$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56ef0b0f-7315-31e3-8e00-298b0c522ce1.roa File: 56ef0b0f-7315-31e3-8e00-298b0c522ce1.roa (raw, json) Hash identifier: 5rlkwDr7dek7Zz4yjgcoZ4f7cAPmxVN7MoiVTpVw1YA= Subject key identifier: A8:B3:FC:54:81:1E:14:21:61:A6:D5:43:24:F2:72:41:F9:97:EB:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824B26FF126FBC0D6AE1300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56ef0b0f-7315-31e3-8e00-298b0c522ce1.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.29.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:b2:6f:f1:26:fb:c0:d6:ae:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=8cb51c9b-743e-4e4e-9f8c-8e7e613a4c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:fb:84:b7:1b:57:c6:09:f6:f5:68:1b:4d: 6f:fa:14:cd:24:30:74:8a:ec:f8:6c:07:2e:6f:e5: f5:1a:15:a1:2f:52:74:b4:99:fb:11:74:be:8c:c7: dd:f7:9a:4e:1c:45:56:d4:48:ad:53:26:52:82:f5: 4e:26:c8:ec:40:bc:36:c4:03:61:7a:38:c6:ed:03: af:04:bf:11:3f:84:cd:7e:81:8b:5c:32:a1:3f:a7: 29:c8:d0:a4:05:03:f1:33:9a:90:b9:90:e0:3e:0b: 62:85:a7:2f:44:1a:60:ad:04:40:68:09:5d:a1:e1: 11:83:60:34:0b:b0:00:2b:cd:d1:60:94:80:17:75: b9:92:6a:b0:9e:23:ab:da:bb:6c:7c:82:38:ec:38: 78:fb:4f:68:d2:c5:30:b5:23:9f:54:d5:3e:70:12: 7e:11:ab:8f:a4:35:63:02:58:1e:7d:6a:df:f8:3d: 4b:c6:4a:1c:db:65:1f:d5:2d:aa:36:8a:6f:cb:89: d3:76:38:d8:26:ac:62:e9:f0:20:ed:75:93:05:1a: e0:27:8d:a6:9f:1b:02:6e:36:d8:94:27:2f:09:61: 05:68:67:f5:06:ae:16:8b:f5:56:a9:26:52:45:f4: 07:e0:73:92:47:d0:c4:56:e1:0c:c2:d7:f3:7a:d0: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B3:FC:54:81:1E:14:21:61:A6:D5:43:24:F2:72:41:F9:97:EB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56ef0b0f-7315-31e3-8e00-298b0c522ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:85:8a:51:d4:d9:74:80:59:72:98:d3:ef:80:d9:91:64:6f: 7f:f2:4c:70:9e:9e:6b:2d:33:c9:a3:a2:11:7e:d4:07:fa:01: 72:11:ce:65:4f:0c:54:44:27:08:b9:06:b5:da:37:d7:20:22: 3d:01:3b:75:da:0a:ce:2e:8b:a7:6a:de:9e:6e:f8:e9:36:72: 76:16:41:5e:fc:6b:de:51:03:9d:61:54:4e:fc:5a:78:4c:bb: ad:ce:3e:5b:24:ec:36:f1:93:3f:3e:54:33:47:aa:74:42:c0: 78:de:10:3e:ce:35:c9:12:79:cd:b0:5a:d8:dd:76:7b:8a:f3: 09:5e:40:6f:bb:e2:67:09:6b:ae:66:71:a3:04:36:62:b2:bb: 82:fb:32:87:c8:c2:b3:46:43:1f:b2:9d:26:01:c8:be:27:96: b3:cd:fa:d0:3c:9b:90:a2:8f:6e:85:ab:69:ba:9f:2e:e5:d6: d0:db:da:ac:d1:50:87:94:b7:1b:40:27:9b:07:01:21:ec:0b: 63:7c:0f:16:b6:4c:25:83:94:97:7c:4b:d6:f1:a5:ef:08:fc: 63:d0:0a:77:87:89:e3:b8:13:ec:90:96:49:85:88:6f:d2:e6: 75:38:7e:f6:95:14:cf:64:a7:ec:f5:53:5e:ec:97:23:07:1a: 81:54:26:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLJv8Sb7wNauEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk OGNiNTFjOWItNzQzZS00ZTRlLTlmOGMtOGU3ZTYxM2E0Yzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDT7hLcbV8YJ9vVoG01v+hTNJDB0iuz4bAcu b+X1GhWhL1J0tJn7EXS+jMfd95pOHEVW1EitUyZSgvVOJsjsQLw2xANhejjG7QOv BL8RP4TNfoGLXDKhP6cpyNCkBQPxM5qQuZDgPgtihacvRBpgrQRAaAldoeERg2A0 C7AAK83RYJSAF3W5kmqwniOr2rtsfII47Dh4+09o0sUwtSOfVNU+cBJ+EauPpDVj AlgefWrf+D1Lxkoc22Uf1S2qNopvy4nTdjjYJqxi6fAg7XWTBRrgJ42mnxsCbjbY lCcvCWEFaGf1Bq4Wi/VWqSZSRfQH4HOSR9DEVuEMwtfzetC15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiz/FSBHhQhYabVQyTyckH5l+sKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTZlZjBiMGYtNzMxNS0z MWUzLThlMDAtMjk4YjBjNTIyY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmFilHU2XSAWXKY0++A2ZFkb3/yTHCenmstM8mjohF+1Af6AXIRzmVP DFREJwi5BrXaN9cgIj0BO3XaCs4ui6dq3p5u+Ok2cnYWQV78a95RA51hVE78WnhM u63OPlsk7Dbxkz8+VDNHqnRCwHjeED7ONckSec2wWtjddnuK8wleQG+74mcJa65m caMENmKyu4L7MofIwrNGQx+ynSYByL4nlrPN+tA8m5Cij26Fq2m6ny7l1tDb2qzR UIeUtxtAJ5sHASHsC2N8Dxa2TCWDlJd8S9bxpe8I/GPQCneHieO4E+yQlkmFiG/S 5nU4fvaVFM9kp+z1U17slyMHGoFUJsM= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:54 2026 by rpki-client