$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa File: b833d3b3-a64d-3401-a451-0e437bc93ba4.roa (raw, json) Hash identifier: hAVrxfPYSEMOMgoRWCyjrlH9V7Dsw++7sEDOTOOeLQU= Subject key identifier: 4F:EA:7F:22:C7:27:1F:27:57:90:EE:F2:E0:B1:FC:6F:C7:43:42:0F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0B4DD29EC2EE87895F82 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0b:4d:d2:9e:c2:ee:87:89:5f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=ed6fbe97-3644-4536-acff-d3f8d8424193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:20:49:e8:d1:f2:c7:ab:03:84:27:e8:83:d1: a9:8b:92:57:2b:e6:6f:86:fe:0f:61:67:cf:bf:6d: 73:76:f1:06:78:a2:c5:11:a9:0e:ad:eb:ae:4a:92: f6:02:38:2e:d0:fa:ea:45:aa:b7:de:41:eb:1b:ad: 01:b6:5d:72:bc:97:6c:68:40:6f:8b:58:48:7f:1b: fa:12:97:b5:d2:8f:27:df:5f:39:65:64:fd:9d:bf: 87:e2:df:aa:7d:a6:50:84:ad:3d:b9:81:89:bf:ec: 91:86:f0:31:6c:c3:57:4a:77:0a:db:03:1e:6f:cf: 1b:21:cd:d9:8c:0c:bd:f4:79:fe:91:13:60:2a:fd: 01:16:d2:6c:7a:21:c1:c0:91:0c:47:35:c4:57:59: ee:95:02:3c:82:c4:cb:f3:89:99:e9:e3:12:e2:a5: 66:04:e5:a7:82:2b:e2:24:12:f2:a5:48:e2:b3:40: de:bb:30:2f:28:ca:e7:12:21:09:61:bf:85:db:7e: 54:c9:77:5e:6b:d2:c8:7f:37:ff:7f:e8:fc:cf:3e: c5:11:9f:ef:b6:cb:04:37:fe:cc:8c:c9:2a:9d:72: f9:2a:2e:65:16:23:71:de:71:55:50:ee:7e:12:db: c4:12:03:c7:b5:1f:09:b7:73:2e:13:87:d5:d9:c3: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EA:7F:22:C7:27:1F:27:57:90:EE:F2:E0:B1:FC:6F:C7:43:42:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:da:4e:d6:5b:35:3b:89:0a:20:0c:fd:97:98:6d:c0:48:73: e2:38:ea:f3:8b:9e:57:72:29:86:ab:02:97:93:58:9c:33:ca: c9:4e:c9:4f:fb:fb:cd:60:22:bf:44:6c:fb:ab:10:bd:da:75: 2a:48:49:15:bc:91:88:8e:45:45:e4:78:e3:ef:e5:b9:d8:8f: 1c:63:81:e1:cc:da:1c:b1:f5:2a:5a:f7:84:67:a9:4c:55:59: 50:39:b2:57:57:31:4a:80:bc:34:04:e2:6d:52:38:91:15:55: 4f:05:f7:8a:2e:02:90:c5:d6:e9:aa:ca:1b:ed:01:26:08:6d: d8:40:3f:f9:aa:95:21:94:89:6b:7c:f7:dd:07:b3:3b:52:7c: 38:16:b6:f1:67:e8:4d:03:38:34:2d:b6:5d:4b:d4:b1:96:5f: 02:67:1e:ca:e8:bd:d8:49:c1:31:60:b6:39:ed:d3:2c:41:c6: 7e:69:ef:0c:c6:cf:aa:2d:b6:09:9e:2a:43:f6:b6:d1:e8:6f: be:1d:03:a9:d9:f3:6f:ba:7a:9a:d8:45:7d:89:7e:e5:b0:bf: 44:1c:a4:ae:a0:3d:fa:79:eb:50:fa:55:0d:6a:d1:99:b4:e4: 27:a3:f1:73:65:e7:9a:8c:ca:5c:35:9f:39:ba:5e:d4:47:4f: 1f:63:d4:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQtN0p7C7oeJX4IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZWQ2ZmJlOTctMzY0NC00NTM2LWFjZmYtZDNmOGQ4NDI0MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSBJ6NHyx6sDhCfog9Gpi5JXK+Zvhv4PYWfP v21zdvEGeKLFEakOreuuSpL2Ajgu0PrqRaq33kHrG60Btl1yvJdsaEBvi1hIfxv6 Epe10o8n3185ZWT9nb+H4t+qfaZQhK09uYGJv+yRhvAxbMNXSncK2wMeb88bIc3Z jAy99Hn+kRNgKv0BFtJseiHBwJEMRzXEV1nulQI8gsTL84mZ6eMS4qVmBOWngivi JBLypUjis0DeuzAvKMrnEiEJYb+F235UyXdea9LIfzf/f+j8zz7FEZ/vtssEN/7M jMkqnXL5Ki5lFiNx3nFVUO5+EtvEEgPHtR8Jt3MuE4fV2cO5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/qfyLHJx8nV5Du8uCx/G/HQ0IPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjgzM2QzYjMtYTY0ZC0z NDAxLWE0NTEtMGU0MzdiYzkzYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDaTtZbNTuJCiAM/ZeYbcBIc+I46vOLnldyKYarApeTWJwzyslOyU/7 +81gIr9EbPurEL3adSpISRW8kYiORUXkeOPv5bnYjxxjgeHM2hyx9Spa94RnqUxV WVA5sldXMUqAvDQE4m1SOJEVVU8F94ouApDF1umqyhvtASYIbdhAP/mqlSGUiWt8 990HsztSfDgWtvFn6E0DODQttl1L1LGWXwJnHsrovdhJwTFgtjnt0yxBxn5p7wzG z6ottgmeKkP2ttHob74dA6nZ82+6eprYRX2JfuWwv0QcpK6gPfp561D6VQ1q0Zm0 5Cej8XNl55qMylw1nzm6XtRHTx9j1I8= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:01 2025 by rpki-client