$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eb08eca-be07-39d7-bdd3-f450a63b35e0.roa File: 8eb08eca-be07-39d7-bdd3-f450a63b35e0.roa (raw, json) Hash identifier: 77NV4NOoHDlxQAh1DLVY6zJiTVaOAvO7QpOGT96ZFaw= Subject key identifier: 19:45:EC:F9:DA:4E:1D:66:EF:DB:DE:CD:36:3D:89:9E:18:2C:0F:9F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DF4DB40BCE9927FC0635E3800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eb08eca-be07-39d7-bdd3-f450a63b35e0.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 13335 IP address blocks: 104.29.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:40:bc:e9:92:7f:c0:63:5e:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=22bb5d2c-a4d3-47c9-a539-caf7a0a8a953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:bb:5c:2a:12:52:6b:78:02:f8:17:7f:05: f8:e2:54:c9:34:50:f4:12:27:7c:be:51:4e:b2:ee: b7:98:77:1d:3d:b4:b1:0e:eb:fc:e5:46:b2:83:1c: 19:56:bf:b3:eb:bb:7e:52:b7:5c:71:9b:22:ca:c0: 07:5a:bd:ac:12:27:a4:ef:3b:31:b2:bc:e8:65:f2: d5:5d:b6:66:4b:2e:b0:38:7d:11:18:b0:ae:9b:d0: 61:ec:eb:b9:61:27:1c:59:26:64:e5:25:f9:78:c0: 14:0f:4e:ee:ea:1c:28:a8:1d:89:b3:cb:d5:0c:c5: 8c:5c:01:94:f3:cb:c5:17:98:41:97:79:81:66:52: 09:83:e1:fd:11:af:17:5b:68:32:0c:1b:34:55:d0: 45:c8:a9:3d:6e:24:f9:80:b2:7f:7a:cf:5f:ce:05: 30:42:12:3c:94:38:54:da:1e:0a:c1:cf:3c:54:0e: 9b:ec:59:59:bb:2d:8b:b7:63:6e:4e:b3:97:e3:14: 4a:2e:0d:3d:aa:fd:1f:a2:a2:2a:74:39:5c:b8:7d: f8:c1:f9:30:3c:70:49:d5:d9:56:c0:1c:5d:4c:50: b6:16:f8:59:e2:cc:d7:f9:bd:cd:af:a8:1e:a6:10: 52:89:c3:0e:68:56:2b:de:19:64:d8:5c:37:30:4e: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:45:EC:F9:DA:4E:1D:66:EF:DB:DE:CD:36:3D:89:9E:18:2C:0F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eb08eca-be07-39d7-bdd3-f450a63b35e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:42:07:ba:7b:3a:8b:bf:e8:13:79:fe:04:2a:51:ad:dd:a9: f0:9b:4c:69:55:ef:55:10:39:3d:94:09:61:29:1a:59:7a:58: 3e:cf:dd:97:d6:fe:55:0a:31:10:62:c5:2a:37:bd:53:17:0a: 15:6e:c8:bf:06:b7:ff:e5:0b:a4:aa:d7:c2:22:92:ae:51:e8: 7d:32:45:7b:78:5f:2b:8c:0a:b8:42:33:f1:3b:aa:6e:24:a5: a6:e3:34:e3:56:37:6b:bb:ed:7d:64:f9:e6:03:81:45:ef:a9: 6f:66:65:51:93:51:2d:57:ef:b0:ee:3f:32:83:0d:94:f8:61: a3:90:fe:d9:0f:8b:5c:54:25:43:44:7c:3b:3f:1b:44:e9:b8: e4:1d:05:f1:23:ec:50:1d:e8:de:86:a0:41:7d:2f:01:9a:f8: 4e:e1:d8:07:8a:a2:d4:42:30:04:71:e8:ca:72:f6:52:90:d4: f5:81:4a:d5:9f:f2:86:06:8c:a9:16:6f:d7:45:02:8c:90:5a: ff:b3:92:21:8a:4a:15:ed:7c:2f:71:81:7c:c2:ec:c4:39:1e: 77:e2:07:43:9d:2e:46:6f:a0:f1:17:26:99:a5:0b:dd:34:2c: 72:b6:35:0b:0e:f1:c2:2a:3b:46:d2:a7:2b:43:4f:3a:2c:d8: a3:85:28:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020C86ZJ/wGNeOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjJiYjVkMmMtYTRkMy00N2M5LWE1MzktY2FmN2EwYThhOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU27XCoSUmt4AvgXfwX44lTJNFD0Eid8vlFO su63mHcdPbSxDuv85UaygxwZVr+z67t+UrdccZsiysAHWr2sEiek7zsxsrzoZfLV XbZmSy6wOH0RGLCum9Bh7Ou5YSccWSZk5SX5eMAUD07u6hwoqB2Js8vVDMWMXAGU 88vFF5hBl3mBZlIJg+H9Ea8XW2gyDBs0VdBFyKk9biT5gLJ/es9fzgUwQhI8lDhU 2h4Kwc88VA6b7FlZuy2Lt2NuTrOX4xRKLg09qv0foqIqdDlcuH34wfkwPHBJ1dlW wBxdTFC2FvhZ4szX+b3Nr6gephBSicMOaFYr3hlk2Fw3ME4lSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlF7PnaTh1m79vezTY9iZ4YLA+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGViMDhlY2EtYmUwNy0z OWQ3LWJkZDMtZjQ1MGE2M2IzNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtCB7p7Oou/6BN5/gQqUa3dqfCbTGlV71UQOT2UCWEpGll6WD7P3ZfW /lUKMRBixSo3vVMXChVuyL8Gt//lC6Sq18Iikq5R6H0yRXt4XyuMCrhCM/E7qm4k pabjNONWN2u77X1k+eYDgUXvqW9mZVGTUS1X77DuPzKDDZT4YaOQ/tkPi1xUJUNE fDs/G0TpuOQdBfEj7FAd6N6GoEF9LwGa+E7h2AeKotRCMARx6Mpy9lKQ1PWBStWf 8oYGjKkWb9dFAoyQWv+zkiGKShXtfC9xgXzC7MQ5HnfiB0OdLkZvoPEXJpmlC900 LHK2NQsO8cIqO0bSpytDTzos2KOFKJg= -----END CERTIFICATE-----Generated at Tue Jun 2 21:53:01 2026 by rpki-client