$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f439b9f0-f6df-362e-b2b2-229de0bec1eb.roa File: f439b9f0-f6df-362e-b2b2-229de0bec1eb.roa (raw, json) Hash identifier: r+3pbVpBxbuFRwtydP02oiIT5IcNIEztOPtRgJokw8U= Subject key identifier: 1F:6F:5E:34:1B:BC:77:96:F1:3B:EF:BA:2C:D7:34:1A:E5:E0:3E:3C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C63A5E3AD79FD1352160 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f439b9f0-f6df-362e-b2b2-229de0bec1eb.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 104.29.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c6:3a:5e:3a:d7:9f:d1:35:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=8bfd66ad-1384-426c-a99c-f06d44bfb94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:01:ad:11:55:cf:c5:30:5c:e2:af:02:0b: 41:b6:5e:9d:4c:d0:9f:1a:36:84:f8:68:5d:7b:6c: 11:9b:8d:7a:f7:83:f6:9a:29:31:94:dd:29:0e:78: 78:08:30:34:55:71:10:6f:8f:93:08:73:f6:7b:38: a1:05:2c:d2:af:10:72:2d:3f:be:90:18:7f:28:70: a8:bb:a8:50:1a:da:f6:08:77:fc:f2:ad:9f:03:fd: 25:db:c9:e6:51:b4:db:ec:0c:c9:f5:13:1c:e9:f5: 84:bf:b4:d7:8d:12:ae:78:71:60:7d:53:0f:95:96: ba:ed:c9:14:39:e2:65:bd:02:c4:e5:2d:6f:4e:87: e7:63:41:80:e0:4c:33:6a:6c:af:36:73:fa:30:a2: aa:25:80:b9:41:94:97:66:4b:c3:8d:3b:28:4b:8f: 21:0b:bd:dd:95:55:86:71:e3:02:1e:9e:fe:72:31: 76:14:76:85:53:4e:fb:d6:76:bd:4a:f2:17:e6:35: 9d:89:28:d4:f0:42:2d:57:cc:1c:c7:55:86:d4:d3: 49:5c:0f:b2:a2:a6:80:dd:5c:4f:8c:4c:03:ff:3d: 8a:a0:d5:0e:06:3f:39:8f:11:07:1c:b9:63:74:91: d5:fd:10:95:05:dd:ec:08:b0:e9:c9:3c:a2:54:c0: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6F:5E:34:1B:BC:77:96:F1:3B:EF:BA:2C:D7:34:1A:E5:E0:3E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f439b9f0-f6df-362e-b2b2-229de0bec1eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:65:d1:9b:1a:54:e2:3e:49:55:be:0d:16:d7:25:50:4a:42: e4:37:96:ec:21:96:d8:3f:10:40:ca:a8:ab:4e:c4:d5:01:c6: 0c:c1:7b:8c:6a:2c:a7:f5:70:4a:de:fe:e9:6a:93:a6:33:4b: 67:32:13:cb:18:df:9b:31:12:c4:aa:02:81:11:28:c2:8f:55: a6:b2:5c:1d:7b:db:fc:b3:81:bd:e8:84:b2:4e:ac:f2:20:0e: 6e:53:c2:af:8a:6a:e5:20:b4:32:90:41:70:59:ed:82:5e:43: 10:fa:38:a4:b4:38:88:37:01:33:da:79:67:df:13:0c:09:8e: 79:bb:ce:f7:fa:9c:98:b0:b8:2a:ca:06:4e:ce:a5:03:85:31: e1:e6:4f:1e:95:bb:40:59:16:f4:07:b0:3e:37:b9:ab:b9:bc: d6:0c:74:5c:70:df:36:eb:a8:ba:d7:f6:52:88:78:a5:20:5f: b6:27:a1:d4:2d:d4:3c:84:2f:41:01:a5:04:84:90:47:65:a8: 5d:bd:0a:cf:aa:20:bb:8e:b1:47:36:03:06:df:0a:3e:43:fd: 11:a9:5c:dc:46:c9:08:77:4a:d3:3d:7a:d1:6d:38:0e:c6:c8: 7f:7f:1b:2d:3d:d2:c1:d8:f6:d9:4f:f1:89:03:7b:56:73:b5: e2:85:fe:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8Y6XjrXn9E1IWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OGJmZDY2YWQtMTM4NC00MjZjLWE5OWMtZjA2ZDQ0YmZiOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLwBrRFVz8UwXOKvAgtBtl6dTNCfGjaE+Ghd e2wRm41694P2mikxlN0pDnh4CDA0VXEQb4+TCHP2ezihBSzSrxByLT++kBh/KHCo u6hQGtr2CHf88q2fA/0l28nmUbTb7AzJ9RMc6fWEv7TXjRKueHFgfVMPlZa67ckU OeJlvQLE5S1vTofnY0GA4EwzamyvNnP6MKKqJYC5QZSXZkvDjTsoS48hC73dlVWG ceMCHp7+cjF2FHaFU0771na9SvIX5jWdiSjU8EItV8wcx1WG1NNJXA+yoqaA3VxP jEwD/z2KoNUOBj85jxEHHLljdJHV/RCVBd3sCLDpyTyiVMBdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9vXjQbvHeW8TvvuizXNBrl4D48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQzOWI5ZjAtZjZkZi0z NjJlLWIyYjItMjI5ZGUwYmVjMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARl0ZsaVOI+SVW+DRbXJVBKQuQ3luwhltg/EEDKqKtOxNUBxgzBe4xq LKf1cEre/ulqk6YzS2cyE8sY35sxEsSqAoERKMKPVaayXB172/yzgb3ohLJOrPIg Dm5Twq+KauUgtDKQQXBZ7YJeQxD6OKS0OIg3ATPaeWffEwwJjnm7zvf6nJiwuCrK Bk7OpQOFMeHmTx6Vu0BZFvQHsD43uau5vNYMdFxw3zbrqLrX9lKIeKUgX7YnodQt 1DyEL0EBpQSEkEdlqF29Cs+qILuOsUc2AwbfCj5D/RGpXNxGyQh3StM9etFtOA7G yH9/Gy090sHY9tlP8YkDe1ZzteKF/gE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:07 2025 by rpki-client