$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa File: b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa (raw, json) Hash identifier: g4vpci/wVQ5SQuR/vn/1yQIvc+50ZscXV7CJyoLAnHE= Subject key identifier: A4:AF:8E:62:1C:52:8F:FF:56:68:D6:55:7E:C5:53:0B:E4:14:78:35 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFF32229AE3F38C6B8500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ff:32:22:9a:e3:f3:8c:6b:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=9cd53465-55b3-417e-b20e-5a11dbde9565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:4c:be:da:57:72:c6:b4:46:06:d9:f9:5b: 82:fc:f8:48:ac:e1:cb:f3:e5:f2:ef:91:07:3c:62: 88:ca:42:e5:35:dc:52:0c:8c:20:59:77:9e:ea:90: 20:bc:44:ab:2c:d3:d9:b4:4f:38:b9:9f:a5:93:c0: 83:08:7c:81:88:1e:c8:fa:48:93:1a:3a:30:9a:b0: 63:7b:8b:aa:0f:f2:7a:d5:00:fd:23:af:f6:b5:b8: c0:72:6d:64:03:8d:40:5b:e3:fc:a9:b1:f3:ce:71: 7e:37:0a:7a:3e:75:c7:5d:f5:45:03:af:93:94:5f: 57:bc:81:7a:c4:b5:51:99:b2:2d:b5:ae:d7:49:d8: e4:b1:48:bb:1c:e4:22:12:11:d5:d6:70:56:bf:71: 7c:94:70:f8:84:13:9d:66:c2:ec:bf:99:c8:22:47: 82:88:2f:7c:75:73:c0:d6:99:7d:95:57:0d:4e:ce: be:fd:5f:41:61:dd:af:6a:76:e3:f2:2f:41:62:8d: e9:ba:31:84:b6:99:34:18:80:46:77:47:a7:7b:c1: fe:9d:f6:b1:34:25:d0:6c:a8:f3:68:67:70:85:a5: 16:cd:b1:b9:f6:d5:c5:29:5c:6c:a9:cd:c9:ca:10: 3c:6e:9d:be:48:dc:d7:83:b9:ff:4d:e2:d4:48:e2: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AF:8E:62:1C:52:8F:FF:56:68:D6:55:7E:C5:53:0B:E4:14:78:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7bbd5c6-d871-3289-82f4-6aa2d072ceca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:10:41:68:75:55:ee:11:18:f3:de:0b:ff:6b:41:74:ee:01: 94:ad:16:c9:c5:e7:a7:6f:54:ae:0d:e8:42:2e:79:f5:d1:1d: 45:8c:e6:5d:bc:9b:d5:21:20:06:f8:17:d5:3b:b0:88:5c:69: df:98:33:78:66:2f:10:e4:92:af:e4:b6:b4:d0:e6:9d:bb:c9: f7:c7:c7:d4:72:04:6f:9a:42:75:4f:9b:b4:4d:5e:0d:5c:d6: 29:73:45:98:ba:ff:2d:62:ae:21:16:d5:cf:05:7d:5a:d2:f9: 3d:4d:03:fa:46:79:7c:a4:db:01:04:b4:40:75:9a:c6:38:e0: b2:66:9e:94:77:9b:35:15:de:4f:0a:7c:85:e0:4a:5c:1e:bf: fc:b6:b0:b0:28:1f:11:d2:cf:10:11:be:4f:b4:49:9b:14:d5: 09:0f:a3:86:28:7c:45:1b:38:2d:40:6e:69:94:9b:9d:68:4b: 29:67:3c:79:d2:09:01:87:60:62:29:09:de:73:57:fd:a3:a2: b6:9e:50:e4:d3:dd:b2:09:5a:6f:4b:31:54:50:fe:7e:ca:28: f2:ba:93:d5:df:d6:fa:48:d3:c3:af:ff:66:75:b8:1b:7f:37: 41:08:3b:bd:a1:d8:29:0f:8a:32:02:4b:57:a4:fe:03:76:a4: a3:56:f3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP8yIprj84xrhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OWNkNTM0NjUtNTViMy00MTdlLWIyMGUtNWExMWRiZGU5NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXJMvtpXcsa0RgbZ+VuC/PhIrOHL8+Xy75EH PGKIykLlNdxSDIwgWXee6pAgvESrLNPZtE84uZ+lk8CDCHyBiB7I+kiTGjowmrBj e4uqD/J61QD9I6/2tbjAcm1kA41AW+P8qbHzznF+Nwp6PnXHXfVFA6+TlF9XvIF6 xLVRmbItta7XSdjksUi7HOQiEhHV1nBWv3F8lHD4hBOdZsLsv5nIIkeCiC98dXPA 1pl9lVcNTs6+/V9BYd2vanbj8i9BYo3pujGEtpk0GIBGd0ene8H+nfaxNCXQbKjz aGdwhaUWzbG59tXFKVxsqc3JyhA8bp2+SNzXg7n/TeLUSOIB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSvjmIcUo//VmjWVX7FUwvkFHg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjdiYmQ1YzYtZDg3MS0z Mjg5LTgyZjQtNmFhMmQwNzJjZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYQQWh1Ve4RGPPeC/9rQXTuAZStFsnF56dvVK4N6EIuefXRHUWM5l28 m9UhIAb4F9U7sIhcad+YM3hmLxDkkq/ktrTQ5p27yffHx9RyBG+aQnVPm7RNXg1c 1ilzRZi6/y1iriEW1c8FfVrS+T1NA/pGeXyk2wEEtEB1msY44LJmnpR3mzUV3k8K fIXgSlwev/y2sLAoHxHSzxARvk+0SZsU1QkPo4YofEUbOC1AbmmUm51oSylnPHnS CQGHYGIpCd5zV/2joraeUOTT3bIJWm9LMVRQ/n7KKPK6k9Xf1vpI08Ov/2Z1uBt/ N0EIO72h2CkPijICS1ek/gN2pKNW80M= -----END CERTIFICATE-----Generated at Sun Nov 2 04:27:02 2025 by rpki-client