$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ff333b4-ad90-3b41-b207-4c3b8c87e34c.roa File: 3ff333b4-ad90-3b41-b207-4c3b8c87e34c.roa (raw, json) Hash identifier: DVfX6Pr+qNZx7ZrXRmp7lNcfTmLbptRjtfrlJmASwoQ= Subject key identifier: 87:57:68:4D:29:2E:2F:50:BB:0D:CC:B7:6D:7C:64:CD:60:86:1B:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EC20C7BAEDFE5F5D72E8042D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ff333b4-ad90-3b41-b207-4c3b8c87e34c.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 13335 IP address blocks: 104.23.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:7b:ae:df:e5:f5:d7:2e:80:42:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=a37b7f1c-4efd-4efb-8a54-bb594dd97fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:2a:35:66:4a:94:69:15:a5:3a:c1:e4:26: c2:4e:e6:8e:d8:2b:b1:1f:76:a4:fb:32:f2:0a:6c: 9e:00:d0:74:2d:e3:74:47:c9:7f:e1:1c:cf:69:a3: 6e:4f:a6:6a:77:db:5b:31:22:c5:dc:fd:c2:1e:c3: da:22:23:49:3a:50:13:0a:1e:ed:f0:06:cf:ea:a3: 7e:22:9c:21:f5:98:bd:84:7c:b4:6a:d8:e4:be:50: e2:60:f2:fd:cf:12:92:e5:2f:6f:03:0e:2c:0e:72: e8:43:0e:c7:61:7f:48:27:97:c8:ee:8b:1d:aa:ea: e9:de:64:80:8f:6c:f1:35:5f:cc:c3:03:85:86:2c: 14:fe:ff:16:9c:1b:a0:6d:69:61:25:17:11:61:20: 18:eb:85:d9:0f:98:22:c6:f5:62:45:39:e7:d0:14: c0:fb:fc:ee:ca:41:66:3b:8f:9f:ba:0a:fc:24:58: ad:ad:e7:de:1e:90:ba:c1:d2:83:78:3d:04:d8:80: 6e:f8:03:26:d1:b8:13:94:cd:dc:d3:c4:93:2f:6d: 0c:ff:d8:10:f0:79:fe:5d:50:55:ef:1f:2d:72:b4: df:6b:e2:55:06:77:f3:d5:c5:66:d2:3d:f9:f5:7d: 7e:ca:e0:60:41:c6:8f:79:51:1b:f5:cf:18:98:27: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:57:68:4D:29:2E:2F:50:BB:0D:CC:B7:6D:7C:64:CD:60:86:1B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ff333b4-ad90-3b41-b207-4c3b8c87e34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:82:6a:6e:71:9c:8a:80:6b:55:f2:79:ed:e8:73:a9:11:99: 9f:9f:18:dd:72:42:ce:e3:90:88:99:48:10:58:50:37:7b:52: 3d:ce:a6:a0:52:a4:01:ac:c9:83:15:ba:96:8f:0b:0d:28:8f: 8d:77:ce:97:ae:dd:4c:5e:b7:1b:53:01:bb:41:1c:36:0b:55: 5f:f4:10:d1:ac:fc:01:cd:77:df:86:82:c8:f8:81:27:8d:d6: b3:e5:2f:fb:63:93:66:1e:61:14:41:90:de:f5:00:e5:5d:e0: 26:2c:3f:aa:01:ea:58:4f:40:41:a4:a0:ee:fc:61:9e:27:fa: 93:84:d4:5a:d4:49:ac:c9:f6:2f:5f:58:af:ae:14:fa:5a:54: 51:00:46:29:0b:88:45:5d:b5:bc:37:11:57:7d:9a:e6:e2:08: ed:01:c1:28:f9:c0:da:a9:69:99:ea:43:6a:1d:2a:d4:fe:aa: 42:a9:49:b6:0d:42:88:55:63:d4:f1:8d:90:14:9a:88:a1:2f: 55:78:9d:27:2d:68:4c:57:86:0a:b5:63:8c:96:ed:39:a4:1d: d0:e7:f1:05:18:6e:05:bc:1b:ce:92:17:e1:c9:9a:33:0b:e2: 9f:f2:4f:1a:93:7b:41:83:61:f6:49:6d:78:88:0f:e1:3a:de: f2:b8:06:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHuu3+X11y6AQtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YTM3YjdmMWMtNGVmZC00ZWZiLThhNTQtYmI1OTRkZDk3ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/cqNWZKlGkVpTrB5CbCTuaO2CuxH3ak+zLy CmyeANB0LeN0R8l/4RzPaaNuT6Zqd9tbMSLF3P3CHsPaIiNJOlATCh7t8AbP6qN+ Ipwh9Zi9hHy0atjkvlDiYPL9zxKS5S9vAw4sDnLoQw7HYX9IJ5fI7osdqurp3mSA j2zxNV/MwwOFhiwU/v8WnBugbWlhJRcRYSAY64XZD5gixvViRTnn0BTA+/zuykFm O4+fugr8JFitrefeHpC6wdKDeD0E2IBu+AMm0bgTlM3c08STL20M/9gQ8Hn+XVBV 7x8tcrTfa+JVBnfz1cVm0j359X1+yuBgQcaPeVEb9c8YmCd/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdXaE0pLi9Quw3Mt218ZM1ghhsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2ZmMzMzYjQtYWQ5MC0z YjQxLWIyMDctNGMzYjhjODdlMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuCam5xnIqAa1Xyee3oc6kRmZ+fGN1yQs7jkIiZSBBYUDd7Uj3OpqBS pAGsyYMVupaPCw0oj413zpeu3UxetxtTAbtBHDYLVV/0ENGs/AHNd9+Ggsj4gSeN 1rPlL/tjk2YeYRRBkN71AOVd4CYsP6oB6lhPQEGkoO78YZ4n+pOE1FrUSazJ9i9f WK+uFPpaVFEARikLiEVdtbw3EVd9mubiCO0BwSj5wNqpaZnqQ2odKtT+qkKpSbYN QohVY9TxjZAUmoihL1V4nSctaExXhgq1Y4yW7TmkHdDn8QUYbgW8G86SF+HJmjML 4p/yTxqTe0GDYfZJbXiID+E63vK4Bn0= -----END CERTIFICATE-----Generated at Tue Sep 1 04:08:57 2026 by rpki-client