$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4aa5094-f2b9-3bc4-9820-34a4c7c2c63c.roa File: e4aa5094-f2b9-3bc4-9820-34a4c7c2c63c.roa (raw, json) Hash identifier: OkehGIeiS1k6Mpbl9q7MXMUu37ZmBOv4hUBoTkFxiB8= Subject key identifier: FF:73:61:5C:5F:A2:14:D5:E5:E6:D4:CD:20:A0:E0:46:94:86:E5:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8DD885786F5F5AEC1506CEC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4aa5094-f2b9-3bc4-9820-34a4c7c2c63c.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 104.29.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:85:78:6f:5f:5a:ec:15:06:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=f02a7309-087d-4d38-84f7-dc2c0ba3a6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:fe:e5:9e:97:1c:3c:41:2a:1c:f6:34:be: b1:c7:dd:61:32:55:5a:38:b0:a0:53:46:13:ca:95: af:bf:86:ec:57:b5:d1:60:49:12:6b:35:3a:13:68: 8e:aa:9c:c8:f0:67:89:54:22:8f:d5:bd:6a:16:d3: 68:12:3a:3d:8f:5c:f1:e8:6d:86:8d:76:34:47:b7: e9:de:19:bb:a3:79:0f:a2:fe:c4:45:50:73:93:cd: ab:4a:18:a4:41:0c:20:31:f4:11:d7:62:71:74:47: 24:50:96:e3:b8:b5:bf:59:80:7b:bb:1b:d6:01:73: f3:bd:db:b5:09:74:ff:88:bb:97:95:a5:2c:68:6a: e7:50:12:4b:58:81:8a:c4:b4:ad:16:2b:03:d7:09: f0:cc:b9:14:3e:35:31:e8:24:9d:99:47:26:d2:68: c7:eb:ec:24:c5:87:62:72:ae:23:0c:bb:c4:eb:f6: 98:9a:b9:11:7f:18:ca:77:32:e8:63:e5:bb:51:cb: 43:a4:25:d6:76:af:95:dd:2a:f9:66:ac:78:c4:4c: 1a:dd:8d:9f:2b:14:bd:43:1c:f9:f8:8d:aa:39:f9: 3c:80:80:46:57:7d:c0:5d:00:2e:c0:ea:54:39:a0: af:cc:ec:cb:d8:fb:b2:e4:be:45:d6:b8:98:56:6e: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:73:61:5C:5F:A2:14:D5:E5:E6:D4:CD:20:A0:E0:46:94:86:E5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4aa5094-f2b9-3bc4-9820-34a4c7c2c63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1b:72:33:f4:aa:e1:b4:3b:7e:f7:6c:77:87:a5:89:f9:24: 56:7e:8c:8e:ad:e6:f1:2a:2b:6c:3e:5f:92:85:a1:6d:13:f5: d4:0f:5b:f9:16:69:e4:42:7d:06:69:f2:6b:ac:5f:a2:c9:68: 34:a4:c5:ad:b3:fb:5d:0a:87:bc:68:71:d6:3e:a6:89:9b:cb: de:32:b9:3e:ec:52:50:1d:08:c6:e5:8f:72:94:7f:65:a9:54: 26:63:27:e4:96:80:32:b4:25:9d:3b:25:68:66:56:3a:b8:b4: de:f2:b5:65:87:81:53:17:e9:a8:6d:53:9e:6e:ee:86:1e:16: d2:d2:11:9e:18:88:f1:dc:0e:37:fe:18:66:90:f7:8c:98:bb: ec:da:c1:a9:d6:4f:bc:07:e3:9c:58:fe:39:b7:ac:e5:53:50: 1a:37:62:62:d9:81:f3:34:1b:c1:58:1e:0e:a7:12:0b:f1:86: dd:2a:cd:93:c9:10:63:55:e6:22:0d:f7:39:e1:c2:64:2e:bc: e1:62:e0:b1:3a:d1:b0:28:85:e3:99:b6:c2:29:c3:66:31:4b: 6f:43:3b:47:e6:db:f4:76:aa:2a:7e:5d:78:37:16:7e:9d:ef: 72:d3:a7:39:93:96:0c:3f:a3:02:22:8f:c6:29:22:f9:e6:5d: eb:46:0c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2IV4b19a7BUGzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZjAyYTczMDktMDg3ZC00ZDM4LTg0ZjctZGMyYzBiYTNhNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKP+5Z6XHDxBKhz2NL6xx91hMlVaOLCgU0YT ypWvv4bsV7XRYEkSazU6E2iOqpzI8GeJVCKP1b1qFtNoEjo9j1zx6G2GjXY0R7fp 3hm7o3kPov7ERVBzk82rShikQQwgMfQR12JxdEckUJbjuLW/WYB7uxvWAXPzvdu1 CXT/iLuXlaUsaGrnUBJLWIGKxLStFisD1wnwzLkUPjUx6CSdmUcm0mjH6+wkxYdi cq4jDLvE6/aYmrkRfxjKdzLoY+W7UctDpCXWdq+V3Sr5Zqx4xEwa3Y2fKxS9Qxz5 +I2qOfk8gIBGV33AXQAuwOpUOaCvzOzL2Puy5L5F1riYVm4NyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9zYVxfohTV5ebUzSCg4EaUhuXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTRhYTUwOTQtZjJiOS0z YmM0LTk4MjAtMzRhNGM3YzJjNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAbcjP0quG0O373bHeHpYn5JFZ+jI6t5vEqK2w+X5KFoW0T9dQPW/kW aeRCfQZp8musX6LJaDSkxa2z+10Kh7xocdY+pomby94yuT7sUlAdCMblj3KUf2Wp VCZjJ+SWgDK0JZ07JWhmVjq4tN7ytWWHgVMX6ahtU55u7oYeFtLSEZ4YiPHcDjf+ GGaQ94yYu+zawanWT7wH45xY/jm3rOVTUBo3YmLZgfM0G8FYHg6nEgvxht0qzZPJ EGNV5iIN9znhwmQuvOFi4LE60bAoheOZtsIpw2YxS29DO0fm2/R2qip+XXg3Fn6d 73LTpzmTlgw/owIij8YpIvnmXetGDBo= -----END CERTIFICATE-----Generated at Wed Oct 28 14:22:42 2026 by rpki-client