$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa File: f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa (raw, json) Hash identifier: EKpPYhzwoPaXCi2VvmdtKSjA4ilsNbQiAry/XJovBWI= Subject key identifier: 14:F6:0A:BA:91:7F:F1:4E:BE:EA:B6:15:17:4E:D3:99:40:B4:A7:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877088C71EA3B200C42DE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:70:88:c7:1e:a3:b2:00:c4:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=16f57746-5bd4-4974-bc3c-83c7a0a27cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:4f:12:59:71:0f:72:49:b2:31:17:fc:8f: 28:72:30:65:99:30:a9:c6:39:57:3c:e8:42:ba:fb: 6b:cd:64:92:a3:3e:1a:70:8f:b7:a2:84:e2:12:a5: 37:24:82:71:6f:50:23:fa:06:84:b6:48:fd:9d:dd: ec:fe:9c:9a:49:0d:0b:01:8f:22:e1:b8:14:ce:8c: dd:10:c3:8a:26:7e:78:7b:24:be:96:25:b4:91:c0: f0:02:c1:6e:ac:71:b4:5e:d5:81:bb:23:29:3c:2f: 36:ba:6e:98:78:df:3b:7a:8c:f3:0f:0c:0a:27:77: 46:57:a5:87:ec:54:95:fb:c2:5b:e5:38:d8:d9:10: 22:55:90:58:ee:d5:ce:a3:d2:b6:38:c2:b8:ab:f1: 82:4c:40:19:3e:5b:bc:0d:a2:2f:ee:85:e5:e0:11: 0d:70:e1:f4:86:c2:4b:33:9e:80:64:46:5b:9f:93: 71:fd:6d:64:4c:d6:ab:4e:9d:11:43:b4:2c:81:f1: 5d:aa:74:20:28:79:d4:98:63:41:59:2b:98:fe:5d: 98:7f:04:69:d0:0f:d6:c2:83:02:94:2b:b3:8e:7a: db:41:6f:d0:99:6b:7d:20:2d:29:e1:38:ca:58:f1: d5:70:6c:7d:7f:4b:ec:a5:0f:48:2d:8e:90:5f:20: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:0A:BA:91:7F:F1:4E:BE:EA:B6:15:17:4E:D3:99:40:B4:A7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:66:9e:66:77:58:08:86:77:ef:20:85:fe:20:d0:53:94:4b: a4:dc:ad:da:f6:89:5e:16:40:5e:72:12:60:e5:ca:cf:63:e4: ca:11:47:43:4d:40:57:25:7c:c6:98:ab:15:c8:05:43:85:25: 25:e6:5f:ee:c1:53:33:8e:5c:ba:f7:da:f1:36:2e:e8:e7:35: 5b:77:0f:d4:3c:7d:3a:48:7c:9a:d1:ec:3c:43:26:ca:f3:5a: 4d:d5:5d:14:d8:80:c9:84:85:fc:6d:6d:a4:48:69:d6:5e:1a: cb:6b:2d:73:46:5a:92:d8:0f:0c:55:98:cd:07:8a:fd:c6:65: 5a:5c:89:f7:47:b1:fe:d9:bd:33:8a:76:03:37:2e:9e:93:b2: be:9b:36:5a:a9:0e:ab:c2:f4:53:30:f0:05:4e:c4:2c:69:58: cd:ae:78:29:64:01:ef:2e:7c:61:e1:f0:81:0c:c8:34:bd:52: 52:47:11:38:92:af:38:db:00:84:d3:77:14:f6:48:aa:ce:82: 7a:87:35:95:b8:cc:1a:73:46:24:1c:56:9e:a0:e2:3b:70:0e: ea:b3:a7:41:93:f7:0e:06:ee:f0:26:a9:35:e6:e8:08:7e:97: e4:3d:a2:01:5b:86:33:cf:81:15:0a:fe:18:ed:20:e0:39:b4: b2:20:79:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3CIxx6jsgDELeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MTZmNTc3NDYtNWJkNC00OTc0LWJjM2MtODNjN2EwYTI3Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6NPEllxD3JJsjEX/I8ocjBlmTCpxjlXPOhC uvtrzWSSoz4acI+3ooTiEqU3JIJxb1Aj+gaEtkj9nd3s/pyaSQ0LAY8i4bgUzozd EMOKJn54eyS+liW0kcDwAsFurHG0XtWBuyMpPC82um6YeN87eozzDwwKJ3dGV6WH 7FSV+8Jb5TjY2RAiVZBY7tXOo9K2OMK4q/GCTEAZPlu8DaIv7oXl4BENcOH0hsJL M56AZEZbn5Nx/W1kTNarTp0RQ7QsgfFdqnQgKHnUmGNBWSuY/l2YfwRp0A/WwoMC lCuzjnrbQW/QmWt9IC0p4TjKWPHVcGx9f0vspQ9ILY6QXyAf1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT2CrqRf/FOvuq2FRdO05lAtKdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjM5MWI4ZWItM2YzMS0z MmQ4LTlhNjItYjdlMDQ2YjU5ZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVmnmZ3WAiGd+8ghf4g0FOUS6Tcrdr2iV4WQF5yEmDlys9j5MoRR0NN QFclfMaYqxXIBUOFJSXmX+7BUzOOXLr32vE2LujnNVt3D9Q8fTpIfJrR7DxDJsrz Wk3VXRTYgMmEhfxtbaRIadZeGstrLXNGWpLYDwxVmM0Hiv3GZVpcifdHsf7ZvTOK dgM3Lp6Tsr6bNlqpDqvC9FMw8AVOxCxpWM2ueClkAe8ufGHh8IEMyDS9UlJHETiS rzjbAITTdxT2SKrOgnqHNZW4zBpzRiQcVp6g4jtwDuqzp0GT9w4G7vAmqTXm6Ah+ l+Q9ogFbhjPPgRUK/hjtIOA5tLIgeV4= -----END CERTIFICATE-----Generated at Tue Sep 22 06:12:57 2026 by rpki-client