$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/949db147-fb5d-3728-b93c-b0b7eba4a69f.roa File: 949db147-fb5d-3728-b93c-b0b7eba4a69f.roa (raw, json) Hash identifier: lmoAMmcGsKR43LGIprBK4Qj4xlx2zWGrkbqqbx+9bHo= Subject key identifier: 06:88:48:C9:CE:B5:D8:AB:61:5F:1A:CA:B3:23:5E:A7:B8:2E:A2:0C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA0D26B1B962445890DB8F400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/949db147-fb5d-3728-b93c-b0b7eba4a69f.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6b:1b:96:24:45:89:0d:b8:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=80af6a80-71e0-4fe5-8dea-65d5bc56f8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:ff:a3:d3:8c:65:96:15:92:53:fa:42:13: 04:f9:36:de:1e:80:ac:91:66:31:ee:b6:eb:69:46: 33:3b:63:7d:5d:9f:7e:96:92:bc:62:ae:a1:63:bb: e9:ca:04:a6:d5:3c:22:f5:13:ac:10:8f:d4:bd:00: 80:6c:6a:99:f5:85:91:2a:7e:68:47:cd:6d:66:9f: 79:42:fb:8f:fd:32:c7:e6:7e:e3:be:4c:2c:78:bc: 38:33:8b:60:a1:c9:63:66:32:ed:05:4a:27:44:fa: 98:19:81:d8:e1:b1:37:4b:e4:bd:4a:f2:6b:bd:b2: 56:77:44:d6:56:ee:e8:5b:dc:41:1a:2b:2b:c8:c1: c4:68:2e:0b:1b:f3:db:e0:a8:48:ee:79:2f:6b:1d: 8e:bf:d8:c4:a9:28:e3:be:a7:75:02:90:ca:64:88: 14:43:5a:74:08:50:04:98:8a:63:b0:91:89:6a:cb: b4:b3:29:2c:9a:3c:72:14:d4:d2:af:51:9d:44:b8: 41:3f:fd:6b:30:69:4a:a7:d9:02:a0:3c:e2:d7:e0: c0:37:97:15:45:51:e6:27:6a:fd:2c:b6:78:2c:73: b4:66:16:2e:8d:48:b1:3d:f5:34:49:f9:d5:dc:ec: e8:06:c5:b2:4a:2a:6c:3d:46:6c:5e:26:85:52:61: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:88:48:C9:CE:B5:D8:AB:61:5F:1A:CA:B3:23:5E:A7:B8:2E:A2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/949db147-fb5d-3728-b93c-b0b7eba4a69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:87:91:eb:b8:10:42:11:b6:02:89:5f:b8:d9:e2:9a:df:8e: 21:2c:bb:bb:70:9c:bb:4d:48:43:d7:c2:b4:78:d7:75:66:f2: cb:36:8a:fc:48:d0:ab:f0:3f:dc:7e:38:ff:3d:96:a3:4a:be: 7c:aa:9a:3d:10:67:7c:56:e3:3f:af:f7:91:a5:b8:e5:91:a9: 5a:9d:d4:1f:6a:ce:33:16:88:19:3a:43:b8:56:8a:f7:bb:0b: 8d:fc:2c:32:eb:4e:5c:b6:c4:b8:27:42:5b:d2:f1:0a:0a:95: 2f:fa:c7:46:c8:fe:c2:5f:1e:01:f1:20:d4:96:f4:73:c3:3f: a4:11:18:f7:7f:82:08:7d:3d:c3:f7:61:9e:c7:64:4b:ee:63: 7b:b1:c2:78:56:db:ec:89:df:9b:ef:0c:90:f7:68:43:30:a8: b3:e6:6a:53:3a:84:9a:da:d5:ef:3c:aa:44:96:66:34:25:9a: 78:33:ee:61:ce:a4:28:ae:83:2e:ce:a2:27:38:7e:a1:c3:e5: 5f:d8:10:e1:f3:7a:2d:ee:f5:42:fe:0d:03:e4:3a:a1:5e:7e: 03:85:1a:25:d1:4a:12:27:5b:bf:df:01:ec:5d:ef:2a:cb:74: db:e0:75:df:94:1d:c2:77:92:d5:ce:52:f8:44:31:ef:43:3b: 43:53:b0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0msbliRFiQ249AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ODBhZjZhODAtNzFlMC00ZmU1LThkZWEtNjVkNWJjNTZmOGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz//o9OMZZYVklP6QhME+TbeHoCskWYx7rbr aUYzO2N9XZ9+lpK8Yq6hY7vpygSm1Twi9ROsEI/UvQCAbGqZ9YWRKn5oR81tZp95 QvuP/TLH5n7jvkwseLw4M4tgocljZjLtBUonRPqYGYHY4bE3S+S9SvJrvbJWd0TW Vu7oW9xBGisryMHEaC4LG/Pb4KhI7nkvax2Ov9jEqSjjvqd1ApDKZIgUQ1p0CFAE mIpjsJGJasu0syksmjxyFNTSr1GdRLhBP/1rMGlKp9kCoDzi1+DAN5cVRVHmJ2r9 LLZ4LHO0ZhYujUixPfU0SfnV3OzoBsWySipsPUZsXiaFUmEZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaISMnOtdirYV8ayrMjXqe4LqIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTQ5ZGIxNDctZmI1ZC0z NzI4LWI5M2MtYjBiN2ViYTRhNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6Hkeu4EEIRtgKJX7jZ4prfjiEsu7twnLtNSEPXwrR413Vm8ss2ivxI 0KvwP9x+OP89lqNKvnyqmj0QZ3xW4z+v95GluOWRqVqd1B9qzjMWiBk6Q7hWive7 C438LDLrTly2xLgnQlvS8QoKlS/6x0bI/sJfHgHxINSW9HPDP6QRGPd/ggh9PcP3 YZ7HZEvuY3uxwnhW2+yJ35vvDJD3aEMwqLPmalM6hJra1e88qkSWZjQlmngz7mHO pCiugy7Ooic4fqHD5V/YEOHzei3u9UL+DQPkOqFefgOFGiXRShInW7/fAexd7yrL dNvgdd+UHcJ3ktXOUvhEMe9DO0NTsNA= -----END CERTIFICATE-----Generated at Sun Nov 2 04:25:49 2025 by rpki-client