$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa File: a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa (raw, json) Hash identifier: yuRjW9MbQ7Satkm4hZDHIqoxzWpUl5/fYRH6UDsFU3A= Subject key identifier: 5D:C5:19:A6:8A:F9:6F:90:94:09:1C:68:96:18:2B:B8:13:E6:A6:AE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876FF109331E378A673F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6f:f1:09:33:1e:37:8a:67:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=0da1449b-b946-47d5-b2c5-273ad060f960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:cf:15:2e:49:d0:b8:9e:02:08:50:cd:18: 19:cc:78:1f:3a:c8:b2:aa:71:c2:2d:aa:71:ee:6e: a1:01:ed:5b:27:f4:55:e7:a5:31:4d:00:ca:46:dc: 08:ab:0e:a7:c3:34:60:b0:bc:9b:dc:7f:ec:f6:1c: 3e:af:45:00:56:b0:17:83:63:01:97:ff:1e:10:31: f3:5a:71:fd:55:96:41:e2:e1:fa:ca:20:34:31:e6: 2a:ab:5d:1c:39:94:f8:51:10:76:d6:60:5c:bb:a8: 80:48:7a:e5:e7:35:af:2f:a9:b5:db:62:b9:61:b8: e9:68:09:5f:7c:b3:c5:3c:d8:b8:63:a7:4f:4e:ef: 05:c7:0c:8f:1e:bf:60:98:5d:62:43:f0:bf:1b:63: 1b:31:25:eb:15:e3:49:fa:b2:31:b8:6c:e5:35:c8: e2:12:af:be:79:36:a8:47:7d:68:3d:9e:ab:9b:75: f8:95:ca:6e:f7:9a:02:fc:15:af:ed:17:9c:02:7a: fc:f1:52:e8:51:3d:36:0e:d4:60:36:bc:63:aa:86: 6a:6e:f6:71:8b:77:bb:28:fd:df:48:a4:1a:2b:95: 00:5a:0c:6b:50:62:b1:39:c1:44:10:24:a9:7c:ce: c6:ed:3c:fd:b3:26:b0:37:c3:25:83:f7:76:e9:86: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C5:19:A6:8A:F9:6F:90:94:09:1C:68:96:18:2B:B8:13:E6:A6:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a1:f5:68:3d:3e:fc:ec:9f:de:4b:39:b4:4a:dd:ee:1e:aa: b0:e2:72:25:cd:c9:8f:35:78:f4:45:55:4b:83:bb:cd:6f:eb: ac:24:83:37:af:c0:3a:76:5b:53:e2:81:93:cc:b5:d4:34:ba: b0:14:8c:04:63:49:f8:14:c7:f1:dc:f7:6a:12:e9:59:7c:50: 41:36:be:ea:91:fd:ec:eb:f6:6a:f3:f4:ad:4d:31:ca:fe:38: 1f:a5:f4:f4:54:6d:61:2d:2d:5b:b2:88:e5:f9:8e:44:ab:e3: ca:f6:8a:9a:9e:85:7f:64:b5:f6:42:a7:ad:29:c2:ad:3c:bd: ea:f8:5c:d6:ce:c0:a7:2d:dc:12:1b:5e:c5:8c:3c:8c:5d:6a: d6:29:87:d0:80:cb:5e:45:b7:e3:e3:25:f5:43:60:25:8b:ed: 14:eb:6e:c6:57:00:da:b7:70:d4:68:3f:a0:ec:23:e7:e1:2d: 15:a6:04:c5:e8:8a:bf:7a:f5:66:3b:ed:5b:23:5d:0d:a8:56: 04:d2:ed:a6:ab:17:7f:1d:b1:48:24:bd:70:97:15:ba:98:cd: 56:8f:84:14:1e:8c:36:e8:5e:4d:a8:9f:bc:1b:34:59:4e:72: 1e:10:2f:ed:03:0e:92:8d:bb:26:8b:23:8d:61:79:98:10:ab: 71:64:4a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2/xCTMeN4pnPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MGRhMTQ0OWItYjk0Ni00N2Q1LWIyYzUtMjczYWQwNjBmOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPbPFS5J0LieAghQzRgZzHgfOsiyqnHCLapx 7m6hAe1bJ/RV56UxTQDKRtwIqw6nwzRgsLyb3H/s9hw+r0UAVrAXg2MBl/8eEDHz WnH9VZZB4uH6yiA0MeYqq10cOZT4URB21mBcu6iASHrl5zWvL6m122K5YbjpaAlf fLPFPNi4Y6dPTu8FxwyPHr9gmF1iQ/C/G2MbMSXrFeNJ+rIxuGzlNcjiEq++eTao R31oPZ6rm3X4lcpu95oC/BWv7RecAnr88VLoUT02DtRgNrxjqoZqbvZxi3e7KP3f SKQaK5UAWgxrUGKxOcFEECSpfM7G7Tz9syawN8Mlg/d26YZMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3FGaaK+W+QlAkcaJYYK7gT5qauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTQ3NDg1NjktYmZhZi0z MzEzLThjNjEtMmZlMDRmN2E0MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqh9Wg9Pvzsn95LObRK3e4eqrDiciXNyY81ePRFVUuDu81v66wkgzev wDp2W1PigZPMtdQ0urAUjARjSfgUx/Hc92oS6Vl8UEE2vuqR/ezr9mrz9K1NMcr+ OB+l9PRUbWEtLVuyiOX5jkSr48r2ipqehX9ktfZCp60pwq08ver4XNbOwKct3BIb XsWMPIxdatYph9CAy15Ft+PjJfVDYCWL7RTrbsZXANq3cNRoP6DsI+fhLRWmBMXo ir969WY77VsjXQ2oVgTS7aarF38dsUgkvXCXFbqYzVaPhBQejDboXk2on7wbNFlO ch4QL+0DDpKNuyaLI41heZgQq3FkSmA= -----END CERTIFICATE-----Generated at Tue Sep 1 04:09:02 2026 by rpki-client