$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d5f925d-ac62-32aa-b6c2-254104032d13.roa File: 7d5f925d-ac62-32aa-b6c2-254104032d13.roa (raw, json) Hash identifier: IIJfPHPv7AJ26cQMXddTlN6kpvFI33SmL5LoXP+OZWk= Subject key identifier: BC:E4:14:8C:0D:6C:85:B2:10:A9:43:52:09:D6:5E:53:88:02:49:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8DD88157E65C83E6E509CF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d5f925d-ac62-32aa-b6c2-254104032d13.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 104.29.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:81:57:e6:5c:83:e6:e5:09:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=db30b424-741c-4086-9ad8-fc1b212216c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:b3:a7:ab:74:2a:52:24:ff:59:1c:ef:f8: 24:5a:6b:1c:04:f2:87:91:cf:80:ca:c3:d4:51:62: c0:32:52:1e:b4:f1:a9:eb:6d:75:83:27:1e:8f:89: 4a:a1:55:7f:64:79:80:a7:c2:dc:e0:2e:58:e5:8f: 08:48:d3:40:74:86:f6:d3:a6:0e:58:d3:bc:fe:82: 7e:5c:ce:65:90:10:cd:05:2e:76:e5:68:45:77:5a: a9:9f:25:a8:af:d7:86:28:f0:2a:b0:17:cb:28:cb: 3d:12:eb:5d:f6:ea:0d:3f:b4:c1:a4:16:51:e0:7d: 52:12:6c:1b:39:58:dd:75:e9:3c:64:95:ae:5a:16: 06:f2:b0:5a:ef:3c:70:92:73:53:44:91:ad:0f:c3: 93:e8:f5:07:81:d6:c6:be:f2:07:2e:b6:9f:78:90: d7:0f:cf:c0:9e:69:0f:17:b8:ac:0c:9d:4c:d8:d9: bd:c6:9c:00:46:c5:ea:fc:ea:d0:cf:60:10:eb:e5: f5:98:56:b9:b1:b9:6b:99:d4:a1:45:bb:e9:f2:b0: 11:ba:ed:a5:ed:35:35:7d:d9:48:ca:13:2b:30:3e: ca:ea:f7:fe:43:3a:5f:58:b7:6a:a1:69:7a:cc:b1: 86:51:80:0a:3c:ab:0d:4e:f0:02:47:8e:de:78:aa: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E4:14:8C:0D:6C:85:B2:10:A9:43:52:09:D6:5E:53:88:02:49:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d5f925d-ac62-32aa-b6c2-254104032d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:94:cb:1c:7b:f9:4d:df:f7:40:75:53:ef:a3:52:38:5c:7f: 04:37:cc:ff:28:94:41:49:7e:b5:60:a5:ee:39:29:69:95:0f: da:65:05:d3:75:20:ec:58:73:52:e4:7d:41:af:41:dc:03:31: e3:1a:1e:f4:53:2d:6c:f6:83:e3:98:1e:bc:a2:86:5f:9c:32: 94:82:d3:07:67:17:ec:e4:2d:c0:72:69:7c:ee:8d:11:82:80: 95:b0:e0:1d:6b:9f:cc:ec:d7:42:58:d9:f1:d3:df:f7:19:77: ba:63:71:46:26:c1:e9:77:c2:a2:64:56:5e:2b:2f:e8:12:46: 7d:67:94:0e:05:15:04:c6:e6:80:e6:12:e2:ec:7e:ec:9f:47: ef:d2:0b:41:3d:98:0b:10:35:32:ec:16:ce:ce:0a:ba:72:1d: a7:c9:a2:dc:9e:52:d5:25:71:a4:04:38:22:06:75:bc:1f:5d: 71:00:3c:ee:72:c7:34:cf:31:de:8a:4a:b4:f4:d4:7c:ee:03: ad:49:6d:4c:1a:9b:16:62:7c:5d:2f:4c:4e:42:db:a0:88:00: 2e:52:8a:55:b4:d6:2b:f8:48:d1:55:47:27:bd:c8:83:2f:25: 28:52:e6:09:25:fc:c2:77:2d:de:52:e2:a9:f7:f3:e0:9e:2f: 83:8b:e9:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2IFX5lyD5uUJz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZGIzMGI0MjQtNzQxYy00MDg2LTlhZDgtZmMxYjIxMjIxNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntqzp6t0KlIk/1kc7/gkWmscBPKHkc+AysPU UWLAMlIetPGp6211gycej4lKoVV/ZHmAp8Lc4C5Y5Y8ISNNAdIb206YOWNO8/oJ+ XM5lkBDNBS525WhFd1qpnyWor9eGKPAqsBfLKMs9Eutd9uoNP7TBpBZR4H1SEmwb OVjddek8ZJWuWhYG8rBa7zxwknNTRJGtD8OT6PUHgdbGvvIHLrafeJDXD8/AnmkP F7isDJ1M2Nm9xpwARsXq/OrQz2AQ6+X1mFa5sblrmdShRbvp8rARuu2l7TU1fdlI yhMrMD7K6vf+QzpfWLdqoWl6zLGGUYAKPKsNTvACR47eeKpqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzkFIwNbIWyEKlDUgnWXlOIAkndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2Q1ZjkyNWQtYWM2Mi0z MmFhLWI2YzItMjU0MTA0MDMyZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWUyxx7+U3f90B1U++jUjhcfwQ3zP8olEFJfrVgpe45KWmVD9plBdN1 IOxYc1LkfUGvQdwDMeMaHvRTLWz2g+OYHryihl+cMpSC0wdnF+zkLcByaXzujRGC gJWw4B1rn8zs10JY2fHT3/cZd7pjcUYmwel3wqJkVl4rL+gSRn1nlA4FFQTG5oDm EuLsfuyfR+/SC0E9mAsQNTLsFs7OCrpyHafJotyeUtUlcaQEOCIGdbwfXXEAPO5y xzTPMd6KSrT01HzuA61JbUwamxZifF0vTE5C26CIAC5SilW01iv4SNFVRye9yIMv JShS5gkl/MJ3Ld5S4qn38+CeL4OL6es= -----END CERTIFICATE-----Generated at Mon Oct 19 22:28:40 2026 by rpki-client