$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa File: a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa (raw, json) Hash identifier: GaO7tGr2UIytBnWsKWmfBmFHmfHIG6Olzm1qZbp0P0c= Subject key identifier: C2:1E:B0:82:AE:66:34:C6:62:DE:A6:15:57:6D:49:3E:85:02:14:D0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFDA6E7AFF17582215680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fd:a6:e7:af:f1:75:82:21:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=e87f2d03-01cf-4607-abef-dc6c4751308b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:71:49:98:f5:cf:12:1d:ae:99:04:96:73: 81:8b:a1:b4:ce:56:92:9e:ae:63:37:a4:4d:00:56: 72:fb:71:b2:9b:1a:13:3c:6e:39:e4:2c:22:bf:0d: 17:45:2d:43:aa:ab:d8:30:84:ad:35:1d:b7:f6:43: 8a:9a:4a:3d:9f:f2:36:d9:22:f0:ed:d3:54:cd:8e: e3:34:fc:05:b3:d5:7c:04:90:80:11:12:7a:84:a8: 12:2d:63:57:c1:05:96:54:e9:df:55:9f:5e:9a:f3: 83:24:df:94:77:99:a8:3c:31:6c:6d:84:7e:d8:29: 90:68:23:40:16:0f:9a:06:99:c8:66:aa:b9:77:bb: 84:2c:ce:14:1d:a1:a6:61:03:7d:5d:1c:bb:6d:70: 9e:24:90:59:47:e5:92:98:b9:88:b8:c1:1c:55:78: 70:af:38:af:63:32:61:dd:9a:b0:2a:ee:0e:85:97: c8:89:11:eb:66:66:02:fd:8c:b8:18:a2:e7:a3:fb: b2:07:f2:48:f5:e2:9d:8a:70:c4:d8:bf:e5:30:7c: 4b:8f:df:2e:6d:e1:7b:9d:0d:e3:be:ec:ba:e3:8a: 33:b4:7e:8e:dc:74:07:e2:fa:82:de:d6:a5:41:ce: 81:ca:96:1e:02:46:46:ef:d0:2f:91:2d:0b:1d:93: 9d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1E:B0:82:AE:66:34:C6:62:DE:A6:15:57:6D:49:3E:85:02:14:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4748569-bfaf-3313-8c61-2fe04f7a41a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:12:6e:e6:4e:51:c4:e5:50:86:b5:2a:8e:22:85:50:71:10: 4c:41:d0:37:cf:56:ad:ce:c5:cf:5c:9b:1f:73:1a:62:bd:47: d3:84:68:15:c1:45:ee:03:fa:c5:04:54:7c:de:4c:e4:11:50: ed:c2:54:d4:c0:2e:e7:01:cf:16:98:2b:a8:d6:b0:4e:d3:97: 4e:f4:6e:65:f2:12:a9:57:76:89:e3:e3:92:c1:a3:57:d9:89: 42:93:d5:c8:44:76:48:cb:9c:94:0e:05:92:36:06:aa:29:00: 5c:5a:86:76:75:32:bf:04:72:7f:5c:84:cf:30:5c:cd:c5:73: e6:d8:d9:a7:61:e8:1a:15:c0:27:a1:b2:05:dd:c1:5b:3d:01: 61:31:ab:87:29:04:09:3d:66:21:d3:e0:4a:db:fb:f0:5f:9c: c1:4e:48:37:7e:fe:5b:42:a9:00:c1:e3:c5:ff:a3:0c:ae:e9: 5a:55:4e:89:92:ad:29:5d:23:1c:db:5d:1e:90:fa:76:22:a0: 9c:e5:20:4a:e0:06:85:00:b8:d0:08:09:0b:f9:20:50:82:49: 0b:3b:a9:33:01:65:91:f0:9b:4a:98:b9:25:a2:de:81:49:8e: 21:95:50:17:0b:11:a9:60:a3:7e:bf:6f:0b:f8:51:64:ee:49: 77:48:55:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP2m56/xdYIhVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZTg3ZjJkMDMtMDFjZi00NjA3LWFiZWYtZGM2YzQ3NTEzMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/FxSZj1zxIdrpkElnOBi6G0zlaSnq5jN6RN AFZy+3GymxoTPG455Cwivw0XRS1DqqvYMIStNR239kOKmko9n/I22SLw7dNUzY7j NPwFs9V8BJCAERJ6hKgSLWNXwQWWVOnfVZ9emvODJN+Ud5moPDFsbYR+2CmQaCNA Fg+aBpnIZqq5d7uELM4UHaGmYQN9XRy7bXCeJJBZR+WSmLmIuMEcVXhwrzivYzJh 3ZqwKu4OhZfIiRHrZmYC/Yy4GKLno/uyB/JI9eKdinDE2L/lMHxLj98ubeF7nQ3j vuy644oztH6O3HQH4vqC3talQc6BypYeAkZG79AvkS0LHZOdRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIesIKuZjTGYt6mFVdtST6FAhTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTQ3NDg1NjktYmZhZi0z MzEzLThjNjEtMmZlMDRmN2E0MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADISbuZOUcTlUIa1Ko4ihVBxEExB0DfPVq3Oxc9cmx9zGmK9R9OEaBXB Re4D+sUEVHzeTOQRUO3CVNTALucBzxaYK6jWsE7Tl070bmXyEqlXdonj45LBo1fZ iUKT1chEdkjLnJQOBZI2BqopAFxahnZ1Mr8Ecn9chM8wXM3Fc+bY2adh6BoVwCeh sgXdwVs9AWExq4cpBAk9ZiHT4Erb+/BfnMFOSDd+/ltCqQDB48X/owyu6VpVTomS rSldIxzbXR6Q+nYioJzlIErgBoUAuNAICQv5IFCCSQs7qTMBZZHwm0qYuSWi3oFJ jiGVUBcLEalgo36/bwv4UWTuSXdIVRA= -----END CERTIFICATE-----Generated at Sat Nov 1 15:27:29 2025 by rpki-client