$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68172c21-fc0b-360f-9222-5fd95bff5634.roa File: 68172c21-fc0b-360f-9222-5fd95bff5634.roa (raw, json) Hash identifier: +gP85K/Ovk0eppFkIJfj9tC+qyaLoupQ+fBiPjtKPLM= Subject key identifier: 34:39:D4:73:98:3C:93:3F:78:F3:1B:60:66:48:A2:1F:13:46:5E:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0F27EA14A51CC354A640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68172c21-fc0b-360f-9222-5fd95bff5634.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0f:27:ea:14:a5:1c:c3:54:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=388071a1-23d8-403d-a132-e7ae9bbabdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d8:5b:20:d0:bf:c4:e3:e0:c4:4f:1e:14:e8: ea:7d:3b:cf:3d:df:4c:70:a1:bd:a8:7d:ce:09:9b: e5:ff:1e:86:8a:39:86:5c:4c:a6:1b:a4:5d:a1:8b: e5:ac:46:e7:f3:8e:e6:60:47:f2:71:8e:6a:14:c1: 34:8e:3b:33:48:42:35:e3:34:9d:fa:30:24:c3:1d: dc:48:f6:e9:9f:80:70:43:3c:87:45:6c:3e:cc:38: 12:07:38:03:2c:d8:dd:3c:62:6b:5f:92:83:cc:e5: b5:0d:a3:d8:ca:18:e6:a5:ef:72:f2:a3:d5:e5:28: 53:e2:fd:c3:5f:51:3f:0c:a6:b5:8d:aa:ca:eb:a1: 1b:18:70:3d:9a:df:3d:00:85:44:bc:a6:ec:bc:2d: 8c:d9:e3:dd:1e:1e:cc:c7:41:64:9c:31:65:8e:05: e6:e7:0c:cc:35:90:53:5e:6d:53:40:b3:07:74:b5: d9:56:e9:b1:c5:3e:3a:4b:cf:0d:60:7b:e8:44:8f: 8f:24:b8:f8:80:e1:77:29:7d:d7:16:9e:a4:5a:65: fc:8a:10:41:0e:23:b1:88:f8:3b:a9:ef:9d:cf:08: 23:81:79:5f:4d:20:8d:63:ac:fc:30:5d:4d:9d:7c: 27:dd:eb:ab:73:ef:05:30:a0:5f:5c:af:db:f3:e4: 66:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:D4:73:98:3C:93:3F:78:F3:1B:60:66:48:A2:1F:13:46:5E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68172c21-fc0b-360f-9222-5fd95bff5634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:df:a4:3b:a2:6d:57:4d:0a:7d:35:10:9b:64:25:50:1a:4f: b6:f3:91:3b:12:33:23:3b:89:d7:68:28:27:78:d6:77:a2:29: f5:be:c9:78:81:0a:d9:1c:1a:a5:57:23:f0:58:54:f1:f7:67: 66:fc:40:81:2b:83:78:02:b4:b5:01:9a:7b:13:d1:1f:af:a0: db:43:fb:f2:62:45:5b:33:f5:e0:61:8b:b8:44:06:fe:5b:d9: cf:0c:0b:90:53:14:eb:29:b0:0d:2c:8b:52:c2:fb:60:f1:11: b2:5d:8e:81:ca:f8:61:b5:7c:63:52:57:e4:f9:3b:31:ad:39: a4:56:0c:45:90:a4:49:f7:fb:ac:ec:73:76:66:cf:ef:76:27: b8:06:1f:5c:9e:50:39:33:0b:c8:db:c9:78:e5:29:a7:df:6a: 8e:87:85:38:09:51:36:b9:ee:5b:58:04:6e:02:bc:8e:d8:2e: 07:cc:46:fa:eb:70:6e:59:51:40:17:32:ae:0b:f7:89:8f:00: a9:85:a0:0f:75:05:19:ad:40:a6:a2:dc:94:6a:25:1d:44:85: da:29:ce:10:f3:b6:20:cd:89:40:71:6e:93:d2:54:35:91:fa: d7:21:75:6b:3d:6f:68:aa:ff:da:4c:66:01:fa:57:03:e6:64: a3:12:77:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQ8n6hSlHMNUpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Mzg4MDcxYTEtMjNkOC00MDNkLWExMzItZTdhZTliYmFiZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNhbINC/xOPgxE8eFOjqfTvPPd9McKG9qH3O CZvl/x6GijmGXEymG6RdoYvlrEbn847mYEfycY5qFME0jjszSEI14zSd+jAkwx3c SPbpn4BwQzyHRWw+zDgSBzgDLNjdPGJrX5KDzOW1DaPYyhjmpe9y8qPV5ShT4v3D X1E/DKa1jarK66EbGHA9mt89AIVEvKbsvC2M2ePdHh7Mx0FknDFljgXm5wzMNZBT Xm1TQLMHdLXZVumxxT46S88NYHvoRI+PJLj4gOF3KX3XFp6kWmX8ihBBDiOxiPg7 qe+dzwgjgXlfTSCNY6z8MF1NnXwn3eurc+8FMKBfXK/b8+RmfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ51HOYPJM/ePMbYGZIoh8TRl5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjgxNzJjMjEtZmMwYi0z NjBmLTkyMjItNWZkOTViZmY1NjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrfpDuibVdNCn01EJtkJVAaT7bzkTsSMyM7iddoKCd41neiKfW+yXiB CtkcGqVXI/BYVPH3Z2b8QIErg3gCtLUBmnsT0R+voNtD+/JiRVsz9eBhi7hEBv5b 2c8MC5BTFOspsA0si1LC+2DxEbJdjoHK+GG1fGNSV+T5OzGtOaRWDEWQpEn3+6zs c3Zmz+92J7gGH1yeUDkzC8jbyXjlKaffao6HhTgJUTa57ltYBG4CvI7YLgfMRvrr cG5ZUUAXMq4L94mPAKmFoA91BRmtQKai3JRqJR1EhdopzhDztiDNiUBxbpPSVDWR +tchdWs9b2iq/9pMZgH6VwPmZKMSdy0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:46 2025 by rpki-client