$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa File: 140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa (raw, json) Hash identifier: 8OqYvjjwiovSGI9TEXSmi4xhHY87wGjOdUT+tRJqjUs= Subject key identifier: EE:11:58:E2:32:A3:66:A0:93:14:D6:02:40:06:99:5C:C4:AF:C5:CD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF9E20CD055F94ECEA698DF20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.22.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:0c:d0:55:f9:4e:ce:a6:98:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=74b296cf-ce30-4a38-ac9b-3df94b771936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:43:4b:c5:fc:8c:56:bb:a1:a7:5f:db:c0:f2: 23:70:8f:8b:80:10:91:05:a3:7f:53:62:08:49:f9: 56:bd:bd:b3:c6:6e:84:e2:fc:fe:3d:4e:81:37:ec: 5c:c0:b8:b2:67:df:52:ed:c8:e4:71:97:9c:d5:1d: 09:38:17:9f:70:6e:51:38:31:1f:a8:1f:c0:9a:7d: 0b:f0:81:3e:14:10:07:0a:ba:51:4d:42:11:fe:64: 3b:81:57:56:e6:82:aa:73:0d:c1:cd:e5:8f:78:99: a3:6b:12:94:2f:f7:4c:4d:28:da:c7:80:6b:ca:39: b3:d3:0c:5c:d3:67:e1:fa:0e:04:5c:13:3a:ab:2b: 5e:36:92:e3:6c:38:5f:87:41:10:1b:2a:fe:1f:62: 4c:b6:11:85:fa:ce:da:43:db:e3:04:db:55:9d:00: d2:4d:74:4f:c1:02:9b:2d:85:db:ea:38:97:47:6e: ba:88:15:59:15:a9:ee:ca:8c:56:a4:66:be:2a:3a: 36:50:44:54:bc:c8:d5:10:33:f6:51:77:70:2a:36: 7c:73:92:43:8c:b2:45:2b:d5:da:9c:fb:40:75:99: a7:8a:12:d0:56:5f:17:6c:c6:47:0d:31:8e:83:59: 1c:ab:ac:34:bb:10:b7:94:74:1a:f6:77:e7:48:0e: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:11:58:E2:32:A3:66:A0:93:14:D6:02:40:06:99:5C:C4:AF:C5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0f:8e:6c:c9:2d:b0:11:7d:f3:f9:dd:e7:d9:be:2f:6f:cb: d1:97:ba:aa:b8:e7:bd:b5:e3:c9:b8:39:87:ce:f0:67:7f:8a: 22:69:77:cb:3d:e6:ec:d3:11:60:df:f1:62:80:a6:40:ed:55: ac:e3:dc:f7:9c:42:ee:6b:49:10:1c:8d:73:7c:69:4c:eb:1b: 92:b6:eb:63:27:1a:ae:10:be:7e:65:7e:2e:9c:92:c6:74:00: b8:d3:9c:11:e4:9f:3f:f4:31:27:ae:5c:c9:2b:c1:9d:b7:31: 3d:fa:ec:81:13:cf:91:d0:d8:ce:27:fc:b8:78:3b:44:b0:83: aa:d7:4b:f3:9d:f1:79:8e:26:70:06:86:fb:4b:84:cc:2d:79: e8:66:7c:dd:9f:14:ec:4d:d5:28:e5:c3:15:b8:d8:bf:28:09: c5:1b:5d:4b:5a:bb:27:20:26:39:b5:31:a2:fd:62:d1:68:fb: a0:a9:6c:5e:e5:7d:b3:60:8d:6f:37:c2:23:c6:08:86:2b:24: b1:5b:c0:aa:f4:53:23:27:e0:9e:dd:db:fd:b8:3f:a4:d0:a8: 74:ea:0c:1f:4e:13:61:dd:53:4d:e4:3f:12:4e:85:2b:ae:19: 7d:9e:85:d4:0a:e8:a3:e2:db:9d:d0:26:20:84:95:3e:85:ae: 83:42:c1:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754gzQVflOzqaY3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk NzRiMjk2Y2YtY2UzMC00YTM4LWFjOWItM2RmOTRiNzcxOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgENLxfyMVruhp1/bwPIjcI+LgBCRBaN/U2II SflWvb2zxm6E4vz+PU6BN+xcwLiyZ99S7cjkcZec1R0JOBefcG5RODEfqB/Amn0L 8IE+FBAHCrpRTUIR/mQ7gVdW5oKqcw3BzeWPeJmjaxKUL/dMTSjax4Bryjmz0wxc 02fh+g4EXBM6qyteNpLjbDhfh0EQGyr+H2JMthGF+s7aQ9vjBNtVnQDSTXRPwQKb LYXb6jiXR266iBVZFanuyoxWpGa+Kjo2UERUvMjVEDP2UXdwKjZ8c5JDjLJFK9Xa nPtAdZmnihLQVl8XbMZHDTGOg1kcq6w0uxC3lHQa9nfnSA4iZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4RWOIyo2agkxTWAkAGmVzEr8XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQwZDNlMmItNjRhZC0z YzU3LThlOTMtZTQ5ZDQ4MmUyMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsPjmzJLbARffP53efZvi9vy9GXuqq4572148m4OYfO8Gd/iiJpd8s9 5uzTEWDf8WKApkDtVazj3PecQu5rSRAcjXN8aUzrG5K262MnGq4Qvn5lfi6cksZ0 ALjTnBHknz/0MSeuXMkrwZ23MT367IETz5HQ2M4n/Lh4O0Swg6rXS/Od8XmOJnAG hvtLhMwteehmfN2fFOxN1SjlwxW42L8oCcUbXUtauycgJjm1MaL9YtFo+6CpbF7l fbNgjW83wiPGCIYrJLFbwKr0UyMn4J7d2/24P6TQqHTqDB9OE2HdU03kPxJOhSuu GX2ehdQK6KPi253QJiCElT6FroNCwUY= -----END CERTIFICATE-----Generated at Tue Sep 22 10:44:48 2026 by rpki-client