$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa File: 972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa (raw, json) Hash identifier: N0RuYy/yfP942jd+2oZZ0Iofa2zN9tcdpBjw6kpGCNo= Subject key identifier: EE:A9:A0:BE:D7:C2:AC:41:52:D4:7C:3C:BC:35:40:A6:4C:85:93:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F20F7A4CB38A07BE27A58C380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.29.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a4:cb:38:a0:7b:e2:7a:58:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=443f4269-9b42-43a2-b25f-aa485b06c4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ab:f3:d2:f9:4d:dd:fa:55:3f:47:53:7b:c8: c1:1d:c9:dd:99:9c:57:72:a9:f1:86:bb:69:d4:6d: 59:c3:f5:79:44:34:95:47:d1:e5:0e:67:58:ce:d2: 28:4d:79:18:a5:7c:21:29:ae:3a:0b:59:5b:3d:c7: 98:bb:4b:ab:c0:58:be:2e:80:d1:b1:24:0b:d1:7f: 58:47:0d:aa:53:0e:55:0b:00:56:7e:99:ca:ec:db: 13:ca:c8:de:1e:9d:77:a3:0d:67:07:84:e0:5f:47: 5f:e8:6e:d1:ca:d0:12:6a:f4:3f:68:a5:5f:cf:39: 75:03:0c:21:5f:3c:6c:71:94:b9:e4:01:bd:bb:7e: b2:89:78:30:fa:9d:77:1a:bb:f3:4f:ce:1d:7a:c9: 4b:d8:67:60:65:dd:86:40:b0:af:03:1e:de:fd:9c: 16:6d:13:fc:5a:02:48:27:59:5c:b5:33:31:06:9a: 5d:54:69:69:61:0f:24:99:d6:a6:e3:d9:a4:f1:f1: c7:aa:d6:f5:de:48:40:5b:02:ee:74:3c:e5:45:9f: a3:d3:ab:a7:0b:62:a5:7f:db:b9:0a:40:ee:7c:e8: 38:8f:d2:f1:e4:cb:d2:7a:49:58:27:a4:42:54:cf: 81:64:d1:15:85:9b:b5:25:43:e4:06:54:14:17:cf: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A9:A0:BE:D7:C2:AC:41:52:D4:7C:3C:BC:35:40:A6:4C:85:93:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972a8f37-6a19-35d3-a47a-7ce5b3c39929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:73:93:a4:68:08:cc:55:9b:c7:97:f2:99:a5:e4:52:f2:5e: 9b:41:8a:4f:4c:5d:5b:e3:58:de:22:8e:e7:33:4c:ad:6f:e2: c0:55:38:2b:b9:16:10:5e:14:e9:1d:ba:f5:d2:5f:af:dd:47: 9b:8c:75:27:a9:06:c2:17:01:e8:47:a8:bb:44:22:5a:1e:db: fc:4a:e8:30:27:44:2c:c6:60:19:e0:8e:52:bf:9c:8b:a2:39: 27:41:c3:05:d0:07:a1:7c:2c:ec:d0:dc:e9:31:19:1f:89:87: 56:57:ef:35:5f:3b:25:e1:d0:3c:79:09:17:28:3d:0f:30:fe: a6:58:4d:58:04:9a:ca:34:f7:3f:c7:91:0f:32:00:32:4c:7f: 22:f8:f9:f3:06:9d:5f:c6:69:aa:c9:de:38:f8:fe:84:5d:1f: 3b:a9:10:4a:7d:0b:d6:e4:26:25:88:fd:8b:bc:a4:1d:e1:c5: 3b:4b:6b:bc:97:cd:fd:1b:ce:66:f0:56:5c:b3:3a:08:b7:2c: 81:4d:93:85:5e:e2:bd:e4:2f:71:48:53:69:49:3f:4c:2c:ee: f0:55:4c:57:c8:16:a3:b6:bf:72:3c:8b:86:5e:7d:3d:ea:d0: 5d:24:33:fb:e8:18:79:a6:9f:c5:22:a1:30:3c:87:b8:d7:b8: b6:38:02:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96TLOKB74npYw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDQzZjQyNjktOWI0Mi00M2EyLWIyNWYtYWE0ODViMDZjNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5avz0vlN3fpVP0dTe8jBHcndmZxXcqnxhrtp 1G1Zw/V5RDSVR9HlDmdYztIoTXkYpXwhKa46C1lbPceYu0urwFi+LoDRsSQL0X9Y Rw2qUw5VCwBWfpnK7NsTysjeHp13ow1nB4TgX0df6G7RytASavQ/aKVfzzl1Awwh XzxscZS55AG9u36yiXgw+p13GrvzT84deslL2GdgZd2GQLCvAx7e/ZwWbRP8WgJI J1lctTMxBppdVGlpYQ8kmdam49mk8fHHqtb13khAWwLudDzlRZ+j06unC2Klf9u5 CkDufOg4j9Lx5MvSeklYJ6RCVM+BZNEVhZu1JUPkBlQUF8/HfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6poL7XwqxBUtR8PLw1QKZMhZMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTcyYThmMzctNmExOS0z NWQzLWE0N2EtN2NlNWIzYzM5OTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5zk6RoCMxVm8eX8pml5FLyXptBik9MXVvjWN4ijuczTK1v4sBVOCu5 FhBeFOkduvXSX6/dR5uMdSepBsIXAehHqLtEIloe2/xK6DAnRCzGYBngjlK/nIui OSdBwwXQB6F8LOzQ3OkxGR+Jh1ZX7zVfOyXh0Dx5CRcoPQ8w/qZYTVgEmso09z/H kQ8yADJMfyL4+fMGnV/GaarJ3jj4/oRdHzupEEp9C9bkJiWI/Yu8pB3hxTtLa7yX zf0bzmbwVlyzOgi3LIFNk4Ve4r3kL3FIU2lJP0ws7vBVTFfIFqO2v3I8i4ZefT3q 0F0kM/voGHmmn8UioTA8h7jXuLY4ApM= -----END CERTIFICATE-----Generated at Tue Sep 22 20:04:47 2026 by rpki-client