2c:52:b7:4e:c6:21:2c:37:55:5b:9d:99:7b: 82:65:da:31:52:fd:07:c0:d9:d6:ac:4a:fe:d7:d7:06:13:16: 73:2b:10:a9:4e:9b:cf:e0:14:17:a4:58:3c:4d:e2:22:88:a0: b4:d9:cd:4e:1c:86:e3:a2:4c:6c:03:30:5d:75:46:44:c9:7b: 3a:66:fd:f5:17:ca:b9:0a:9b:5e:a2:41:d0:54:c6:b2:e8:7d: 97:6d:1f:6d:27:06:ce:2c:07:1d:f5:a1:84:2a:dc:46:27:05: af:67:17:17:6e:dc:41:f2:75:be:e0:4b:3a:04:60:d6:9b:15: d8:19:65:b6:00:eb:59:f5:18:9a:a1:dc:18:32:a0:29:64:d5: 5a:f9:b9:10:42:5b:14:aa:84:dd:f1:b4:a8:f0:19:97:be:00: 61:ae:7c:e1:62:f7:57:d4:8d:43:a3:e7:ef:ca:3e:08:16:93: 28:5a:9f:a3:84:ec:17:0d:23:6b:a4:78:f8:84:18:fb:fa:12: 5f:5a:f4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP26duH9dh+XAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MDY4ZTViYjMtODY1Yi00OThlLWFlMDMtZTYyODUwNTIzM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HiI8CIZTsQ6d3cgQVoJ9YcdKZn4iY4fVTuu ojcFwf4pRvETzNK4RnNTVufRjE1AD658cpHn24yfCaoZLTKa4A1Ac3GQW/u3sNqp k7SEi93fY8ITZDJ0PZCdWe8nzicJ0fvHE8Rlr7l0IWw21gR8NgLMAONhD1An+Xud 9O3vdaN3F0nINcS5fGRqziQ4Mv7MCy5U47lYvxL9qdH03Rk+M2Q0MT6c4Q98+omV VWtr38nhgzzVmAJFS5RltDb6MRQNFy6w3jM6o0idPBL0Nf57VN70OmdinEvMfVoi a4l0RynIe4AOSO1UvR/v1rRXrXf1Q9r1eo0K7ioYyvmwpa9hVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBbgLbeCgzI8GGDgjv69T57P2lvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDdjOWM1YWUtYzJiMy0z ZDYxLTliYTEtYjc2NmY3MzBmM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH26hvvbhcKxDW5mRVNloJmNOxkASYFOrXNtUmi9lhHijoB02Vm5D6YW 5xipZNZxkAV54aPcBoBsYhXkLFK3TsYhLDdVW52Ze4Jl2jFS/QfA2dasSv7X1wYT FnMrEKlOm8/gFBekWDxN4iKIoLTZzU4chuOiTGwDMF11RkTJezpm/fUXyrkKm16i QdBUxrLofZdtH20nBs4sBx31oYQq3EYnBa9nFxdu3EHydb7gSzoEYNabFdgZZbYA 61n1GJqh3BgyoClk1Vr5uRBCWxSqhN3xtKjwGZe+AGGufOFi91fUjUOj5+/KPggW kyhan6OE7BcNI2ukePiEGPv6El9a9Ek= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:22 2025 by rpki-client