$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1138e7e-406f-3f14-aa6a-1c988983a57f.roa File: f1138e7e-406f-3f14-aa6a-1c988983a57f.roa (raw, json) Hash identifier: FHl62sfJcbcLFL41UZdUYa2f9A5YIZzaxy+lnqcLdJ0= Subject key identifier: 1C:D2:30:DC:5C:65:49:31:76:E0:7D:0B:F5:AE:5D:AD:84:52:6F:0D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFD7DB3663F5323B6A480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1138e7e-406f-3f14-aa6a-1c988983a57f.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fd:7d:b3:66:3f:53:23:b6:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=c36aebd7-8fed-448a-bfc8-647719e8d641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:dd:53:71:87:6e:38:60:93:8f:e2:a7:f9: ec:83:8f:64:eb:4d:2f:3a:02:5b:a0:83:d2:13:8c: 45:35:ef:67:70:4c:aa:b2:3a:4f:5f:54:56:fa:d4: ae:3e:0f:5e:39:af:8f:cd:f7:75:5c:cb:50:2b:86: b8:7a:4d:6f:8a:0b:bc:08:a7:5d:de:40:42:24:5b: 0e:ce:8e:92:63:2d:ae:66:fe:a8:0e:bf:65:a2:1f: 6b:c9:09:2b:d3:cc:13:a0:48:85:d9:f7:fd:d3:b2: 8a:ac:f4:26:fe:fc:90:8a:ba:f2:93:2e:b7:2d:48: bc:80:b1:ac:a1:07:27:89:3f:21:75:d3:a8:b6:e0: 30:2b:d4:2b:a7:05:5b:56:58:46:03:c8:ff:25:2d: d5:d0:45:c5:ae:5a:47:28:7e:88:dd:14:3c:b2:75: ab:a4:9d:b0:13:24:89:78:55:a7:50:a8:02:f5:4a: 7b:96:36:74:a3:70:ea:3a:6b:da:a9:86:fd:60:df: 69:f9:46:79:6a:3a:06:75:08:32:e5:dd:3d:7f:bb: f9:4e:14:38:80:7a:29:e2:ee:7e:a5:9d:42:9d:62: 21:d1:69:04:d4:b2:a2:83:01:bd:d5:fa:83:c2:6f: e4:a5:67:c8:44:a3:0d:bb:b3:8f:96:9e:1a:a0:91: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D2:30:DC:5C:65:49:31:76:E0:7D:0B:F5:AE:5D:AD:84:52:6F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1138e7e-406f-3f14-aa6a-1c988983a57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:65:db:c1:3b:6d:89:f8:a4:c6:47:36:40:15:ed:e2:92:f8: 1c:a7:f4:db:6f:07:15:53:38:c4:75:38:98:e0:f6:de:86:27: be:8d:22:ac:f3:f7:39:cd:bf:ac:fa:f5:7d:4e:23:d2:7e:47: 1e:6c:28:01:08:18:e6:5a:94:98:9b:3b:9f:59:f1:dc:e5:ed: 36:bd:88:77:f1:bf:81:75:f3:91:b6:a1:45:3e:b9:26:58:bf: 39:5a:cc:ff:2a:76:e3:c2:e4:91:91:b6:92:15:54:02:78:ef: 07:17:16:29:65:49:f3:da:8b:96:30:0c:73:b5:7f:63:f0:b1: a8:90:7f:0e:16:75:8a:ac:df:47:49:ce:9b:3e:4c:c6:cf:cd: 34:3a:24:f2:f6:0a:35:a7:ab:64:32:2d:be:74:a1:f3:a8:51: 0a:08:84:02:eb:42:99:51:a9:75:2b:d0:f8:cc:b2:78:0a:0c: c4:10:32:c0:42:8f:83:48:27:7c:a7:76:e1:61:a0:af:5f:fb: b6:4f:67:05:67:e0:b1:ac:91:1d:42:f8:56:93:4f:14:23:94: ca:6a:6b:96:ac:6f:7c:1c:81:f0:12:35:a8:4b:aa:e2:fe:56: 39:e5:e1:96:2a:3b:04:a0:fe:aa:df:65:46:31:a3:ca:57:c4: 4c:50:64:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP19s2Y/UyO2pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YzM2YWViZDctOGZlZC00NDhhLWJmYzgtNjQ3NzE5ZThkNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGjdU3GHbjhgk4/ip/nsg49k600vOgJboIPS E4xFNe9ncEyqsjpPX1RW+tSuPg9eOa+Pzfd1XMtQK4a4ek1vigu8CKdd3kBCJFsO zo6SYy2uZv6oDr9loh9ryQkr08wToEiF2ff907KKrPQm/vyQirryky63LUi8gLGs oQcniT8hddOotuAwK9QrpwVbVlhGA8j/JS3V0EXFrlpHKH6I3RQ8snWrpJ2wEySJ eFWnUKgC9Up7ljZ0o3DqOmvaqYb9YN9p+UZ5ajoGdQgy5d09f7v5ThQ4gHop4u5+ pZ1CnWIh0WkE1LKigwG91fqDwm/kpWfIRKMNu7OPlp4aoJEh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzSMNxcZUkxduB9C/WuXa2EUm8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjExMzhlN2UtNDA2Zi0z ZjE0LWFhNmEtMWM5ODg5ODNhNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExl28E7bYn4pMZHNkAV7eKS+Byn9NtvBxVTOMR1OJjg9t6GJ76NIqzz 9znNv6z69X1OI9J+Rx5sKAEIGOZalJibO59Z8dzl7Ta9iHfxv4F185G2oUU+uSZY vzlazP8qduPC5JGRtpIVVAJ47wcXFillSfPai5YwDHO1f2PwsaiQfw4WdYqs30dJ zps+TMbPzTQ6JPL2CjWnq2QyLb50ofOoUQoIhALrQplRqXUr0PjMsngKDMQQMsBC j4NIJ3ynduFhoK9f+7ZPZwVn4LGskR1C+FaTTxQjlMpqa5asb3wcgfASNahLquL+ Vjnl4ZYqOwSg/qrfZUYxo8pXxExQZD4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:38 2025 by rpki-client