$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa File: f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa (raw, json) Hash identifier: nHEh0liZL4xw+9bd1BAeMXNwc/8L9IMAe0l0wvZxeRI= Subject key identifier: ED:72:5B:EF:CF:BD:1A:1E:AB:75:25:6A:50:FA:F3:8A:AD:F8:70:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876F95F40EB1BF01248180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.29.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6f:95:f4:0e:b1:bf:01:24:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=891a28ed-00ee-4f16-a870-c75d483296ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:b5:57:90:87:73:7c:29:eb:4c:d2:1d:01: a4:dd:23:4f:57:5d:19:50:70:3a:f2:b5:0b:f4:68: 50:a9:4a:1b:12:cf:fe:d7:3d:4a:2a:a9:4e:f9:de: bf:e4:17:22:27:ab:8c:d6:9b:f2:fa:3e:d5:10:ba: 0f:b2:fa:ab:88:44:fb:cc:40:87:db:e2:6a:be:41: ac:cc:ac:4c:2e:a4:b4:c9:a4:0b:05:d8:e8:49:b2: 22:47:d3:cc:b4:28:cf:04:24:34:c8:83:3d:a7:ff: d6:ee:61:29:f6:ff:ca:9c:48:32:8c:77:ff:1f:77: ea:0e:b7:db:05:d7:ff:92:89:40:d2:f8:c4:5e:7c: ca:b3:f7:c4:41:a5:0c:5e:2f:cb:72:40:46:f5:b3: 5f:21:6f:f7:77:89:84:49:4b:bc:b7:72:47:e9:52: cd:e3:d9:1c:40:fe:fc:10:a2:44:ff:25:18:f2:c4: e6:63:b5:61:66:05:98:ea:45:d2:9d:55:2f:ba:2c: 00:a7:20:bf:4e:a0:57:00:3a:a8:f2:80:7c:7e:26: 3b:96:a8:84:d8:93:7e:46:51:0a:14:05:c3:7b:3a: cd:08:3f:c3:87:d0:14:78:e5:05:cc:05:ff:51:39: 82:84:ac:24:62:f6:79:3b:ae:ab:6c:ff:f1:ac:67: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:72:5B:EF:CF:BD:1A:1E:AB:75:25:6A:50:FA:F3:8A:AD:F8:70:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:62:48:fe:d8:6d:1e:af:8c:92:65:60:3b:56:1b:1c:3d:46: 6d:4a:49:8b:71:06:58:77:1e:c5:8d:4a:fb:97:e1:3d:22:a4: eb:f6:bb:eb:95:8b:bc:3a:6a:73:71:20:bf:40:6b:6e:98:6e: 84:86:c0:13:2e:f6:e3:ca:67:22:91:59:73:97:46:47:3d:7a: 41:2e:f5:6a:c6:b0:10:33:0c:96:47:57:e4:d6:d0:c4:5b:e6: 07:65:0a:54:37:89:de:a7:d8:95:99:ce:a6:d0:5b:d8:0d:8c: 8c:e7:7a:ee:fe:1d:b0:96:2a:35:a3:ef:2d:24:3d:22:9a:bf: 0d:3d:4c:13:9c:ec:05:94:93:ec:0a:9c:3c:7a:5d:57:eb:38: 09:e9:9c:b7:14:6b:50:94:7b:b2:a0:33:73:ba:6e:c6:a9:b3: 04:62:bc:69:9e:6f:4e:87:8f:91:a4:ff:6f:3e:f2:59:e3:04: 13:41:ee:dd:c0:51:1b:e9:25:a2:89:ef:b4:f5:ea:af:46:3a: e5:6d:d0:c9:73:a1:ae:2f:eb:6d:b5:e7:f9:a2:7f:34:0e:f7: ab:27:b2:b1:89:f6:d6:f6:bd:44:4d:32:5e:a4:1f:2c:58:a3: 2a:60:cb:ee:93:bd:e0:c8:54:34:3f:a1:ed:6f:dd:75:2a:33: 04:c1:2a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2+V9A6xvwEkgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODkxYTI4ZWQtMDBlZS00ZjE2LWE4NzAtYzc1ZDQ4MzI5NmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktW1V5CHc3wp60zSHQGk3SNPV10ZUHA68rUL 9GhQqUobEs/+1z1KKqlO+d6/5BciJ6uM1pvy+j7VELoPsvqriET7zECH2+JqvkGs zKxMLqS0yaQLBdjoSbIiR9PMtCjPBCQ0yIM9p//W7mEp9v/KnEgyjHf/H3fqDrfb Bdf/kolA0vjEXnzKs/fEQaUMXi/LckBG9bNfIW/3d4mESUu8t3JH6VLN49kcQP78 EKJE/yUY8sTmY7VhZgWY6kXSnVUvuiwApyC/TqBXADqo8oB8fiY7lqiE2JN+RlEK FAXDezrNCD/Dh9AUeOUFzAX/UTmChKwkYvZ5O66rbP/xrGeqrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1yW+/PvRoeq3UlalD684qt+HD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjhhZDhhYjQtMDhkNi0z YjdiLWI5MWEtYmYwMmI3YjcxMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdiSP7YbR6vjJJlYDtWGxw9Rm1KSYtxBlh3HsWNSvuX4T0ipOv2u+uV i7w6anNxIL9Aa26YboSGwBMu9uPKZyKRWXOXRkc9ekEu9WrGsBAzDJZHV+TW0MRb 5gdlClQ3id6n2JWZzqbQW9gNjIzneu7+HbCWKjWj7y0kPSKavw09TBOc7AWUk+wK nDx6XVfrOAnpnLcUa1CUe7KgM3O6bsapswRivGmeb06Hj5Gk/28+8lnjBBNB7t3A URvpJaKJ77T16q9GOuVt0Mlzoa4v62215/mifzQO96snsrGJ9tb2vURNMl6kHyxY oypgy+6TveDIVDQ/oe1v3XUqMwTBKi4= -----END CERTIFICATE-----Generated at Tue Sep 22 09:11:51 2026 by rpki-client