$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa File: 723328e6-b34f-355a-9bf5-becd6010b5ea.roa (raw, json) Hash identifier: yA0V6uTjBRpiBOk3uOD+/Jhsa/cnqe5x1pKjnMyT6No= Subject key identifier: 5D:68:14:1F:39:EF:CF:A4:71:40:61:A7:93:FD:EF:F8:7E:0E:3A:ED Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD000A6D90FA339A1AAE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:00:0a:6d:90:fa:33:9a:1a:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=e1453f66-072f-4175-818c-0345df4ce15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:db:90:5a:4e:b9:11:7a:63:08:cd:02:29: 6e:d4:c4:01:41:cf:9c:ff:c0:50:25:e6:41:76:35: 39:d9:77:5a:ad:44:5a:10:33:db:47:b1:c7:af:9b: 71:57:ec:28:cd:6a:67:91:69:3b:f5:94:87:00:4a: e2:f9:1e:57:9b:51:20:3a:d8:96:bd:d7:7d:c0:ba: 7c:4c:b6:b4:41:de:05:58:54:37:a8:e3:3c:84:a5: 7e:d0:45:f8:21:cd:8c:6e:3a:48:d1:27:9e:2d:67: 7b:1f:4b:75:de:35:78:2f:b0:b3:6a:f3:7c:5f:90: 47:16:0e:8d:9d:9e:e5:f5:21:ae:d1:ab:d9:e6:57: 07:89:03:79:54:da:f9:e5:a3:cb:08:75:85:f1:9b: 5b:28:03:91:bd:f6:b0:00:e8:f1:d5:1c:e1:bd:2f: 43:d1:2a:3d:1e:46:21:7e:3c:61:65:a2:e2:5f:57: 3b:b6:0e:9e:bb:91:bb:96:c8:61:f6:1b:58:b1:01: a2:b7:fc:75:1f:d8:95:c7:8d:eb:ed:1f:ad:ee:8d: 8a:f2:da:31:1a:a3:c0:37:90:2f:c3:0a:ba:4b:e7: f9:6a:9e:58:18:b8:ce:d0:01:43:25:5b:ae:0f:a3: 5c:37:c2:f6:ba:bc:e4:57:53:73:04:be:a6:3a:ba: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:68:14:1F:39:EF:CF:A4:71:40:61:A7:93:FD:EF:F8:7E:0E:3A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/723328e6-b34f-355a-9bf5-becd6010b5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9a:c4:b1:a9:23:ed:81:10:d1:03:9e:33:76:a7:d3:d6:79: bb:4b:d5:38:11:a0:34:96:4f:e3:2b:63:51:c0:7d:22:19:2a: 46:ac:99:40:f2:cf:b1:02:b8:37:b2:e7:9f:33:d0:17:ce:11: 9f:e6:63:d4:43:47:5a:47:69:a7:94:b0:a6:e7:3f:c7:30:87: d4:ba:29:df:83:35:70:c9:2c:07:e5:bc:ff:84:d9:5d:a5:6e: 44:04:f3:dc:c0:c0:f0:18:ac:7b:03:3d:19:63:fe:ca:c6:ac: ae:8e:24:65:91:6e:3b:5c:8f:44:e1:cd:ea:9c:15:d2:b3:72: 5d:7c:ca:ef:6c:db:4a:eb:39:42:89:2f:03:22:47:7d:5a:c6: 84:81:e9:6b:54:a7:ef:28:84:a2:e4:53:b1:5b:f7:7e:85:0a: c7:12:bf:78:4a:6a:56:1b:c2:9c:14:93:f6:d1:9a:36:e8:21: c1:9c:78:48:e4:51:8a:e6:01:d9:54:c8:6a:ea:09:53:ab:4f: 78:29:9a:e9:d6:dd:99:5a:44:3c:7b:7b:2a:47:84:8e:64:5a: 14:f7:d8:34:86:f9:30:e3:65:4c:d8:06:4a:c7:4c:28:88:36: 3a:81:30:5c:0f:d8:9e:6b:1b:12:9c:d6:84:eb:d4:ec:22:ed: 6e:07:27:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQAKbZD6M5oaroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZTE0NTNmNjYtMDcyZi00MTc1LTgxOGMtMDM0NWRmNGNlMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd7bkFpOuRF6YwjNAilu1MQBQc+c/8BQJeZB djU52XdarURaEDPbR7HHr5txV+wozWpnkWk79ZSHAEri+R5Xm1EgOtiWvdd9wLp8 TLa0Qd4FWFQ3qOM8hKV+0EX4Ic2MbjpI0SeeLWd7H0t13jV4L7CzavN8X5BHFg6N nZ7l9SGu0avZ5lcHiQN5VNr55aPLCHWF8ZtbKAORvfawAOjx1RzhvS9D0So9HkYh fjxhZaLiX1c7tg6eu5G7lshh9htYsQGit/x1H9iVx43r7R+t7o2K8toxGqPAN5Av wwq6S+f5ap5YGLjO0AFDJVuuD6NcN8L2urzkV1NzBL6mOroGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1oFB8578+kcUBhp5P97/h+DjrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzIzMzI4ZTYtYjM0Zi0z NTVhLTliZjUtYmVjZDYwMTBiNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaaxLGpI+2BENEDnjN2p9PWebtL1TgRoDSWT+MrY1HAfSIZKkasmUDy z7ECuDey558z0BfOEZ/mY9RDR1pHaaeUsKbnP8cwh9S6Kd+DNXDJLAflvP+E2V2l bkQE89zAwPAYrHsDPRlj/srGrK6OJGWRbjtcj0ThzeqcFdKzcl18yu9s20rrOUKJ LwMiR31axoSB6WtUp+8ohKLkU7Fb936FCscSv3hKalYbwpwUk/bRmjboIcGceEjk UYrmAdlUyGrqCVOrT3gpmunW3ZlaRDx7eypHhI5kWhT32DSG+TDjZUzYBkrHTCiI NjqBMFwP2J5rGxKc1oTr1Owi7W4HJ7I= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:51 2025 by rpki-client