$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/108dd106-9322-3b68-9f8a-c4d53da0faff.roa File: 108dd106-9322-3b68-9f8a-c4d53da0faff.roa (raw, json) Hash identifier: tYLYvuVwo/EHzfTMxAO2YqytXhkA3sd9dqaa0wbsVdU= Subject key identifier: 25:93:CB:94:64:19:59:B0:83:94:36:31:68:E1:C2:82:94:93:42:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ED861E3C3A371A87F2F9D142E Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/108dd106-9322-3b68-9f8a-c4d53da0faff.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 13335 IP address blocks: 104.22.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e3:c3:a3:71:a8:7f:2f:9d:14:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=8a95e265-3a21-4e11-b4df-20ee98ad79e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:bd:20:d8:0d:41:fd:58:6e:67:33:58:34: 5d:92:31:1f:f4:c6:11:79:e3:b6:90:e3:c8:cb:f9: 45:79:e9:2d:9b:12:2a:d1:fc:43:30:a6:88:6b:81: ac:99:61:90:68:f2:5f:f9:df:87:a6:90:2f:9e:ff: 65:cb:35:a4:ec:ce:7c:bc:1d:80:43:b6:ae:8f:51: d1:96:e6:84:5a:de:4c:37:d4:99:9b:51:2a:76:40: 2e:73:d6:7c:76:32:e0:52:3e:fe:7b:2e:6d:10:6b: cc:99:d9:6d:51:c1:ec:b1:74:e7:c0:c7:a7:12:bd: 66:89:72:a5:b8:f7:ab:79:01:32:55:61:77:41:9a: ee:cf:e5:00:ae:8b:9c:4b:15:9c:af:66:2e:26:51: 29:37:ef:6b:ff:e0:fc:d2:a4:84:90:bd:70:3a:3e: e7:b5:da:b4:2e:cc:47:39:9e:ad:c6:4a:82:45:13: 87:39:8c:56:f8:34:68:3f:d9:fa:0f:59:d8:e2:11: 29:b3:13:41:36:51:63:d5:f6:3e:74:ff:09:4f:fe: 2a:85:ff:1b:03:00:00:65:9c:42:25:c8:09:96:b4: 74:e9:f9:26:60:2d:6a:3b:0d:96:60:63:6c:5f:cc: 5b:56:42:c1:3b:33:e8:06:93:5d:49:a7:ad:2a:a1: 2b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:CB:94:64:19:59:B0:83:94:36:31:68:E1:C2:82:94:93:42:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/108dd106-9322-3b68-9f8a-c4d53da0faff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:47:c4:ae:60:1f:45:5c:83:28:6a:9b:ce:ab:a4:85:e5:40: d7:f2:e5:5f:46:0a:b3:b4:d3:1b:e3:68:3b:58:d4:b0:ae:0a: 9f:e8:d1:34:36:10:1a:dc:cb:6d:c8:22:7b:61:a5:7c:cc:34: cf:e6:6e:3d:fa:a1:ba:00:a9:f7:9e:64:51:11:1b:63:51:aa: 64:8f:96:a7:65:b8:3b:64:b5:5d:e9:62:54:14:0f:69:50:c5: d3:31:62:58:9a:fc:96:3c:75:c0:f3:e7:75:25:f7:11:fa:e5: 2e:7e:97:b2:1c:46:e4:51:5d:ae:c6:b0:29:9f:7b:6c:75:7b: 71:7d:54:3a:64:97:4c:e6:5a:fa:e0:47:14:4a:1d:68:dd:e0: 55:74:17:df:bf:09:05:8b:01:da:46:44:5b:03:28:a0:50:0e: df:43:d6:01:5b:91:12:26:b4:3b:af:83:06:ab:c4:04:29:01: f2:eb:61:7f:07:6a:36:62:83:71:52:1d:01:e1:57:4c:64:ae: de:b5:d9:e7:24:a2:53:4f:c2:9e:73:52:f0:81:0a:ca:99:75: 9b:ff:ca:5b:e8:be:5d:1e:44:1d:6b:40:9c:8c:92:10:e4:65: 72:5e:72:28:1d:ad:9c:2b:44:90:c4:d7:7d:dd:bc:9f:b6:38: 2e:f6:31:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYePDo3Gofy+dFC4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OGE5NWUyNjUtM2EyMS00ZTExLWI0ZGYtMjBlZTk4YWQ3OWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6W9INgNQf1YbmczWDRdkjEf9MYReeO2kOPI y/lFeektmxIq0fxDMKaIa4GsmWGQaPJf+d+HppAvnv9lyzWk7M58vB2AQ7auj1HR luaEWt5MN9SZm1EqdkAuc9Z8djLgUj7+ey5tEGvMmdltUcHssXTnwMenEr1miXKl uPereQEyVWF3QZruz+UAroucSxWcr2YuJlEpN+9r/+D80qSEkL1wOj7ntdq0LsxH OZ6txkqCRROHOYxW+DRoP9n6D1nY4hEpsxNBNlFj1fY+dP8JT/4qhf8bAwAAZZxC JcgJlrR06fkmYC1qOw2WYGNsX8xbVkLBOzPoBpNdSaetKqEr5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWTy5RkGVmwg5Q2MWjhwoKUk0IUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTA4ZGQxMDYtOTMyMi0z YjY4LTlmOGEtYzRkNTNkYTBmYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxHxK5gH0Vcgyhqm86rpIXlQNfy5V9GCrO00xvjaDtY1LCuCp/o0TQ2 EBrcy23IInthpXzMNM/mbj36oboAqfeeZFERG2NRqmSPlqdluDtktV3pYlQUD2lQ xdMxYlia/JY8dcDz53Ul9xH65S5+l7IcRuRRXa7GsCmfe2x1e3F9VDpkl0zmWvrg RxRKHWjd4FV0F9+/CQWLAdpGRFsDKKBQDt9D1gFbkRImtDuvgwarxAQpAfLrYX8H ajZig3FSHQHhV0xkrt612eckolNPwp5zUvCBCsqZdZv/ylvovl0eRB1rQJyMkhDk ZXJecigdrZwrRJDE133dvJ+2OC72MVI= -----END CERTIFICATE-----Generated at Tue Sep 22 09:09:28 2026 by rpki-client