$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa File: aac69805-db9c-3d5e-8a6c-61855f417b0e.roa (raw, json) Hash identifier: qIKwfYTnOcYLBoxwipM0RfYhnsxTr5ZLp508vuycI7M= Subject key identifier: 15:1B:67:26:5B:17:0B:AC:A5:FD:D6:E4:C6:F7:72:E2:57:58:1F:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EB2B1FBEBDA3CE874D921CB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 14789 IP address blocks: 104.29.29.0/24 maxlen: 24 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:fb:eb:da:3c:e8:74:d9:21:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=07585b49-27a4-4fd2-af95-0c6474c99313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:93:7c:6d:e4:6a:77:ea:51:94:fc:6c:9c: 30:b2:2d:bd:47:ef:46:e7:46:46:1e:a1:ff:cd:57: a2:f2:1a:9a:e9:7d:b8:a1:00:9b:33:bb:ea:8e:8c: 68:95:3a:f9:00:c5:fc:29:e0:80:fd:c0:c3:ba:08: f5:4f:0a:55:5d:63:e8:fa:1d:de:70:77:6f:a0:63: 04:cd:7e:9c:8e:97:40:73:49:05:e7:b2:db:86:ff: 65:72:55:ee:0f:33:40:8a:0d:ea:23:ae:6f:4e:f8: e3:f5:1e:b2:fd:58:df:eb:5a:36:f2:67:cf:f2:77: dc:56:cf:b6:b9:eb:ad:45:1e:6d:50:e8:35:93:95: 18:42:a9:fb:0a:1b:dc:94:a1:31:bd:03:cb:67:c8: 1c:5d:04:2e:3d:16:55:a5:10:f3:09:90:db:cb:ec: 95:fc:d3:9e:07:e6:1f:28:b7:22:19:4c:02:0c:34: 43:31:d4:a7:98:ac:74:9f:35:10:46:23:d3:54:a8: 06:4c:b3:27:98:fb:a7:f0:3a:2f:f6:ea:1c:d2:ce: 93:1d:36:d5:ad:50:22:e6:60:6d:71:61:b7:3b:5c: 98:19:f6:0a:f1:e8:0d:28:59:2d:92:09:d0:a3:86: a0:06:ee:44:36:7a:97:5a:47:30:93:a8:60:c7:44: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:67:26:5B:17:0B:AC:A5:FD:D6:E4:C6:F7:72:E2:57:58:1F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.29.0/24 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2c:f1:bb:49:5e:b4:9e:ca:49:b1:b2:17:81:4d:ab:71:a0: e9:ec:b2:d7:ad:ac:b8:1e:df:35:33:cf:8b:6e:89:b8:ea:6a: 29:25:3f:19:d0:86:7f:30:67:7b:cd:9e:de:8a:90:8f:f5:9d: c4:ef:02:af:fa:f4:90:f4:e8:71:cf:54:4c:56:36:ed:7f:cb: 21:47:b4:61:04:0d:f3:66:35:5f:12:3b:98:20:4c:ff:f5:0c: 4d:fd:ed:7d:c4:7c:06:ca:30:fb:35:ef:ab:6a:b1:bc:9c:0f: 9d:91:e6:27:bd:68:6d:de:e2:5e:69:63:5e:8e:66:e4:ff:f2: 74:40:0c:25:e3:07:d4:5c:61:11:bf:a7:95:1b:d0:96:04:5d: f9:ac:93:d8:49:86:98:ba:f9:fa:27:fe:71:9e:de:4b:c7:6c: 31:31:a1:07:d3:b4:70:62:e5:7c:da:e1:9d:a2:1a:44:b9:1e: cb:77:b7:ad:5b:72:bc:8c:f8:df:b5:3c:15:8c:c0:59:ff:bd: fc:6b:16:5f:16:d7:b8:38:46:b7:0b:5b:3c:71:f6:fc:3d:51: 7b:ba:45:79:04:cf:06:c7:d9:b1:54:38:72:b3:60:4b:34:34: e5:52:9c:93:02:42:50:3e:d4:b0:97:e4:59:30:37:09:04:4f: f2:57:66:59 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6ysfvr2jzodNkhywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MDc1ODViNDktMjdhNC00ZmQyLWFmOTUtMGM2NDc0Yzk5MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskuTfG3kanfqUZT8bJwwsi29R+9G50ZGHqH/ zVei8hqa6X24oQCbM7vqjoxolTr5AMX8KeCA/cDDugj1TwpVXWPo+h3ecHdvoGME zX6cjpdAc0kF57Lbhv9lclXuDzNAig3qI65vTvjj9R6y/Vjf61o28mfP8nfcVs+2 ueutRR5tUOg1k5UYQqn7ChvclKExvQPLZ8gcXQQuPRZVpRDzCZDby+yV/NOeB+Yf KLciGUwCDDRDMdSnmKx0nzUQRiPTVKgGTLMnmPun8Dov9uoc0s6THTbVrVAi5mBt cWG3O1yYGfYK8egNKFktkgnQo4agBu5ENnqXWkcwk6hgx0Ql8QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBUbZyZbFwuspf3W5Mb3cuJXWB+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFjNjk4MDUtZGI5Yy0z ZDVlLThhNmMtNjE4NTVmNDE3YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaB0dAwQA rEcCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAUs8btJXrSeykmxsheBTatxoOnsstetrLge3zUzz4tuibjq aiklPxnQhn8wZ3vNnt6KkI/1ncTvAq/69JD06HHPVExWNu1/yyFHtGEEDfNmNV8S O5ggTP/1DE397X3EfAbKMPs176tqsbycD52R5ie9aG3e4l5pY16OZuT/8nRADCXj B9RcYRG/p5Ub0JYEXfmsk9hJhpi6+fon/nGe3kvHbDExoQfTtHBi5Xza4Z2iGkS5 Hst3t61bcryM+N+1PBWMwFn/vfxrFl8W17g4RrcLWzxx9vw9UXu6RXkEzwbH2bFU OHKzYEs0NOVSnJMCQlA+1LCX5FkwNwkET/JXZlk= -----END CERTIFICATE-----Generated at Sat Aug 8 02:51:56 2026 by rpki-client