$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa File: afe83c0a-1cc3-335f-877d-d278e5800174.roa (raw, json) Hash identifier: k6HsRwFrXsau4S8t1ljsikqv3771eHvjxlY5qdOAtPc= Subject key identifier: EC:F1:88:FD:BE:AC:A2:46:73:17:52:DE:54:C1:80:32:3D:45:B6:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C544CA2FF2E2AA5E08D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c5:44:ca:2f:f2:e2:aa:5e:08:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b34632e7-707a-4027-a3f8-d0345511740a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:8d:94:e6:d9:0b:13:bd:fb:05:b4:20:3b: 21:06:ab:92:13:22:87:6b:fc:b9:4c:75:7f:1f:53: 02:8d:d4:f8:5b:59:2b:a4:cf:c2:3a:3d:de:20:79: fe:26:48:7b:27:d5:c6:6b:04:15:ea:4b:51:98:76: 13:03:23:99:43:48:46:74:c4:20:6a:15:94:5b:40: 5d:68:7d:f3:a6:af:27:2a:ba:9a:16:28:e9:00:cc: b2:65:c7:48:d3:a5:f0:f1:d2:07:68:6e:09:81:2d: ad:15:40:b5:18:1e:d3:01:39:43:67:f2:d7:d9:94: a2:6b:81:cf:17:4e:04:9b:7a:d3:dc:a5:21:af:40: 0c:25:49:bb:95:28:8e:5a:95:4b:72:d1:e9:b7:13: 9f:0c:6c:fb:c9:4c:3f:32:c7:1b:c4:9b:39:92:4e: 84:65:7c:da:3f:8c:ed:69:ae:10:48:86:5e:f5:77: 72:ac:1f:0a:57:46:49:c3:6f:6b:05:cf:83:fd:bf: e1:51:24:5e:a9:eb:4f:5e:7b:71:8d:64:56:fb:7f: 0a:95:58:9b:74:92:18:fd:d5:e7:4c:b6:3c:99:eb: 53:9d:5e:61:c6:f2:d1:44:51:a4:9f:86:cf:da:9a: 6b:6c:48:f8:d1:a4:44:df:85:98:55:45:6f:04:5e: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F1:88:FD:BE:AC:A2:46:73:17:52:DE:54:C1:80:32:3D:45:B6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:52:e2:07:ae:b7:7a:06:8b:83:07:13:4b:b0:fb:7d:0a:8b: 71:2b:f2:42:fc:6d:dc:f9:5e:f3:9c:b3:df:bc:11:8e:95:e5: 6f:fc:3b:83:c4:c4:34:7e:58:da:4b:38:4f:31:96:d6:99:ce: d2:54:c3:76:ed:3f:74:f7:2b:ab:03:9b:c1:06:0c:17:8a:70: 1d:5e:dc:81:75:67:47:34:b0:21:91:e2:3d:28:1b:87:22:d7: 1c:9a:7d:9c:4f:15:bf:31:bf:eb:d6:95:e5:73:27:39:82:e7: 3a:fe:28:a0:d0:01:87:20:c4:11:6a:e1:62:17:c2:da:9d:e2: 45:96:47:f6:6f:01:cc:56:bf:ed:02:09:ca:3f:73:a6:6e:38: a3:d0:8a:7d:8d:1a:62:c6:11:21:aa:af:2c:1b:47:11:5c:6e: 89:46:65:1d:e6:1c:c4:cf:86:ad:3a:df:12:d1:28:bd:3a:3e: 28:02:3c:6b:15:b9:7c:ac:e0:65:c3:75:63:a1:6e:7d:39:80: 21:21:ba:b1:71:5c:74:f9:78:e4:73:be:f9:39:68:62:01:56: 2d:b0:5d:e1:ea:57:a2:e0:37:88:06:f7:c1:55:f1:21:dc:de: 14:6d:83:9d:22:e0:94:e4:58:34:6d:ab:77:7b:5a:65:93:da: e0:37:2c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8VEyi/y4qpeCNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjM0NjMyZTctNzA3YS00MDI3LWEzZjgtZDAzNDU1MTE3NDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY+NlObZCxO9+wW0IDshBquSEyKHa/y5THV/ H1MCjdT4W1krpM/COj3eIHn+Jkh7J9XGawQV6ktRmHYTAyOZQ0hGdMQgahWUW0Bd aH3zpq8nKrqaFijpAMyyZcdI06Xw8dIHaG4JgS2tFUC1GB7TATlDZ/LX2ZSia4HP F04Em3rT3KUhr0AMJUm7lSiOWpVLctHptxOfDGz7yUw/MscbxJs5kk6EZXzaP4zt aa4QSIZe9XdyrB8KV0ZJw29rBc+D/b/hUSReqetPXntxjWRW+38KlVibdJIY/dXn TLY8metTnV5hxvLRRFGkn4bP2pprbEj40aRE34WYVUVvBF6d7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzxiP2+rKJGcxdS3lTBgDI9RbY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZlODNjMGEtMWNjMy0z MzVmLTg3N2QtZDI3OGU1ODAwMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBS4geut3oGi4MHE0uw+30Ki3Er8kL8bdz5XvOcs9+8EY6V5W/8O4PE xDR+WNpLOE8xltaZztJUw3btP3T3K6sDm8EGDBeKcB1e3IF1Z0c0sCGR4j0oG4ci 1xyafZxPFb8xv+vWleVzJzmC5zr+KKDQAYcgxBFq4WIXwtqd4kWWR/ZvAcxWv+0C Cco/c6ZuOKPQin2NGmLGESGqrywbRxFcbolGZR3mHMTPhq063xLRKL06PigCPGsV uXys4GXDdWOhbn05gCEhurFxXHT5eORzvvk5aGIBVi2wXeHqV6LgN4gG98FV8SHc 3hRtg50i4JTkWDRtq3d7WmWT2uA3LPo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:28 2025 by rpki-client