$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa File: 91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa (raw, json) Hash identifier: 41ATfldl9hoC6Fgxsw3KMCoC6xjtfFMhNQcrsW6QaOI= Subject key identifier: 78:87:D2:1B:AE:2E:7C:B5:39:1D:3C:F7:2F:73:8F:A1:AE:4C:47:43 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BB8AEA4094B743501D60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bb:8a:ea:40:94:b7:43:50:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=7b34aaeb-7349-45a4-9779-a3060c478fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:58:71:ee:28:6b:61:18:05:82:b0:27:bb:d7: 83:71:db:53:44:ea:c3:1f:9a:78:d1:74:65:a2:94: da:fa:89:f8:95:b3:db:47:30:c5:d4:24:a5:bc:8f: 90:96:79:65:da:10:23:bd:a0:ad:d1:b7:8d:2b:6b: 48:a2:bc:eb:1f:ae:e4:9a:b5:4a:a6:36:2c:64:42: a9:7f:70:b6:5c:7e:a0:9d:3c:05:d2:02:30:5b:cd: 29:4f:1e:73:bd:02:87:82:88:9f:51:55:19:43:80: f1:ed:aa:7a:e3:9c:44:c5:3d:94:2a:1e:1b:25:6f: 5e:63:67:60:48:77:a6:6b:14:fa:96:54:3b:cb:fc: 1a:65:e6:7b:d3:b4:95:3b:00:57:7f:5a:bf:a2:57: ee:0f:39:04:a7:3f:3e:ec:55:0c:87:47:15:09:8b: a4:ca:c8:fd:40:43:45:d9:11:db:b3:ab:c6:85:23: a5:51:f8:ba:ea:d3:06:f4:60:21:2c:de:33:2b:05: 20:1d:1c:da:eb:23:b5:8d:68:90:5f:35:93:17:df: c2:57:70:c2:b1:32:1b:37:56:48:04:e0:3c:62:d0: 88:71:65:09:fd:fb:37:65:99:29:10:6f:6c:10:9a: 3b:fd:58:bf:66:e6:45:18:60:fb:3c:d5:86:20:64: 8a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:87:D2:1B:AE:2E:7C:B5:39:1D:3C:F7:2F:73:8F:A1:AE:4C:47:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91a48010-23ec-3569-b1cd-a8c7e3a8d64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d4:2c:eb:b7:9d:fc:fa:d3:71:3d:cc:30:ca:40:a0:ad:c8: 62:ec:61:2d:28:8e:c8:c1:5a:fc:c0:4c:7a:28:a3:7b:c3:94: 08:77:54:9a:bd:5f:70:7c:54:37:fc:bc:08:77:fc:9d:38:ca: b7:cf:03:a0:a8:d7:a6:08:b0:4c:71:46:e2:d8:e1:92:51:44: 4e:32:0e:3f:7f:80:a8:4c:a3:c4:ff:4d:6a:fd:84:f3:6d:87: 36:0c:b4:64:52:8b:02:27:7b:57:63:c7:d2:9b:c4:17:7c:6f: 9d:e1:84:83:5a:e9:7f:fd:b9:89:2e:c2:4e:76:07:11:52:1c: e9:5f:00:d6:25:41:9a:13:4f:36:95:72:c2:32:55:ba:a6:3b: f6:e5:a1:c5:0b:52:29:3d:a2:07:f8:c9:2d:09:df:28:e2:b2: a3:85:ed:60:bc:54:ef:07:ce:1c:91:5c:a6:e7:c4:29:dc:a1: 8a:f3:d4:ca:07:e7:b6:45:bb:49:2d:69:75:82:c0:0f:d2:d6: 6e:b7:43:65:d5:62:25:20:73:ee:aa:d9:fb:e6:e2:99:c7:b8: 30:93:be:bf:af:a8:52:81:47:85:7a:2e:3d:50:d0:d4:90:c2: 32:6d:ff:f9:08:d0:48:c7:98:d6:93:08:53:9f:7f:d0:7c:28: 32:e6:32:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7uK6kCUt0NQHWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk N2IzNGFhZWItNzM0OS00NWE0LTk3NzktYTMwNjBjNDc4ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fhx7ihrYRgFgrAnu9eDcdtTROrDH5p40XRl opTa+on4lbPbRzDF1CSlvI+Qlnll2hAjvaCt0beNK2tIorzrH67kmrVKpjYsZEKp f3C2XH6gnTwF0gIwW80pTx5zvQKHgoifUVUZQ4Dx7ap645xExT2UKh4bJW9eY2dg SHemaxT6llQ7y/waZeZ707SVOwBXf1q/olfuDzkEpz8+7FUMh0cVCYukysj9QENF 2RHbs6vGhSOlUfi66tMG9GAhLN4zKwUgHRza6yO1jWiQXzWTF9/CV3DCsTIbN1ZI BOA8YtCIcWUJ/fs3ZZkpEG9sEJo7/Vi/ZuZFGGD7PNWGIGSKOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiH0huuLny1OR089y9zj6GuTEdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTFhNDgwMTAtMjNlYy0z NTY5LWIxY2QtYThjN2UzYThkNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7ULOu3nfz603E9zDDKQKCtyGLsYS0ojsjBWvzATHooo3vDlAh3VJq9 X3B8VDf8vAh3/J04yrfPA6Co16YIsExxRuLY4ZJRRE4yDj9/gKhMo8T/TWr9hPNt hzYMtGRSiwIne1djx9KbxBd8b53hhINa6X/9uYkuwk52BxFSHOlfANYlQZoTTzaV csIyVbqmO/blocULUik9ogf4yS0J3yjisqOF7WC8VO8HzhyRXKbnxCncoYrz1MoH 57ZFu0ktaXWCwA/S1m63Q2XVYiUgc+6q2fvm4pnHuDCTvr+vqFKBR4V6Lj1Q0NSQ wjJt//kI0EjHmNaTCFOff9B8KDLmMpI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:41 2025 by rpki-client