$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c140af54-55a1-3814-8024-34190d1b2686.roa File: c140af54-55a1-3814-8024-34190d1b2686.roa (raw, json) Hash identifier: WddRm18xg3ayJ5Ze49Ymtoa+W7dlcuUNZWMsxskzZGA= Subject key identifier: 70:80:85:63:CC:32:AD:2A:29:ED:56:90:F5:45:A8:F5:68:EB:55:03 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BB07C6B05899C14CCF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c140af54-55a1-3814-8024-34190d1b2686.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bb:07:c6:b0:58:99:c1:4c:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=72d58a07-0df8-4948-b6ce-311bf0906c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:fb:24:4e:ed:28:d2:9e:da:17:9a:1d:38: 0e:1f:d9:6d:7a:62:d1:06:a9:f3:e8:eb:aa:d9:c8: 4d:57:e5:bb:f5:53:42:7a:b2:2b:4d:6d:c1:ce:90: 53:a1:08:ea:32:40:86:52:f5:60:c2:a5:ef:0f:d9: 2b:75:bc:5e:4e:55:5a:dd:83:9c:f5:e5:d2:32:ac: 77:50:6e:20:b0:75:34:a6:41:ae:b3:e8:9e:43:e4: fd:b0:0e:c3:56:c4:62:ee:f2:0f:76:60:53:45:e0: ac:ef:ca:9f:50:f6:96:8c:3f:26:9b:6d:1a:c4:27: 6f:4e:e6:75:25:09:54:ae:11:0f:46:0c:b0:bc:38: 5f:f6:fc:8b:01:2c:ca:09:5c:6e:e4:40:09:14:53: 4d:87:f5:41:bc:35:a2:f9:25:88:e3:5a:20:51:03: 24:5e:eb:5e:34:0a:31:15:c7:fc:1c:bd:ad:cf:4b: c7:7a:d9:b5:88:3e:25:5a:2d:d1:bb:54:56:25:06: 6c:50:b9:a4:bb:4d:c4:8b:9d:2a:b5:45:50:1d:7c: d5:40:67:3c:15:29:40:95:3a:a0:85:88:e5:e2:03: 38:96:44:18:05:02:e0:9f:5e:01:eb:a0:61:8a:12: 0c:02:61:aa:1d:ae:0a:43:ca:65:01:8f:db:e1:6c: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:85:63:CC:32:AD:2A:29:ED:56:90:F5:45:A8:F5:68:EB:55:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c140af54-55a1-3814-8024-34190d1b2686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e8:ce:74:59:08:3e:63:52:18:c6:ac:97:24:9d:b2:a6:72: 46:7a:9f:70:4d:d7:d2:88:83:40:04:53:e6:4b:7e:ac:ee:ac: 17:ba:d0:d4:87:80:e9:bb:66:c0:60:82:6e:e2:87:63:43:16: 65:66:8d:b8:83:37:c8:eb:a8:52:2a:4f:dc:2d:18:32:30:ca: 22:84:a6:e9:20:cb:7f:73:da:1b:3f:86:23:d1:85:82:60:88: ba:f6:73:f1:ce:08:fb:7a:80:92:de:fd:b1:2a:90:69:b6:72: b2:17:e2:b3:c3:ef:b7:47:1d:19:b7:6a:53:c1:a3:af:2e:01: e3:7b:26:19:df:39:e5:77:7f:4d:84:39:19:d2:81:e7:d3:5c: d5:b9:e9:5a:f6:89:9b:4d:e4:62:40:59:34:15:61:33:d9:5a: 22:28:7c:d2:83:6a:d7:6b:51:54:cd:42:72:5d:40:1d:fc:a9: 6d:5c:b4:e4:51:88:b9:05:58:d9:2e:ba:f0:de:2e:24:8a:6c: 41:3b:a2:db:39:cf:6e:0a:0a:fe:ac:9f:f6:6c:fb:cc:39:b0: e3:0a:cd:34:23:51:65:3a:6d:46:7e:2a:82:3c:6d:c0:0d:e7: 83:44:4d:07:05:6f:77:46:6e:7e:3c:3e:27:ef:09:83:e8:70: 88:96:42:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7sHxrBYmcFMz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NzJkNThhMDctMGRmOC00OTQ4LWI2Y2UtMzExYmYwOTA2YzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYz7JE7tKNKe2heaHTgOH9ltemLRBqnz6Ouq 2chNV+W79VNCerIrTW3BzpBToQjqMkCGUvVgwqXvD9krdbxeTlVa3YOc9eXSMqx3 UG4gsHU0pkGus+ieQ+T9sA7DVsRi7vIPdmBTReCs78qfUPaWjD8mm20axCdvTuZ1 JQlUrhEPRgywvDhf9vyLASzKCVxu5EAJFFNNh/VBvDWi+SWI41ogUQMkXuteNAox Fcf8HL2tz0vHetm1iD4lWi3Ru1RWJQZsULmku03Ei50qtUVQHXzVQGc8FSlAlTqg hYjl4gM4lkQYBQLgn14B66BhihIMAmGqHa4KQ8plAY/b4WwzDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCAhWPMMq0qKe1WkPVFqPVo61UDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzE0MGFmNTQtNTVhMS0z ODE0LTgwMjQtMzQxOTBkMWIyNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB03MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/oznRZCD5jUhjGrJcknbKmckZ6n3BN19KIg0AEU+ZLfqzurBe60NSH gOm7ZsBggm7ih2NDFmVmjbiDN8jrqFIqT9wtGDIwyiKEpukgy39z2hs/hiPRhYJg iLr2c/HOCPt6gJLe/bEqkGm2crIX4rPD77dHHRm3alPBo68uAeN7JhnfOeV3f02E ORnSgefTXNW56Vr2iZtN5GJAWTQVYTPZWiIofNKDatdrUVTNQnJdQB38qW1ctORR iLkFWNkuuvDeLiSKbEE7ots5z24KCv6sn/Zs+8w5sOMKzTQjUWU6bUZ+KoI8bcAN 54NETQcFb3dGbn48PifvCYPocIiWQo4= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:32 2025 by rpki-client