$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa File: f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa (raw, json) Hash identifier: jvzV6fffN9oH4Ae75H1OfJbDrQ7fJQ9+4Irjk6q27o8= Subject key identifier: 64:BF:D2:72:0E:76:72:2B:42:40:5D:A8:EE:EF:90:1E:9E:E5:50:9F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8783325B251F2BF21D7B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:83:32:5b:25:1f:2b:f2:1d:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=590a2e5a-57d5-4fe0-824e-99eaf7ebfcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:37:a0:c0:27:54:f5:7c:6a:14:e0:d3:0e: ec:2d:70:c9:36:6a:9d:6d:57:cf:89:e2:f9:7e:0d: 47:8b:d3:3c:ac:fb:1e:11:a5:a6:25:0c:b2:e4:63: a5:dd:3b:9a:b0:af:41:0b:4d:d7:21:6d:d1:3e:93: 89:b3:38:e5:d6:28:66:66:9c:02:1b:83:3a:5e:38: 20:13:d2:67:be:c8:1e:f5:63:4c:55:2a:08:05:9f: 25:3e:c2:58:f4:83:ea:29:a7:9d:84:7f:d0:0d:74: 08:ec:dd:a7:42:6c:7e:2a:5a:fe:44:48:85:45:da: 3f:9c:68:47:16:06:c6:c0:e3:43:e9:18:d4:1b:b4: 9d:7c:3d:45:9c:88:0c:c0:4e:41:f5:1b:92:eb:49: aa:e3:12:fd:c6:96:09:12:30:3b:dd:a2:42:53:68: 7c:ef:0f:fa:1e:8e:a6:14:38:92:af:db:9c:4e:6a: 3e:22:fe:fd:a0:62:5d:07:a6:92:f9:04:ac:3d:8d: 67:9c:4e:19:16:8d:8c:33:81:f3:15:11:a3:e6:e4: 76:3f:ad:f6:62:25:bf:0e:82:28:0f:17:a6:59:33: a0:c9:f8:00:73:51:2f:17:b0:7b:ce:81:37:88:01: 95:74:ef:1d:e3:62:63:be:37:7d:23:bf:79:41:47: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:D2:72:0E:76:72:2B:42:40:5D:A8:EE:EF:90:1E:9E:E5:50:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:46:5e:fe:4d:46:fb:3f:3d:58:44:ab:5e:d3:0a:c7:bd:28: bd:77:0f:02:35:ef:34:9e:a6:61:fb:40:0c:3a:88:7a:03:f4: 31:84:69:17:b9:c9:12:12:8d:52:12:e5:ae:23:79:66:a8:99: 67:22:d8:03:8a:3c:eb:71:d7:5a:6b:48:0e:da:cb:68:4b:fc: 85:07:90:08:b7:5c:58:2c:f1:d6:4f:25:53:c8:81:19:4d:be: d5:76:5c:93:a3:15:2e:e7:90:14:58:e6:12:d6:d0:52:52:d7: 27:70:96:eb:56:f4:e1:f0:8a:c9:cb:ad:48:a7:37:ec:fc:53: 26:2c:6f:6b:4f:78:77:ae:0c:e2:49:8c:df:a4:72:db:48:c9: 42:02:cb:b1:41:b6:6d:7b:07:39:c8:47:ef:93:f1:67:21:63: da:52:44:24:bc:01:95:92:1f:e6:09:60:86:93:e7:67:52:57: ac:a4:13:3f:d9:bc:91:4c:98:6c:84:a1:00:84:58:a5:fd:9f: c8:81:50:fd:78:72:ef:91:38:3d:d0:3f:da:b5:91:07:6d:77: fd:0d:16:9d:a6:1d:17:c4:13:c5:bd:a2:d7:5b:45:b7:a8:b8: 4f:02:a1:31:0d:33:ac:18:10:0b:7c:d4:68:1f:e5:89:ad:a5: 37:9a:2a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4MyWyUfK/Ide4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NTkwYTJlNWEtNTdkNS00ZmUwLTgyNGUtOTllYWY3ZWJmY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG43oMAnVPV8ahTg0w7sLXDJNmqdbVfPieL5 fg1Hi9M8rPseEaWmJQyy5GOl3TuasK9BC03XIW3RPpOJszjl1ihmZpwCG4M6Xjgg E9Jnvsge9WNMVSoIBZ8lPsJY9IPqKaedhH/QDXQI7N2nQmx+Klr+REiFRdo/nGhH FgbGwOND6RjUG7SdfD1FnIgMwE5B9RuS60mq4xL9xpYJEjA73aJCU2h87w/6Ho6m FDiSr9ucTmo+Iv79oGJdB6aS+QSsPY1nnE4ZFo2MM4HzFRGj5uR2P632YiW/DoIo DxemWTOgyfgAc1EvF7B7zoE3iAGVdO8d42Jjvjd9I795QUdGcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS/0nIOdnIrQkBdqO7vkB6e5VCfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjY0YWVjZWUtYmE1ZC0z ZWJhLWI5NjgtMDBlZTRhZjk2ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5GXv5NRvs/PVhEq17TCse9KL13DwI17zSepmH7QAw6iHoD9DGEaRe5 yRISjVIS5a4jeWaomWci2AOKPOtx11prSA7ay2hL/IUHkAi3XFgs8dZPJVPIgRlN vtV2XJOjFS7nkBRY5hLW0FJS1ydwlutW9OHwisnLrUinN+z8UyYsb2tPeHeuDOJJ jN+kcttIyUICy7FBtm17BznIR++T8WchY9pSRCS8AZWSH+YJYIaT52dSV6ykEz/Z vJFMmGyEoQCEWKX9n8iBUP14cu+ROD3QP9q1kQdtd/0NFp2mHRfEE8W9otdbRbeo uE8CoTENM6wYEAt81Ggf5YmtpTeaKjE= -----END CERTIFICATE-----Generated at Wed Sep 23 02:12:19 2026 by rpki-client