$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88d90614-12a2-3669-99b2-5258da6f0589.roa File: 88d90614-12a2-3669-99b2-5258da6f0589.roa (raw, json) Hash identifier: BQ39jr5AJoVGdwylRL2E6XBdA1L332iexhbvzHxK7HA= Subject key identifier: DF:0B:44:11:22:E9:59:B8:83:78:23:04:D2:3C:9E:F1:03:E1:2E:1E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0B80C867629221F55DF0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88d90614-12a2-3669-99b2-5258da6f0589.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0b:80:c8:67:62:92:21:f5:5d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=8f1e5512-b3ca-469a-854c-3c366e02e3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:b4:53:9e:ef:3c:bd:94:7a:8d:eb:4e:98: 49:3b:f2:59:95:bf:d6:48:19:8e:e4:81:54:9e:56: 62:52:66:dc:0a:fa:07:ac:ff:e1:62:7b:8b:2b:11: 7a:04:c2:65:6f:bb:24:fb:a5:58:a5:c4:92:06:6c: 46:57:6e:8c:72:7c:57:dd:6a:23:de:e5:69:56:ea: 0d:ae:2f:35:23:ea:c2:01:e2:38:35:8c:83:7c:b8: 33:ce:63:76:cb:9b:40:b2:d8:10:c9:87:77:5e:69: 5f:a7:73:bb:5a:8b:71:19:87:1c:d8:97:33:f2:08: 03:89:78:c9:db:a3:07:25:db:a7:a4:88:81:2d:ec: 08:46:f3:fe:6b:a6:d2:ee:90:1d:dd:73:b7:fc:9e: d5:96:66:71:6f:70:ea:4a:48:a7:9c:bb:c5:91:4e: 19:39:6a:81:ad:76:95:f7:86:73:77:a3:12:8d:b3: 83:10:bc:8d:25:5d:88:d2:48:b1:6f:0f:fb:cf:ff: a0:d2:3a:50:24:6d:11:c3:40:08:bd:75:16:84:63: 75:bf:87:35:1e:b6:22:c7:7d:0c:1d:5f:dd:f3:26: 4a:79:63:7a:ee:6e:8f:da:71:d5:5c:4f:8f:aa:ae: 63:88:78:97:05:cf:a7:cb:ee:f6:47:a8:c8:e6:0c: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0B:44:11:22:E9:59:B8:83:78:23:04:D2:3C:9E:F1:03:E1:2E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88d90614-12a2-3669-99b2-5258da6f0589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:72:4c:db:b9:c2:8a:74:d5:d3:91:cc:c2:08:66:21:61:70: d2:1c:4c:de:89:8b:da:0f:eb:25:3e:29:01:92:a0:32:40:36: ac:f5:2c:88:66:c4:56:e0:b2:7e:0f:ec:6d:e1:4c:fb:4d:0e: 5e:1e:f2:b5:19:dd:33:d8:18:f6:29:72:98:32:82:b8:d7:3b: dd:c2:e3:2b:7f:e8:50:17:01:1a:d2:24:9a:e2:ef:75:ce:4e: 35:f8:6d:f4:99:32:97:25:f3:85:6f:12:8a:91:d9:18:d1:ff: 02:5b:42:79:09:59:31:c7:04:e8:03:18:b6:0a:19:21:3a:fc: 3c:80:95:b8:be:88:c3:75:7a:b5:1e:ea:85:94:78:28:ca:03: e1:aa:1d:a3:a4:62:ac:38:b6:b3:d9:86:d2:23:14:1c:99:2d: 98:8d:26:c7:c3:90:80:aa:15:f5:6f:c0:f2:c8:2e:b3:e1:6c: 06:19:0d:2e:dd:79:d8:a6:d5:91:89:19:eb:08:fb:81:36:c0: 4c:87:43:21:a9:5e:f7:ae:43:d2:9c:59:e8:d2:f3:e0:c1:a1: c0:5f:6b:89:c0:de:a8:09:60:56:d5:80:4c:b5:6f:07:33:e5: e4:5f:48:9f:55:53:f4:ab:81:95:4b:44:f0:d8:40:f4:cd:94: dc:65:0f:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQuAyGdikiH1XfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OGYxZTU1MTItYjNjYS00NjlhLTg1NGMtM2MzNjZlMDJlM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslG0U57vPL2Ueo3rTphJO/JZlb/WSBmO5IFU nlZiUmbcCvoHrP/hYnuLKxF6BMJlb7sk+6VYpcSSBmxGV26McnxX3Woj3uVpVuoN ri81I+rCAeI4NYyDfLgzzmN2y5tAstgQyYd3Xmlfp3O7WotxGYcc2Jcz8ggDiXjJ 26MHJdunpIiBLewIRvP+a6bS7pAd3XO3/J7VlmZxb3DqSkinnLvFkU4ZOWqBrXaV 94Zzd6MSjbODELyNJV2I0kixbw/7z/+g0jpQJG0Rw0AIvXUWhGN1v4c1HrYix30M HV/d8yZKeWN67m6P2nHVXE+Pqq5jiHiXBc+ny+72R6jI5gwzNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8LRBEi6Vm4g3gjBNI8nvED4S4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODhkOTA2MTQtMTJhMi0z NjY5LTk5YjItNTI1OGRhNmYwNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNyTNu5wop01dORzMIIZiFhcNIcTN6Ji9oP6yU+KQGSoDJANqz1LIhm xFbgsn4P7G3hTPtNDl4e8rUZ3TPYGPYpcpgygrjXO93C4yt/6FAXARrSJJri73XO TjX4bfSZMpcl84VvEoqR2RjR/wJbQnkJWTHHBOgDGLYKGSE6/DyAlbi+iMN1erUe 6oWUeCjKA+GqHaOkYqw4trPZhtIjFByZLZiNJsfDkICqFfVvwPLILrPhbAYZDS7d edim1ZGJGesI+4E2wEyHQyGpXveuQ9KcWejS8+DBocBfa4nA3qgJYFbVgEy1bwcz 5eRfSJ9VU/SrgZVLRPDYQPTNlNxlDxI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:56 2025 by rpki-client