$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f90906b6-d070-32eb-a689-82ad4f841d6a.roa File: f90906b6-d070-32eb-a689-82ad4f841d6a.roa (raw, json) Hash identifier: bjdj/mwWksgAAP4ZXgsHTS8L4wGu7v6PNtqAtPMsCfQ= Subject key identifier: 52:F7:3C:C4:B4:27:DD:2D:2C:9F:A3:93:14:85:86:F9:FF:B4:4A:EA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F3FAD8808277BA2288FEE2A90 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f90906b6-d070-32eb-a689-82ad4f841d6a.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 14789 IP address blocks: 104.29.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:88:08:27:7b:a2:28:8f:ee:2a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=21e5faab-d254-4b3e-aff6-83eddf521d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:ad:94:22:de:94:1a:a0:f8:fe:72:f1:1a: 72:76:1d:d1:03:99:93:98:2b:e8:a3:d8:0a:bc:83: 5d:f0:59:b6:17:71:e1:b8:79:11:7a:6c:df:08:36: d2:c5:e4:43:06:ca:3b:be:78:f9:01:a2:4f:d8:a9: 2c:f2:ce:30:7e:51:8d:aa:f1:2a:2d:be:ee:02:4a: c7:05:74:de:3b:8f:82:60:aa:a4:5e:9f:89:eb:30: 56:35:c4:92:72:75:0c:ca:63:12:33:a4:f1:7b:a0: 3d:7a:bc:a1:6f:22:cf:c6:22:74:c3:b0:fe:64:09: 7f:08:bf:b6:44:bc:7a:e1:64:dc:ae:48:6b:08:43: ee:91:de:ba:f7:b3:da:8f:7d:a3:e1:bf:3d:8e:11: 84:45:3c:26:58:d2:32:67:fd:b0:7d:51:fa:2e:04: cf:57:37:5a:98:ff:a7:f5:6d:97:8c:33:eb:17:a8: 86:22:2c:5f:6a:c0:29:67:0a:e8:af:05:dd:ce:9e: 19:cc:61:cb:57:b9:d7:f3:c5:02:ff:79:c1:77:82: de:68:80:ba:be:d2:0e:df:18:37:eb:ce:53:33:b7: 71:66:64:f4:b4:70:2e:31:d5:77:7c:e3:ae:d8:38: 33:87:25:de:d7:ab:95:d7:05:4c:dd:fa:cd:96:04: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:3C:C4:B4:27:DD:2D:2C:9F:A3:93:14:85:86:F9:FF:B4:4A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f90906b6-d070-32eb-a689-82ad4f841d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7a:d9:28:52:4a:60:cb:db:78:7b:8b:bf:eb:6d:f0:6a:4b: c5:c9:3b:44:c5:06:39:6c:e2:9c:8f:f3:13:ab:ef:0f:7d:53: d6:c0:da:d1:17:72:bf:33:56:9e:17:7f:fc:ef:8c:af:82:ce: bc:7a:8c:08:2e:fc:83:f6:c3:bf:5f:a0:01:d3:2f:1f:e9:10: 62:16:1e:34:a3:08:44:17:0c:98:e0:4f:31:1d:11:d2:e6:31: 7a:13:0b:98:ea:33:21:7f:cd:e8:37:19:c1:5c:14:7c:1d:60: ff:cc:92:88:f1:8a:2f:3a:aa:92:6a:cc:1e:41:0b:36:56:da: ca:bf:b5:7a:39:d8:a0:d0:8a:ee:94:99:18:76:3b:bb:c3:3f: e5:1b:37:38:77:99:33:83:d0:36:ba:aa:88:52:0e:77:36:4a: e8:08:fd:4c:dc:20:3d:54:7c:24:81:e0:e5:89:3b:79:5b:d6: 6a:66:a4:72:61:4e:34:c7:6e:72:23:b8:15:8b:73:75:71:01: c0:4e:9d:94:7c:72:c6:22:88:c8:c2:76:0a:71:cd:f5:86:a3: dd:b9:4b:2b:0b:ae:1f:ef:d7:cd:65:31:7c:0d:40:49:7b:02: d5:6a:8d:62:de:00:1b:60:dc:a7:8c:68:4e:19:4a:03:21:31: 9d:83:82:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYgIJ3uiKI/uKpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjFlNWZhYWItZDI1NC00YjNlLWFmZjYtODNlZGRmNTIxZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj6tlCLelBqg+P5y8Rpydh3RA5mTmCvoo9gK vINd8Fm2F3HhuHkRemzfCDbSxeRDBso7vnj5AaJP2Kks8s4wflGNqvEqLb7uAkrH BXTeO4+CYKqkXp+J6zBWNcSScnUMymMSM6Txe6A9eryhbyLPxiJ0w7D+ZAl/CL+2 RLx64WTcrkhrCEPukd6697Paj32j4b89jhGERTwmWNIyZ/2wfVH6LgTPVzdamP+n 9W2XjDPrF6iGIixfasApZwrorwXdzp4ZzGHLV7nX88UC/3nBd4LeaIC6vtIO3xg3 685TM7dxZmT0tHAuMdV3fOOu2DgzhyXe16uV1wVM3frNlgQpuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL3PMS0J90tLJ+jkxSFhvn/tErqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjkwOTA2YjYtZDA3MC0z MmViLWE2ODktODJhZDRmODQxZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx62ShSSmDL23h7i7/rbfBqS8XJO0TFBjls4pyP8xOr7w99U9bA2tEX cr8zVp4Xf/zvjK+Czrx6jAgu/IP2w79foAHTLx/pEGIWHjSjCEQXDJjgTzEdEdLm MXoTC5jqMyF/zeg3GcFcFHwdYP/Mkojxii86qpJqzB5BCzZW2sq/tXo52KDQiu6U mRh2O7vDP+UbNzh3mTOD0Da6qohSDnc2SugI/UzcID1UfCSB4OWJO3lb1mpmpHJh TjTHbnIjuBWLc3VxAcBOnZR8csYiiMjCdgpxzfWGo925SysLrh/v181lMXwNQEl7 AtVqjWLeABtg3KeMaE4ZSgMhMZ2Dgns= -----END CERTIFICATE-----Generated at Tue Sep 22 07:19:40 2026 by rpki-client