$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa File: fad11328-b027-308e-9272-8c22e96864c9.roa (raw, json) Hash identifier: QIXpdBJKAU/EsAYhJ0XPR7H5kX2WD44LMsQpCGM5QLc= Subject key identifier: A2:67:0B:0D:88:A6:95:EF:28:90:E9:8F:0A:6C:02:19:39:CB:2D:D8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0D7F7879D7C9E7C2D180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 104.29.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0d:7f:78:79:d7:c9:e7:c2:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=cfc1a85c-0f28-4323-872a-def5b7354e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:ac:60:4a:f7:34:70:8a:02:bc:34:54:cd: 28:1a:da:5c:59:5a:39:f1:e1:71:93:50:b9:09:e6: bb:69:05:e8:45:26:99:6b:4c:e8:e3:98:fe:ae:7a: b8:e8:cb:64:32:d1:9c:e9:1d:32:23:34:e7:30:27: 58:3f:3a:f3:66:29:cb:dc:49:49:a1:83:1b:96:37: 75:4f:ce:f8:a7:4b:0e:f9:4f:35:90:17:a6:bf:84: 8f:ad:2a:69:2b:61:7e:00:66:7c:b1:60:0c:88:00: 06:54:3a:d5:ba:a0:53:81:13:b5:81:60:3b:eb:4c: ea:3f:e0:e4:fb:f2:fc:30:c9:d6:0b:61:9a:c1:52: 03:6e:7b:cb:f6:99:f7:24:25:43:0a:83:20:55:dc: ba:90:cb:18:06:c8:81:aa:89:46:88:33:8b:31:49: 61:1b:3d:81:d5:da:16:3e:37:e4:6a:a0:3a:eb:30: 95:d3:bf:3b:33:2a:41:d8:ad:bd:95:a6:63:85:ff: ad:5e:5b:f8:b3:97:e2:5c:4b:c6:c7:ae:75:ae:8e: 07:a6:b3:bf:47:5a:01:ff:5c:87:2f:0a:46:65:af: 61:dd:bc:47:90:da:d9:35:1d:de:da:f5:9e:e4:48: 9f:1a:75:16:54:fc:51:28:c3:52:3b:c3:51:f3:49: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:67:0B:0D:88:A6:95:EF:28:90:E9:8F:0A:6C:02:19:39:CB:2D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a9:4b:e9:e9:da:98:89:e5:4f:35:3b:aa:d7:ac:3e:c9:fa: 13:2d:4a:d4:82:20:a3:19:17:ff:06:a9:c1:06:ed:00:ca:1b: f6:5a:a1:6f:e6:f4:32:08:ca:e3:2c:c6:4e:48:68:34:f0:9b: 7a:d3:59:c9:a8:dd:1a:18:75:6b:b6:50:16:06:3e:b6:ae:13: 42:45:f7:9c:fa:31:9b:27:68:1b:b5:0a:20:d7:4b:2c:f9:5c: 10:2e:72:a8:f9:bf:b9:fa:16:a9:53:68:bd:67:0a:3d:76:15: d2:0f:d5:bd:fa:0c:a4:8b:ec:fc:15:f7:c3:0a:b3:e1:0e:e5: a5:d7:e7:cd:9f:f9:ca:75:dc:a6:39:4c:3f:16:75:47:82:6d: e3:1b:9b:7f:c7:72:f5:1f:2d:8c:0d:bc:c6:df:fd:3c:7c:b8: 06:1c:30:0e:b9:2b:b3:fd:a1:5d:51:4b:4d:98:af:c3:61:93: 60:c1:59:15:4c:c2:3f:56:e2:ed:b2:fe:ec:e6:f3:48:0d:c8: cc:06:18:4f:97:94:3e:d3:d2:ab:d6:8a:10:e2:fd:da:9d:9e: 06:4c:dc:48:5b:ed:1f:29:41:a0:54:b7:0f:12:3d:d8:66:9d: f4:a3:2d:c8:c5:f9:a2:02:47:40:67:f6:70:d4:b1:ea:1a:fb: b9:c6:d3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQ1/eHnXyefC0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Y2ZjMWE4NWMtMGYyOC00MzIzLTg3MmEtZGVmNWI3MzU0ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwisYEr3NHCKArw0VM0oGtpcWVo58eFxk1C5 Cea7aQXoRSaZa0zo45j+rnq46MtkMtGc6R0yIzTnMCdYPzrzZinL3ElJoYMbljd1 T874p0sO+U81kBemv4SPrSppK2F+AGZ8sWAMiAAGVDrVuqBTgRO1gWA760zqP+Dk +/L8MMnWC2GawVIDbnvL9pn3JCVDCoMgVdy6kMsYBsiBqolGiDOLMUlhGz2B1doW PjfkaqA66zCV0787MypB2K29laZjhf+tXlv4s5fiXEvGx651ro4HprO/R1oB/1yH LwpGZa9h3bxHkNrZNR3e2vWe5EifGnUWVPxRKMNSO8NR80kvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJnCw2IppXvKJDpjwpsAhk5yy3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmFkMTEzMjgtYjAyNy0z MDhlLTkyNzItOGMyMmU5Njg2NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACupS+np2piJ5U81O6rXrD7J+hMtStSCIKMZF/8GqcEG7QDKG/ZaoW/m 9DIIyuMsxk5IaDTwm3rTWcmo3RoYdWu2UBYGPrauE0JF95z6MZsnaBu1CiDXSyz5 XBAucqj5v7n6FqlTaL1nCj12FdIP1b36DKSL7PwV98MKs+EO5aXX582f+cp13KY5 TD8WdUeCbeMbm3/HcvUfLYwNvMbf/Tx8uAYcMA65K7P9oV1RS02Yr8Nhk2DBWRVM wj9W4u2y/uzm80gNyMwGGE+XlD7T0qvWihDi/dqdngZM3Ehb7R8pQaBUtw8SPdhm nfSjLcjF+aICR0Bn9nDUseoa+7nG07Y= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:42 2025 by rpki-client