$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa File: a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa (raw, json) Hash identifier: rE9MP2lYhc4EuFeDNODqTClhlTbdFchSlfg5eEYd+R8= Subject key identifier: 23:7E:BA:35:C0:45:67:75:50:D4:08:1A:F0:4C:09:27:3F:D7:79:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E48249B4210A84328DE676580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.29.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:9b:42:10:a8:43:28:de:67:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=fd38917b-68e4-42b1-99b6-b2510f7890db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6e:d6:ee:ec:8c:53:89:70:1e:55:4e:dd:41: 34:a3:73:1b:d8:d8:ab:9b:a5:d8:db:6f:7b:e1:63: 68:49:9c:16:1a:1b:17:da:d6:80:37:13:39:e9:60: b9:76:03:fe:3b:b5:b2:20:f9:4c:de:18:fc:00:85: 86:e1:0b:3a:4d:c5:ae:c2:78:3c:f4:85:63:65:a3: c5:07:ec:51:47:fd:ae:75:6d:e7:fc:17:ac:d3:9c: ab:65:d0:04:87:94:57:f1:7f:98:f9:fe:f2:3c:ce: 4f:09:b8:38:dc:0d:44:ef:4f:19:c7:b2:38:79:17: fe:90:a7:99:6f:56:f8:4a:04:cc:79:7f:e1:16:58: 9a:af:5e:c5:ea:9c:af:c5:96:87:21:45:d4:b9:93: 8f:d2:7a:7b:40:49:7b:5a:16:0d:8c:2f:81:3a:db: fb:b5:2c:d7:8d:f4:09:ce:42:67:fc:b9:7c:63:06: 2a:43:01:37:2c:b0:79:33:e7:47:8e:00:a4:d5:51: 8b:8b:48:11:46:7d:29:d4:8e:84:a2:4e:75:78:ef: 5d:80:9c:c4:99:dd:c2:3e:26:4b:83:fe:66:79:d6: 58:0c:c3:76:6c:81:4a:e8:5f:34:64:98:43:93:e2: 6e:81:b0:c0:fd:cb:c3:65:6e:53:fe:d4:e5:56:a7: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:BA:35:C0:45:67:75:50:D4:08:1A:F0:4C:09:27:3F:D7:79:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:95:f9:4d:3d:8b:b2:69:0b:e2:fd:8d:a3:2c:7a:4b:4a:ed: 78:26:3f:5d:a4:a0:96:12:f0:df:98:04:f3:ba:9f:29:9e:ca: 7e:4e:a4:8d:17:af:b5:0f:be:0d:9a:fc:e8:74:db:e9:de:4b: 14:6b:c1:b7:d2:11:13:88:1f:f4:fa:d1:89:6c:df:36:af:b5: d1:c6:c3:f4:e6:93:37:10:99:3f:c7:9b:97:fe:18:85:14:5d: f0:8b:48:e9:56:6a:f7:d8:37:77:72:e1:51:62:c3:7e:93:29: d8:c2:64:7d:b5:35:69:d2:ed:ca:2c:e5:23:d1:b8:90:55:d6: fb:09:2e:9a:b1:c3:7f:be:41:26:5e:a2:53:2a:a6:f2:de:3b: b4:ff:d9:48:1c:4a:fe:f3:91:54:cb:58:93:54:6d:15:c4:46: a6:14:c5:38:f5:b4:84:b4:18:d5:2c:83:59:4c:7c:aa:be:ec: 48:02:68:a5:93:7f:7e:af:2f:a1:0d:98:1c:fd:be:c8:d9:8a: 37:6b:d4:ca:8f:dc:7e:5c:91:27:9c:de:0d:57:a5:55:61:49: 56:a0:e5:30:ec:9e:22:42:b1:e7:06:89:10:18:0e:2c:c9:fc: de:51:15:f7:28:11:87:e0:85:f2:39:e6:c5:e5:49:28:5e:42: 4e:5a:8f:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJtCEKhDKN5nZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZmQzODkxN2ItNjhlNC00MmIxLTk5YjYtYjI1MTBmNzg5MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm7W7uyMU4lwHlVO3UE0o3Mb2Nirm6XY2297 4WNoSZwWGhsX2taANxM56WC5dgP+O7WyIPlM3hj8AIWG4Qs6TcWuwng89IVjZaPF B+xRR/2udW3n/Bes05yrZdAEh5RX8X+Y+f7yPM5PCbg43A1E708Zx7I4eRf+kKeZ b1b4SgTMeX/hFliar17F6pyvxZaHIUXUuZOP0np7QEl7WhYNjC+BOtv7tSzXjfQJ zkJn/Ll8YwYqQwE3LLB5M+dHjgCk1VGLi0gRRn0p1I6Eok51eO9dgJzEmd3CPiZL g/5medZYDMN2bIFK6F80ZJhDk+JugbDA/cvDZW5T/tTlVqf1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN+ujXARWd1UNQIGvBMCSc/13khMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTIyNWU5YmYtZTgwNi0z NDJjLWJlOGItMzcxYzhkNmU0YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACV+U09i7JpC+L9jaMsektK7XgmP12koJYS8N+YBPO6nymeyn5OpI0X r7UPvg2a/Oh02+neSxRrwbfSEROIH/T60Yls3zavtdHGw/TmkzcQmT/Hm5f+GIUU XfCLSOlWavfYN3dy4VFiw36TKdjCZH21NWnS7cos5SPRuJBV1vsJLpqxw3++QSZe olMqpvLeO7T/2UgcSv7zkVTLWJNUbRXERqYUxTj1tIS0GNUsg1lMfKq+7EgCaKWT f36vL6ENmBz9vsjZijdr1MqP3H5ckSec3g1XpVVhSVag5TDsniJCsecGiRAYDizJ /N5RFfcoEYfghfI55sXlSSheQk5aj2A= -----END CERTIFICATE-----Generated at Sat Jul 18 00:46:26 2026 by rpki-client