$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa File: 855c8377-458f-31fc-99a3-78f054769805.roa (raw, json) Hash identifier: vLolH6cgc1LbT83zrPYoeNCoD4sNlUlULVQfBWPGMfY= Subject key identifier: 2F:A3:56:2C:61:CE:CD:B4:F9:57:43:BB:A4:28:F4:DE:4A:90:10:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D143D7388C92BAED7C4CB2C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 104.29.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:73:88:c9:2b:ae:d7:c4:cb:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1a609761-eb32-488d-8b5d-50557828d2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:f5:96:8e:c0:47:92:55:c7:18:40:00:92: 5b:f4:24:da:bc:75:00:c4:ac:60:61:72:85:98:e6: 04:b9:96:d3:ab:26:9c:65:af:6c:4a:0c:d1:02:3f: 18:cc:03:d2:96:50:63:16:34:77:22:a6:b5:7a:ae: 83:b3:24:59:4c:6e:07:38:c5:0f:a1:f5:4a:0f:e9: 6b:10:fa:ae:89:17:2c:6d:a2:54:2d:2f:5a:c7:15: b7:1f:02:d4:eb:5c:f1:b4:dc:7b:29:d4:9e:02:26: 73:71:19:6d:84:7f:e5:3e:88:0b:46:31:42:08:d1: 4d:89:48:66:fc:58:a1:8b:76:21:51:66:70:f6:8b: d6:54:ef:b6:f3:bd:6d:6b:55:7b:b4:df:93:33:68: 5e:20:5e:35:9e:85:fa:54:b8:94:a9:9c:47:ef:4d: 5d:dc:22:b5:a1:e4:4a:eb:1f:18:f3:fb:ac:04:15: c5:29:4d:fe:3e:00:be:6e:bc:2b:bf:dc:57:b9:c1: 22:d1:d4:74:fd:9a:02:2b:a6:24:25:73:d4:e8:d7: b6:97:65:83:02:d9:30:b6:03:d4:28:e4:93:cc:7c: 09:7e:4a:22:d5:1e:07:08:a7:d1:54:2e:4a:1d:5f: 4c:83:02:9a:7a:70:92:42:c9:3f:66:27:1b:7f:3a: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A3:56:2C:61:CE:CD:B4:F9:57:43:BB:A4:28:F4:DE:4A:90:10:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/855c8377-458f-31fc-99a3-78f054769805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:36:4e:09:eb:75:e7:d7:4f:99:57:39:b6:9e:af:65:4a:b2: f4:b6:c2:7d:6e:bd:3b:5a:d3:58:74:60:75:05:4a:53:eb:6a: ab:1c:05:33:4a:ff:b3:8c:62:97:5c:a0:a4:7c:7e:bd:f8:5b: 16:8f:46:df:7c:9a:e8:cc:1c:f8:95:7e:68:e4:65:65:d8:74: 3e:93:5c:5a:92:f9:fb:b1:eb:16:ed:a2:5c:9a:94:02:2f:8c: c9:36:15:a2:0f:43:6c:e0:97:18:42:0b:0b:c7:74:a2:1e:15: 1a:19:03:1d:56:dd:c4:61:b1:2f:71:c0:f6:78:38:02:86:39: 9d:9b:92:63:54:9d:67:29:b7:51:f1:49:4b:18:23:52:d5:13: b4:51:6e:39:d3:db:df:af:a0:c1:37:fd:ae:e8:ad:d0:5d:f0: 6d:e3:21:e3:c7:43:03:0a:61:8a:8d:bd:56:cf:56:3e:5c:d7: 70:5d:d2:2f:d2:7d:61:a7:e8:4f:33:68:9e:5e:ba:96:d6:8d: 91:8a:ad:0a:64:c3:8a:89:82:07:a6:e0:cb:bb:69:d6:80:48: 75:ba:99:73:5d:15:2a:24:c2:0a:f7:e7:b4:0d:40:fe:0d:bf: 2c:0f:9e:9a:ec:a6:b5:43:d9:be:3a:4c:b2:42:48:69:53:2a: 7e:02:d1:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXOIySuu18TLLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWE2MDk3NjEtZWIzMi00ODhkLThiNWQtNTA1NTc4MjhkMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveD1lo7AR5JVxxhAAJJb9CTavHUAxKxgYXKF mOYEuZbTqyacZa9sSgzRAj8YzAPSllBjFjR3Iqa1eq6DsyRZTG4HOMUPofVKD+lr EPquiRcsbaJULS9axxW3HwLU61zxtNx7KdSeAiZzcRlthH/lPogLRjFCCNFNiUhm /Fihi3YhUWZw9ovWVO+2871ta1V7tN+TM2heIF41noX6VLiUqZxH701d3CK1oeRK 6x8Y8/usBBXFKU3+PgC+brwrv9xXucEi0dR0/ZoCK6YkJXPU6Ne2l2WDAtkwtgPU KOSTzHwJfkoi1R4HCKfRVC5KHV9MgwKaenCSQsk/Zicbfzpm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+jVixhzs20+VdDu6Qo9N5KkBA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODU1YzgzNzctNDU4Zi0z MWZjLTk5YTMtNzhmMDU0NzY5ODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg2TgnrdefXT5lXObaer2VKsvS2wn1uvTta01h0YHUFSlPraqscBTNK /7OMYpdcoKR8fr34WxaPRt98mujMHPiVfmjkZWXYdD6TXFqS+fux6xbtolyalAIv jMk2FaIPQ2zglxhCCwvHdKIeFRoZAx1W3cRhsS9xwPZ4OAKGOZ2bkmNUnWcpt1Hx SUsYI1LVE7RRbjnT29+voME3/a7ordBd8G3jIePHQwMKYYqNvVbPVj5c13Bd0i/S fWGn6E8zaJ5eupbWjZGKrQpkw4qJggem4Mu7adaASHW6mXNdFSokwgr357QNQP4N vywPnprsprVD2b46TLJCSGlTKn4C0U8= -----END CERTIFICATE-----Generated at Tue Mar 24 19:24:57 2026 by rpki-client