$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/376ba49a-6110-333d-8bc9-84eebc8192fa.roa File: 376ba49a-6110-333d-8bc9-84eebc8192fa.roa (raw, json) Hash identifier: zQjo6sUmtZotonYm0VuI5hukwdHgXD9p0LVJIJGKEdw= Subject key identifier: 90:20:9F:E1:C4:10:A3:61:35:5C:2E:45:88:D9:FA:0D:8F:4D:32:FB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8767DC6059354F5771E180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/376ba49a-6110-333d-8bc9-84eebc8192fa.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.18.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:67:dc:60:59:35:4f:57:71:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=571f637f-9a3a-41fb-8855-a1cf36e6d64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:ca:d0:18:fa:29:72:e4:31:74:f7:cd:43: c8:7e:22:da:09:96:f5:8b:b6:38:42:c2:32:1a:c8: 3b:65:16:fb:29:83:fd:8f:25:4b:20:5f:49:0b:af: 24:c2:62:75:75:36:57:86:8c:27:8b:2b:f8:85:a0: 59:1f:01:8a:60:a8:df:d0:b6:eb:6e:62:84:e8:f5: d0:86:bf:42:f9:9e:8f:ba:cb:84:cc:40:a9:f8:7a: d8:d6:7b:97:3d:9a:c0:c4:58:6c:c0:06:7d:c1:fd: 4c:d9:ef:a9:81:b4:33:f7:ff:b0:8f:09:7b:23:ad: fa:99:57:b3:61:6e:eb:77:ed:41:1b:ff:ff:07:d2: 5b:49:ec:df:ac:57:26:bf:01:7e:af:56:c8:e2:c3: 74:6e:d2:b2:99:df:19:39:29:f3:b9:bb:fb:ba:be: d7:2d:2c:32:2f:a8:63:2a:1d:8b:6b:1b:ee:2c:bc: 8b:86:88:34:3f:a4:cd:15:84:a5:16:11:f2:96:89: c3:75:81:8e:71:08:60:53:34:6a:40:57:e2:41:6a: ee:ea:e7:a0:30:84:42:f6:53:62:9e:13:25:1f:28: 85:13:ce:d8:17:3f:5b:52:f6:6f:f8:1a:0d:1a:ce: c7:d7:bd:de:12:14:cb:52:e3:ef:c8:eb:a6:b0:69: bf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:9F:E1:C4:10:A3:61:35:5C:2E:45:88:D9:FA:0D:8F:4D:32:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/376ba49a-6110-333d-8bc9-84eebc8192fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:7c:72:b1:9d:3a:58:6d:26:67:bd:70:2d:c5:e1:67:92: 0d:11:68:ce:07:d9:5e:d7:9c:31:32:ff:b5:ca:c9:22:e7:c1: 29:4c:3c:1f:11:b9:ab:e2:27:67:17:39:b7:d7:a2:75:29:e9: 98:12:c9:0c:ee:41:fa:a1:25:e4:5d:eb:80:b8:86:3d:2c:e5: 44:ea:6d:61:94:b4:8b:5d:b6:15:5f:6c:e7:ab:22:56:4b:30: 6a:05:1f:c3:ca:11:22:b4:9b:dd:d2:0d:a3:9d:d9:89:84:ff: 3a:d8:77:7c:33:f1:4d:7c:e7:5f:30:de:fb:16:2d:b9:46:fb: d3:d4:2f:7a:03:06:98:fe:95:9e:dd:36:15:a5:e4:13:99:d8: 46:af:07:28:c7:40:72:45:47:00:45:19:dd:3e:54:fb:4a:a4: d4:00:89:92:93:ec:af:52:ae:ff:3a:31:0a:dd:2d:4f:9d:c3: 64:39:e9:a1:45:72:9a:85:e5:dc:a5:38:a7:99:75:39:21:cb: 50:7c:8d:b5:27:00:97:3e:cb:42:6d:b6:37:09:96:40:a4:28: 91:df:05:30:95:10:e8:bf:62:79:00:e1:11:23:04:7f:da:b7: ff:57:56:f5:2b:ab:30:98:f3:91:dc:bc:2b:ee:ef:6f:3e:eb: 52:19:0f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2fcYFk1T1dx4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NTcxZjYzN2YtOWEzYS00MWZiLTg4NTUtYTFjZjM2ZTZkNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQzK0Bj6KXLkMXT3zUPIfiLaCZb1i7Y4QsIy Gsg7ZRb7KYP9jyVLIF9JC68kwmJ1dTZXhowniyv4haBZHwGKYKjf0LbrbmKE6PXQ hr9C+Z6PusuEzECp+HrY1nuXPZrAxFhswAZ9wf1M2e+pgbQz9/+wjwl7I636mVez YW7rd+1BG///B9JbSezfrFcmvwF+r1bI4sN0btKymd8ZOSnzubv7ur7XLSwyL6hj Kh2LaxvuLLyLhog0P6TNFYSlFhHylonDdYGOcQhgUzRqQFfiQWru6uegMIRC9lNi nhMlHyiFE87YFz9bUvZv+BoNGs7H173eEhTLUuPvyOumsGm/HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAgn+HEEKNhNVwuRYjZ+g2PTTL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzc2YmE0OWEtNjExMC0z MzNkLThiYzktODRlZWJjODE5MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOffHKxnTpYbSZnvXAtxeFnkg0RaM4H2V7XnDEy/7XKySLnwSlMPB8R uaviJ2cXObfXonUp6ZgSyQzuQfqhJeRd64C4hj0s5UTqbWGUtItdthVfbOerIlZL MGoFH8PKESK0m93SDaOd2YmE/zrYd3wz8U18518w3vsWLblG+9PUL3oDBpj+lZ7d NhWl5BOZ2EavByjHQHJFRwBFGd0+VPtKpNQAiZKT7K9Srv86MQrdLU+dw2Q56aFF cpqF5dylOKeZdTkhy1B8jbUnAJc+y0JttjcJlkCkKJHfBTCVEOi/YnkA4REjBH/a t/9XVvUrqzCY85HcvCvu728+61IZD7k= -----END CERTIFICATE-----Generated at Tue Sep 1 02:36:20 2026 by rpki-client