$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa File: a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa (raw, json) Hash identifier: a9JDyoUNYyDsasJUyee871svM8YfLgTjigQe3rgJK64= Subject key identifier: A4:77:64:44:76:78:EB:DC:C2:FD:F7:63:19:E1:7D:B5:BB:CC:86:F7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BA01EB16E61FADAAA800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ba:01:eb:16:e6:1f:ad:aa:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=9c773dec-c1d3-4ecc-b26c-63ff4b7375d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:6b:40:76:8d:c0:27:0c:e6:5b:2f:ff:f5: 2f:f0:23:f3:57:1b:4e:ca:bd:bf:0b:d2:ad:cb:6e: 5a:29:bd:f4:af:74:09:de:37:de:64:47:45:24:ab: ac:ff:f7:35:be:56:2a:b4:76:5e:99:00:75:18:0f: 73:01:86:79:5d:0f:37:cb:44:e3:9f:5e:79:b0:5d: 87:b6:ad:77:71:0e:cf:88:6f:72:a6:f3:29:db:ac: ce:e4:b6:6d:b4:0c:5b:b7:40:7b:07:02:01:42:12: 5d:95:5d:e0:a3:9e:fe:ad:22:7d:8a:43:79:81:60: 58:db:08:d2:0c:d6:4f:f7:3c:f7:42:14:13:0c:19: 75:a6:be:41:34:6c:ef:2f:af:80:18:d5:6a:0a:8a: 4e:1d:23:16:64:5d:29:38:c0:3c:f6:a3:cc:d9:0c: c4:06:8d:39:4f:58:6b:12:98:ad:ac:a8:ae:56:c3: e9:cc:cc:f1:9c:37:c5:57:41:c3:aa:41:7f:e3:a3: 8e:8a:f4:33:28:1f:d8:17:07:f7:65:f5:81:d4:ef: 3b:38:ca:c0:00:b2:e2:f1:9b:0a:35:f2:25:cb:50: 16:f4:de:64:37:33:c4:9e:4f:a6:61:10:53:38:92: 46:fa:b3:9c:37:43:04:8c:b5:a4:23:1e:66:fc:7c: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:77:64:44:76:78:EB:DC:C2:FD:F7:63:19:E1:7D:B5:BB:CC:86:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a225e9bf-e806-342c-be8b-371c8d6e4bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:23:b1:2f:e8:10:1c:de:9a:6e:a9:a1:96:85:b1:fc:4f:4d: f9:f0:81:37:66:50:98:5b:6c:6f:fb:f6:42:43:e8:4c:d2:b8: e8:d8:86:e6:e2:4a:e6:a6:b8:68:4b:e9:10:c8:46:0a:80:f8: 68:c3:9f:d0:bb:5e:af:39:42:13:4d:f1:7f:46:6a:36:2d:ed: 9b:9b:4a:97:07:16:c1:f0:9e:01:11:bd:8f:d4:24:82:b2:49: 1d:9e:b2:cd:d2:b7:e1:46:28:e4:f4:89:af:b0:26:40:20:11: 85:81:72:12:10:a2:e6:5a:2c:f0:c6:bd:5f:6d:a5:ea:e4:06: 89:24:b5:39:7b:d7:e8:17:d6:46:89:68:95:cb:88:78:3f:d4: 51:cd:99:ee:36:ac:2b:3f:57:97:bd:fe:08:2f:dc:a9:d1:4c: 2a:e3:a1:42:13:44:27:a2:e7:29:6d:c3:de:c2:74:e9:fa:88: 6b:13:21:a3:08:ec:be:23:8c:c5:7e:a0:ee:4b:ae:37:a5:b0: 07:39:2a:3e:60:ae:aa:87:47:3c:e1:9f:a1:32:14:98:6f:85: d5:cc:ed:22:4e:c4:b6:ff:ed:0d:64:17:94:a9:e6:83:ae:bc: 02:ef:38:ee:cd:3e:dc:b0:4c:5d:28:19:be:dc:7d:61:ec:29: b8:76:18:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7oB6xbmH62qqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OWM3NzNkZWMtYzFkMy00ZWNjLWIyNmMtNjNmZjRiNzM3NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHVrQHaNwCcM5lsv//Uv8CPzVxtOyr2/C9Kt y25aKb30r3QJ3jfeZEdFJKus//c1vlYqtHZemQB1GA9zAYZ5XQ83y0Tjn155sF2H tq13cQ7PiG9ypvMp26zO5LZttAxbt0B7BwIBQhJdlV3go57+rSJ9ikN5gWBY2wjS DNZP9zz3QhQTDBl1pr5BNGzvL6+AGNVqCopOHSMWZF0pOMA89qPM2QzEBo05T1hr EpitrKiuVsPpzMzxnDfFV0HDqkF/46OOivQzKB/YFwf3ZfWB1O87OMrAALLi8ZsK NfIly1AW9N5kNzPEnk+mYRBTOJJG+rOcN0MEjLWkIx5m/Hw+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR3ZER2eOvcwv33YxnhfbW7zIb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTIyNWU5YmYtZTgwNi0z NDJjLWJlOGItMzcxYzhkNmU0YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQjsS/oEBzemm6poZaFsfxPTfnwgTdmUJhbbG/79kJD6EzSuOjYhubi SuamuGhL6RDIRgqA+GjDn9C7Xq85QhNN8X9GajYt7ZubSpcHFsHwngERvY/UJIKy SR2ess3St+FGKOT0ia+wJkAgEYWBchIQouZaLPDGvV9tperkBokktTl71+gX1kaJ aJXLiHg/1FHNme42rCs/V5e9/ggv3KnRTCrjoUITRCei5yltw97CdOn6iGsTIaMI 7L4jjMV+oO5LrjelsAc5Kj5grqqHRzzhn6EyFJhvhdXM7SJOxLb/7Q1kF5Sp5oOu vALvOO7NPtywTF0oGb7cfWHsKbh2GHI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:05 2025 by rpki-client