$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d35a4b2-e5d9-3ed8-b6c4-1c0b46f4fb84.roa File: 1d35a4b2-e5d9-3ed8-b6c4-1c0b46f4fb84.roa (raw, json) Hash identifier: smZcbuA0mHr3ONiQOCrcusJ+ycpIwiZ/bXbHUzTy+eA= Subject key identifier: F5:E4:0F:0B:98:47:24:86:08:C1:35:27:DA:CF:30:A9:FA:0C:0E:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D97556267688ACEFFF91E5180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d35a4b2-e5d9-3ed8-b6c4-1c0b46f4fb84.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 13335 IP address blocks: 104.23.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:62:67:68:8a:ce:ff:f9:1e:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=cc6d3712-3375-4f93-847a-7cb6e5724a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:71:ec:7c:df:e0:dc:65:70:e8:6a:8f:22: 3d:1b:60:f2:bc:c9:68:e7:1d:21:f0:04:c6:60:c2: 8a:cc:58:7d:f5:d6:9f:ba:95:1c:5a:72:3b:fb:7e: fb:37:0f:3c:23:6e:d1:4d:2e:5a:2d:12:d9:fa:e6: 9c:85:11:3d:1e:7d:d7:65:96:00:e4:6e:a4:00:f8: 54:ce:b1:ce:1c:d0:3e:16:f9:da:1c:11:28:ec:d2: 72:da:f2:1d:14:68:74:01:8f:eb:54:8b:50:21:a5: fc:7f:d4:12:5e:1f:3c:ab:c7:47:48:c6:3a:86:69: 6a:f5:bd:88:af:2b:74:81:82:bb:ad:cd:ff:d5:91: a4:02:2c:df:99:24:d4:0a:97:81:59:ba:8f:5e:79: eb:39:b7:a5:3f:50:2e:d5:e3:e2:0d:b7:87:b6:66: c7:d7:e2:83:88:f9:48:cd:e1:d3:83:0d:50:ff:a3: b1:bd:20:54:b1:0c:be:23:05:88:14:50:45:c7:53: 50:b2:f5:1a:d9:af:06:08:0a:e8:05:12:0c:0b:21: 8a:7f:4e:76:18:8c:29:e8:d9:70:31:c6:48:de:c4: 25:06:72:da:04:d1:42:33:a7:c4:e9:07:ef:f1:c1: fd:12:ff:b8:13:ac:62:9a:2a:b3:20:5b:14:0b:9c: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E4:0F:0B:98:47:24:86:08:C1:35:27:DA:CF:30:A9:FA:0C:0E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d35a4b2-e5d9-3ed8-b6c4-1c0b46f4fb84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0c:72:1a:b7:ef:3c:55:d7:e0:1b:83:d1:9d:f4:a7:29:ea: b1:ff:60:66:cf:fe:6c:63:54:45:b2:68:53:ce:8e:35:5d:f9: 00:a9:b7:80:5c:a3:6b:1d:92:d4:d3:59:cd:25:0b:b0:47:39: 1f:45:73:68:5f:ec:b3:c2:67:4c:49:da:26:ea:56:45:76:20: d9:0f:93:a4:43:ae:a2:77:99:c7:97:bd:9c:d6:80:c5:de:fa: 1b:db:c3:6a:94:24:e6:db:07:b9:95:71:eb:6d:83:fb:e3:e5: d5:91:20:cf:79:e2:ff:a5:18:f0:2b:0d:7f:af:3c:6d:ef:f1: cf:e1:8f:c1:65:9d:6c:8d:76:9f:47:8e:1b:59:82:50:02:ca: 5e:1a:0d:92:b7:a0:a4:17:f1:5b:2d:60:12:ce:08:46:94:72: e3:19:8b:19:87:16:eb:f1:eb:23:4d:6b:30:a6:5d:40:fe:2b: 7a:62:7e:91:e3:d5:90:0e:8e:ad:b4:ef:97:a8:19:58:e4:8f: f6:69:7a:af:a0:f0:61:61:ec:0c:ed:ad:2a:c3:74:c8:cd:b4: 6e:10:46:87:2b:be:82:1d:5a:86:d0:ef:f7:f2:3b:55:fa:6f: b1:ff:8a:fc:a7:4d:b0:b5:82:75:6d:2c:b3:ff:8c:4d:75:9d: b0:19:f1:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWJnaIrO//keUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk Y2M2ZDM3MTItMzM3NS00ZjkzLTg0N2EtN2NiNmU1NzI0YTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueBx7Hzf4NxlcOhqjyI9G2DyvMlo5x0h8ATG YMKKzFh99dafupUcWnI7+377Nw88I27RTS5aLRLZ+uachRE9Hn3XZZYA5G6kAPhU zrHOHNA+FvnaHBEo7NJy2vIdFGh0AY/rVItQIaX8f9QSXh88q8dHSMY6hmlq9b2I ryt0gYK7rc3/1ZGkAizfmSTUCpeBWbqPXnnrObelP1Au1ePiDbeHtmbH1+KDiPlI zeHTgw1Q/6OxvSBUsQy+IwWIFFBFx1NQsvUa2a8GCAroBRIMCyGKf052GIwp6Nlw McZI3sQlBnLaBNFCM6fE6Qfv8cH9Ev+4E6ximiqzIFsUC5xqyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXkDwuYRySGCME1J9rPMKn6DA4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWQzNWE0YjItZTVkOS0z ZWQ4LWI2YzQtMWMwYjQ2ZjRmYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoMchq37zxV1+Abg9Gd9Kcp6rH/YGbP/mxjVEWyaFPOjjVd+QCpt4Bc o2sdktTTWc0lC7BHOR9Fc2hf7LPCZ0xJ2ibqVkV2INkPk6RDrqJ3mceXvZzWgMXe +hvbw2qUJObbB7mVcettg/vj5dWRIM954v+lGPArDX+vPG3v8c/hj8FlnWyNdp9H jhtZglACyl4aDZK3oKQX8VstYBLOCEaUcuMZixmHFuvx6yNNazCmXUD+K3pifpHj 1ZAOjq2075eoGVjkj/Zpeq+g8GFh7AztrSrDdMjNtG4QRocrvoIdWobQ7/fyO1X6 b7H/ivynTbC1gnVtLLP/jE11nbAZ8VY= -----END CERTIFICATE-----Generated at Sat May 9 08:10:06 2026 by rpki-client