$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4c3ba43-ed4c-36e0-9bd0-ea89927bb9d3.roa File: b4c3ba43-ed4c-36e0-9bd0-ea89927bb9d3.roa (raw, json) Hash identifier: Tr1bKuyYxT1iIRLfEzba/wbcbk1/sdDMWfqw0FfAH8A= Subject key identifier: CA:B6:38:31:06:1E:30:87:3C:6D:2B:B6:1F:BA:52:19:12:23:1F:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA878225764C91187F9E3780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4c3ba43-ed4c-36e0-9bd0-ea89927bb9d3.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:82:25:76:4c:91:18:7f:9e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=1ada45c5-d871-49ac-a7ca-47cbaad71cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:78:78:a0:16:38:bb:22:03:59:7b:4c:06: 78:63:25:f9:45:d7:8b:4c:fd:f4:be:6f:6a:15:b1: e2:25:2f:ec:21:ef:be:e1:d9:a2:a5:0d:ab:77:a3: e2:07:19:f0:97:7e:9c:2c:74:f3:e9:e2:ac:d7:34: 72:12:5e:c1:f6:71:a7:b2:35:5b:c3:6e:c0:c7:32: 07:ac:a2:be:d6:85:f1:17:3d:19:bf:26:d5:ee:00: 57:16:b2:9c:a2:63:9f:bd:c9:0f:b9:01:7c:c3:e2: 4d:9b:0f:ce:ef:eb:f8:a0:e0:c8:69:9e:e8:b5:78: 7e:97:75:72:84:cc:49:a8:9c:39:37:45:56:2b:59: 77:79:b0:6c:02:7e:bd:3a:31:99:95:a5:c5:6d:ea: b6:46:35:e9:8d:8d:79:51:29:8a:82:ac:5c:e6:d9: fa:d9:e0:46:ab:d4:39:72:5c:0f:bf:25:e1:02:9e: de:15:f7:0c:61:f3:40:9a:1d:17:4d:9c:b3:f1:92: 45:46:f3:79:0d:a9:2a:1c:33:d9:69:5d:4e:4e:15: 28:41:b0:4b:c4:56:a6:cd:c7:8d:82:41:55:92:c6: d7:d9:86:5a:5f:75:41:74:ee:4c:12:84:99:f1:bd: 19:dc:32:a3:fb:39:73:e4:9d:c4:22:fc:7f:63:31: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B6:38:31:06:1E:30:87:3C:6D:2B:B6:1F:BA:52:19:12:23:1F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4c3ba43-ed4c-36e0-9bd0-ea89927bb9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:aa:d5:88:ce:a4:c8:a3:ca:c6:b8:2b:d5:c9:69:6e:36:7c: 68:d0:e7:9b:24:c0:e9:fb:e2:57:91:c1:b5:8e:1b:56:6a:f9: 0c:b0:40:6f:6a:48:0d:1b:2c:53:15:4a:f2:ae:98:69:9e:6f: 58:81:3d:16:01:9b:95:1f:ac:a2:5d:72:e4:fd:9d:dc:25:6a: 14:32:d6:cc:f7:4e:e7:18:32:b7:2e:a0:45:2b:e6:70:19:8b: 3c:2a:ca:14:72:1d:f3:9b:23:73:90:80:2f:7d:18:67:fd:c6: 76:d2:9a:b5:53:95:f0:8d:d9:cb:4a:68:ec:bd:71:4c:e3:93: 3e:4a:48:97:1b:db:43:e9:31:e9:1c:89:f3:19:fb:e3:39:46: 37:29:28:1d:6e:58:7e:49:58:b2:e2:94:55:eb:44:7f:2f:54: d5:92:b2:c8:ed:b8:84:b5:0e:6f:a6:a4:21:bc:b1:dd:96:59: 11:5d:50:40:ce:94:39:8a:17:62:65:5e:5d:29:0b:bb:e2:82: 40:13:b9:7e:0b:51:0d:84:e3:13:f5:70:e6:8c:bc:f9:2b:e4: f6:96:a0:ce:94:a7:ea:8d:e1:8c:ea:37:fe:7f:0b:24:36:5f: 2e:20:64:52:3a:cb:4b:f2:59:45:57:fe:45:74:25:ee:1a:b5: 3e:40:9d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4IldkyRGH+eN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MWFkYTQ1YzUtZDg3MS00OWFjLWE3Y2EtNDdjYmFhZDcxY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi314eKAWOLsiA1l7TAZ4YyX5RdeLTP30vm9q FbHiJS/sIe++4dmipQ2rd6PiBxnwl36cLHTz6eKs1zRyEl7B9nGnsjVbw27AxzIH rKK+1oXxFz0ZvybV7gBXFrKcomOfvckPuQF8w+JNmw/O7+v4oODIaZ7otXh+l3Vy hMxJqJw5N0VWK1l3ebBsAn69OjGZlaXFbeq2RjXpjY15USmKgqxc5tn62eBGq9Q5 clwPvyXhAp7eFfcMYfNAmh0XTZyz8ZJFRvN5DakqHDPZaV1OThUoQbBLxFamzceN gkFVksbX2YZaX3VBdO5MEoSZ8b0Z3DKj+zlz5J3EIvx/YzHl9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq2ODEGHjCHPG0rth+6UhkSIx9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjRjM2JhNDMtZWQ0Yy0z NmUwLTliZDAtZWE4OTkyN2JiOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyq1YjOpMijysa4K9XJaW42fGjQ55skwOn74leRwbWOG1Zq+QywQG9q SA0bLFMVSvKumGmeb1iBPRYBm5UfrKJdcuT9ndwlahQy1sz3TucYMrcuoEUr5nAZ izwqyhRyHfObI3OQgC99GGf9xnbSmrVTlfCN2ctKaOy9cUzjkz5KSJcb20PpMekc ifMZ++M5RjcpKB1uWH5JWLLilFXrRH8vVNWSssjtuIS1Dm+mpCG8sd2WWRFdUEDO lDmKF2JlXl0pC7vigkATuX4LUQ2E4xP1cOaMvPkr5PaWoM6Up+qN4YzqN/5/CyQ2 Xy4gZFI6y0vyWUVX/kV0Je4atT5AnU8= -----END CERTIFICATE-----Generated at Tue Sep 1 02:23:54 2026 by rpki-client