$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa File: f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa (raw, json) Hash identifier: tEBowfEko/WU9Bd5v3DJVfBmulvsbKGGspgmXsDRZuI= Subject key identifier: F3:45:6C:2C:72:3F:37:1B:56:7D:07:6F:78:51:D8:4E:7B:33:C2:F8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFE89004C7368733C9E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fe:89:00:4c:73:68:73:3c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=c47614ee-e173-42ff-9657-df523fc153ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:fc:40:06:78:06:b0:52:a5:e8:39:5c:05: 64:03:bd:4c:6f:1d:25:c6:34:ee:66:77:af:f2:10: 36:f0:20:43:91:4b:eb:4d:b9:6a:f1:83:44:7c:17: 25:b3:3c:c9:b7:be:6a:20:cb:8f:ec:34:36:b0:c3: cb:3c:57:5b:52:90:af:31:3b:c2:d2:8f:8d:8b:bb: 17:9e:bd:61:3e:cf:db:6a:3d:f3:ba:07:76:8b:77: 31:2b:b2:63:1e:51:b4:99:71:54:d4:57:32:8f:c6: cb:db:ac:f0:4e:d1:6d:e2:48:59:d5:01:a6:98:80: a8:07:d2:07:e1:17:3a:60:da:4e:e6:91:c8:ac:a3: 80:01:ad:66:21:3a:49:5e:27:85:3d:eb:7f:4c:2c: f6:fe:37:61:cb:58:32:93:13:e4:2f:18:0a:c6:80: a5:f8:9a:96:2a:61:d5:4b:05:5c:54:a2:cc:c2:15: 6c:02:d9:ae:ff:88:e1:f3:f4:c1:fb:21:e9:81:5e: ac:7c:83:c3:5f:10:90:64:b0:65:a3:77:f6:f0:8f: 0f:f0:36:1a:f6:3c:8f:0a:0c:a3:a5:81:83:d5:4f: ab:4e:6d:3c:84:77:d9:b1:f5:70:8e:a4:c4:84:c7: 1c:ed:72:07:ec:7e:5b:5b:e4:00:ce:76:d6:48:c5: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:6C:2C:72:3F:37:1B:56:7D:07:6F:78:51:D8:4E:7B:33:C2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f391b8eb-3f31-32d8-9a62-b7e046b59de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:de:52:4b:9e:df:78:67:2f:6e:14:7f:4b:82:57:6d:ae:23: 31:40:33:35:8c:9b:46:2e:81:2e:03:3e:3c:50:fd:7d:73:4c: f9:d3:4b:48:21:bc:6e:49:21:6a:b4:64:ac:92:5d:6b:d2:63: 6d:1e:13:d6:08:bf:76:64:c0:ad:95:8a:2d:9c:91:ac:c8:b5: 42:2f:5e:6f:37:04:8d:2e:02:10:38:50:ec:08:f0:08:35:a7: 1c:78:0d:02:36:8a:59:3a:e6:b7:e9:ee:8c:af:85:d3:a9:1c: f3:8b:b1:77:d2:01:21:50:41:ea:ea:22:fb:71:45:54:3d:02: aa:21:2d:54:b9:95:fa:43:f2:04:f5:54:e4:04:a8:5f:a6:22: 6e:a8:9f:5b:50:94:69:be:1a:d9:2f:b3:1d:ff:7c:3b:3a:9e: 24:5c:e7:ca:10:f9:b5:3d:de:ce:28:d8:99:b9:d7:08:9f:3a: 72:5c:26:ca:8a:e5:98:98:db:22:18:9c:95:60:d2:26:dd:c2: 4a:37:81:77:fa:0b:0b:ec:d2:34:ff:3f:95:ca:75:93:06:52: 4a:f6:76:b0:70:35:87:a4:e2:d3:e2:9f:f2:1e:cc:fb:77:d0: bc:20:fb:f9:87:f5:e5:13:27:ce:bb:f2:60:78:8f:09:d3:72: b3:ca:45:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP6JAExzaHM8ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YzQ3NjE0ZWUtZTE3My00MmZmLTk2NTctZGY1MjNmYzE1M2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Qr8QAZ4BrBSpeg5XAVkA71Mbx0lxjTuZnev 8hA28CBDkUvrTblq8YNEfBclszzJt75qIMuP7DQ2sMPLPFdbUpCvMTvC0o+Ni7sX nr1hPs/baj3zugd2i3cxK7JjHlG0mXFU1Fcyj8bL26zwTtFt4khZ1QGmmICoB9IH 4Rc6YNpO5pHIrKOAAa1mITpJXieFPet/TCz2/jdhy1gykxPkLxgKxoCl+JqWKmHV SwVcVKLMwhVsAtmu/4jh8/TB+yHpgV6sfIPDXxCQZLBlo3f28I8P8DYa9jyPCgyj pYGD1U+rTm08hHfZsfVwjqTEhMcc7XIH7H5bW+QAznbWSMUOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNFbCxyPzcbVn0Hb3hR2E57M8L4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjM5MWI4ZWItM2YzMS0z MmQ4LTlhNjItYjdlMDQ2YjU5ZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPeUkue33hnL24Uf0uCV22uIzFAMzWMm0YugS4DPjxQ/X1zTPnTS0gh vG5JIWq0ZKySXWvSY20eE9YIv3ZkwK2Vii2ckazItUIvXm83BI0uAhA4UOwI8Ag1 pxx4DQI2ilk65rfp7oyvhdOpHPOLsXfSASFQQerqIvtxRVQ9AqohLVS5lfpD8gT1 VOQEqF+mIm6on1tQlGm+Gtkvsx3/fDs6niRc58oQ+bU93s4o2Jm51wifOnJcJsqK 5ZiY2yIYnJVg0ibdwko3gXf6Cwvs0jT/P5XKdZMGUkr2drBwNYek4tPin/IezPt3 0Lwg+/mH9eUTJ8678mB4jwnTcrPKReI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:57 2025 by rpki-client