$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3eb17edb-1630-3079-9c22-3eb7ad1f18e4.roa File: 3eb17edb-1630-3079-9c22-3eb7ad1f18e4.roa (raw, json) Hash identifier: Qop1BSR3xpfubmWdY3m4zT7cDzCDp8Db2/PUmLr5s0A= Subject key identifier: 4F:AA:56:88:6F:31:5C:89:07:F6:4A:66:F7:4C:72:D8:A9:71:18:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D9725B1CCE470266DADE2E1C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3eb17edb-1630-3079-9c22-3eb7ad1f18e4.roa Signing time: Wed 22 Apr 2026 11:24:35 +0000 ROA not before: Wed 22 Apr 2026 11:24:35 +0000 ROA not after: Tue 21 Jul 2026 11:24:35 +0000 asID: 13335 IP address blocks: 104.22.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:25:b1:cc:e4:70:26:6d:ad:e2:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 11:24:35 2026 GMT Not After : Jul 21 11:24:35 2026 GMT Subject: CN=61e2c627-a537-4b22-b633-6d74b48098b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:bf:fb:8d:f2:67:3d:a1:26:2b:eb:53:f2: 4d:d7:27:1e:be:39:20:8b:17:f6:dd:66:42:1c:e9: e8:0b:35:6b:d5:e2:72:2b:11:91:2a:e6:fb:f4:ab: 16:64:99:a2:f5:be:4e:a4:54:11:43:32:0c:49:8b: 34:84:d8:58:af:2c:a1:12:b7:cc:01:a1:33:82:9c: 0d:78:d1:62:14:ad:b5:f5:81:79:9d:b0:52:64:51: 72:42:1d:37:f8:ce:41:01:16:43:72:8b:53:18:f4: 4e:f4:53:51:07:dd:9e:55:f4:3f:b5:b9:b0:60:8d: 6d:93:a9:05:6a:b4:5c:90:76:16:73:3e:49:e7:a2: bb:a4:08:4d:a5:78:59:36:e6:04:d3:40:dc:e7:17: 21:38:bd:68:c6:7f:bc:b5:f7:7c:17:b0:a9:a4:af: 16:49:bf:2b:18:f5:7b:d2:4f:db:6b:17:4e:21:a3: 59:69:31:ca:d4:09:d4:dd:70:85:0c:4a:b9:9e:be: e0:37:33:99:91:60:d6:72:9b:d0:3f:22:02:3d:c0: 16:cb:3f:49:53:50:7a:97:4e:e8:df:63:77:0a:c5: a8:b3:ce:73:c6:b3:eb:30:77:b6:3e:b6:52:8d:bf: 0c:fc:95:d6:d7:1d:06:42:1e:1d:26:e3:54:41:27: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AA:56:88:6F:31:5C:89:07:F6:4A:66:F7:4C:72:D8:A9:71:18:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3eb17edb-1630-3079-9c22-3eb7ad1f18e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d7:99:e7:45:e7:ed:1a:9b:20:4e:12:75:c3:51:c2:3e:41: 5e:cd:4d:1a:10:4b:d6:1a:23:35:0a:10:e4:ce:c7:d2:64:2f: 3a:da:33:3c:d9:51:13:55:cf:d8:c4:45:f4:86:dd:e0:3b:60: e5:2a:02:b7:d1:69:cc:a8:fa:95:22:e5:46:1e:bc:0c:18:d8: 9c:8a:cf:58:b5:79:12:c6:29:f3:44:70:af:58:75:91:13:97: 7e:ea:d1:4e:9b:1a:cc:ea:8f:75:a6:99:ee:0c:96:06:56:2e: ae:bd:47:37:27:37:d3:df:52:3e:e0:e3:2c:b2:ab:72:7f:7a: fc:a4:c9:08:43:9c:2c:96:fd:9e:7f:dc:5d:94:55:23:02:60: 06:6a:4f:cc:d8:36:5d:93:1f:7e:83:e1:e4:a6:9d:5e:cf:5a: 4e:c2:d4:9b:df:88:2c:4a:f7:35:0c:83:a8:ec:ac:03:46:65: 69:c9:c4:ea:bb:83:1a:87:6a:b0:f3:c3:53:13:84:4e:46:39: ce:b7:0d:3c:c9:72:b9:35:2e:17:81:9a:0a:2f:f9:57:33:64: 66:38:47:e5:5f:c1:cc:78:65:ba:99:50:44:58:54:92:4a:56: f8:c3:93:81:7a:e3:ba:f1:0f:3c:32:b2:4b:d6:47:08:e3:90: 29:52:c3:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XJbHM5HAmba3i4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMjExMjQzNVoXDTI2MDcyMTExMjQzNVowLzEtMCsGA1UEAxMk NjFlMmM2MjctYTUzNy00YjIyLWI2MzMtNmQ3NGI0ODA5OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuO/+43yZz2hJivrU/JN1ycevjkgixf23WZC HOnoCzVr1eJyKxGRKub79KsWZJmi9b5OpFQRQzIMSYs0hNhYryyhErfMAaEzgpwN eNFiFK219YF5nbBSZFFyQh03+M5BARZDcotTGPRO9FNRB92eVfQ/tbmwYI1tk6kF arRckHYWcz5J56K7pAhNpXhZNuYE00Dc5xchOL1oxn+8tfd8F7CppK8WSb8rGPV7 0k/baxdOIaNZaTHK1AnU3XCFDEq5nr7gNzOZkWDWcpvQPyICPcAWyz9JU1B6l07o 32N3CsWos85zxrPrMHe2PrZSjb8M/JXW1x0GQh4dJuNUQSeXeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+qVohvMVyJB/ZKZvdMctipcRh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2ViMTdlZGItMTYzMC0z MDc5LTljMjItM2ViN2FkMWYxOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvXmedF5+0amyBOEnXDUcI+QV7NTRoQS9YaIzUKEOTOx9JkLzraMzzZ URNVz9jERfSG3eA7YOUqArfRacyo+pUi5UYevAwY2JyKz1i1eRLGKfNEcK9YdZET l37q0U6bGszqj3Wmme4MlgZWLq69RzcnN9PfUj7g4yyyq3J/evykyQhDnCyW/Z5/ 3F2UVSMCYAZqT8zYNl2TH36D4eSmnV7PWk7C1JvfiCxK9zUMg6jsrANGZWnJxOq7 gxqHarDzw1MThE5GOc63DTzJcrk1LheBmgov+VczZGY4R+Vfwcx4ZbqZUERYVJJK VvjDk4F647rxDzwyskvWRwjjkClSw7M= -----END CERTIFICATE-----Generated at Sat May 9 08:09:42 2026 by rpki-client