$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8b7865-59a3-338d-b275-9e651f08b0c4.roa File: 2e8b7865-59a3-338d-b275-9e651f08b0c4.roa (raw, json) Hash identifier: x3ij9v3rfeFoc+1JGACBILFGuNcEWdi02T11CtKaTp8= Subject key identifier: 40:B7:B3:D6:19:E2:F3:EA:C0:DF:C9:89:13:0F:86:77:BB:CD:21:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F31B7D11C90D007101CD777A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8b7865-59a3-338d-b275-9e651f08b0c4.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.22.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:d1:1c:90:d0:07:10:1c:d7:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=470ac86a-3a46-4517-a4ac-c8fc829353bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:98:31:7c:fd:e7:97:df:fb:0e:9a:cc:6e: f2:68:ea:e9:fd:36:e3:89:a5:33:d1:68:91:03:86: cc:85:fc:60:2c:d1:e8:63:b1:24:2b:03:b1:38:c6: ca:c4:74:e6:8e:6d:81:3f:d4:c1:f8:62:da:a5:e5: 26:10:d9:90:15:b3:3d:0d:76:5d:64:3f:49:71:a0: ed:53:3e:9e:a7:16:fc:a9:ad:e7:aa:30:68:bd:28: c9:e8:99:3d:18:91:dd:3a:fe:11:66:45:8b:6c:b2: 86:e9:62:2d:71:f2:a0:48:5a:0a:2d:55:5a:d1:9a: 98:1f:93:26:31:3c:93:0c:64:76:fa:f4:39:c4:29: 2e:8d:6d:78:c8:4b:95:03:5a:07:09:f2:62:71:5f: 88:17:b9:b6:fc:fe:e0:76:21:1e:38:af:55:32:bf: 79:fe:fa:0c:23:73:e8:03:4d:5e:3e:42:b5:d6:82: 14:66:ab:f1:a5:44:ad:94:65:3a:86:37:90:e1:35: 0e:79:65:43:ca:c3:34:28:d8:95:55:f4:f7:b8:6d: d0:ef:8b:c9:bd:5e:30:e2:0a:a4:d6:13:e3:a1:63: b6:d2:ad:e1:37:0a:c0:85:c9:65:9e:da:2b:98:6e: dc:b3:ef:c8:75:87:30:d0:ea:01:7a:ff:f2:01:82: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:B3:D6:19:E2:F3:EA:C0:DF:C9:89:13:0F:86:77:BB:CD:21:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8b7865-59a3-338d-b275-9e651f08b0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e8:45:c1:5d:eb:0a:6d:4c:89:94:51:91:81:30:0f:29:04: f8:87:3b:1e:5e:99:f3:32:b0:31:7f:88:9d:3a:67:35:d5:b9: 39:19:73:b1:32:c8:c3:5b:e8:3b:a5:f8:c1:74:f1:b3:4d:66: c5:32:41:ae:60:84:56:08:71:f0:8c:95:9a:97:9d:69:0a:fb: 49:5d:d4:3f:ad:2d:25:53:eb:61:47:e9:3c:c5:32:c4:a4:d4: c9:01:af:e1:15:6d:2b:2b:80:f5:3d:df:bd:42:b4:a7:37:b7: 9d:32:ab:b1:b1:ee:27:3e:48:f4:a2:61:48:fa:10:9d:08:f9: ae:b5:40:e8:21:e1:ca:f7:eb:e6:b0:3d:ee:bd:b3:40:67:a6: c4:07:ab:33:ba:2e:7c:72:32:7f:14:4c:94:36:c8:92:37:1d: 31:0d:fa:aa:78:57:55:2d:2e:aa:7c:ea:27:35:1f:dd:51:99: 97:a8:e1:e5:8a:73:c2:32:1f:fa:73:2e:47:0f:1d:65:9e:17: 13:20:03:af:47:b4:50:2f:61:9d:eb:94:6b:f6:e2:1b:3a:de: 0f:31:b7:a2:67:db:35:1f:ab:44:80:90:ff:96:ce:6d:e2:d6: be:ef:de:74:28:23:f7:c2:02:71:03:f9:cb:1f:dc:06:4c:e5: 30:64:76:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt9EckNAHEBzXd6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NDcwYWM4NmEtM2E0Ni00NTE3LWE0YWMtYzhmYzgyOTM1M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLyYMXz955ff+w6azG7yaOrp/TbjiaUz0WiR A4bMhfxgLNHoY7EkKwOxOMbKxHTmjm2BP9TB+GLapeUmENmQFbM9DXZdZD9JcaDt Uz6epxb8qa3nqjBovSjJ6Jk9GJHdOv4RZkWLbLKG6WItcfKgSFoKLVVa0ZqYH5Mm MTyTDGR2+vQ5xCkujW14yEuVA1oHCfJicV+IF7m2/P7gdiEeOK9VMr95/voMI3Po A01ePkK11oIUZqvxpUStlGU6hjeQ4TUOeWVDysM0KNiVVfT3uG3Q74vJvV4w4gqk 1hPjoWO20q3hNwrAhcllntormG7cs+/IdYcw0OoBev/yAYIqZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC3s9YZ4vPqwN/JiRMPhne7zSGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU4Yjc4NjUtNTlhMy0z MzhkLWIyNzUtOWU2NTFmMDhiMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACToRcFd6wptTImUUZGBMA8pBPiHOx5emfMysDF/iJ06ZzXVuTkZc7Ey yMNb6Dul+MF08bNNZsUyQa5ghFYIcfCMlZqXnWkK+0ld1D+tLSVT62FH6TzFMsSk 1MkBr+EVbSsrgPU9371CtKc3t50yq7Gx7ic+SPSiYUj6EJ0I+a61QOgh4cr36+aw Pe69s0BnpsQHqzO6LnxyMn8UTJQ2yJI3HTEN+qp4V1UtLqp86ic1H91RmZeo4eWK c8IyH/pzLkcPHWWeFxMgA69HtFAvYZ3rlGv24hs63g8xt6Jn2zUfq0SAkP+Wzm3i 1r7v3nQoI/fCAnED+csf3AZM5TBkdhI= -----END CERTIFICATE-----Generated at Tue Sep 22 07:18:07 2026 by rpki-client