$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/401dd40a-d16b-3981-8e27-63ff5630b6fb.roa File: 401dd40a-d16b-3981-8e27-63ff5630b6fb.roa (raw, json) Hash identifier: zhquY4+DT2JFbiq7qxU97fNi279w66J6noNV1BQR1Do= Subject key identifier: CF:81:5B:E6:63:F8:BC:CF:C7:5F:06:44:C8:93:1C:3C:47:E3:3F:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F331D0D7D9FAE98DC32747330 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/401dd40a-d16b-3981-8e27-63ff5630b6fb.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 13335 IP address blocks: 104.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0d:7d:9f:ae:98:dc:32:74:73:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=f6c8d9f4-39f6-4294-bd89-8b86cec18763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:f1:64:eb:d5:ae:10:ae:28:75:63:52:d0: 48:2a:7f:fe:0d:14:dc:a4:72:94:1d:a9:55:48:29: 3b:f0:94:64:2a:79:91:61:1d:79:37:7f:0a:47:b3: 24:b1:e3:62:c2:fd:f9:ef:78:29:38:92:c3:80:d6: 75:9e:33:d9:a7:d1:a5:99:56:20:45:9a:89:3b:d6: d2:5b:3f:d3:1e:51:ba:39:87:07:4d:4b:8b:8c:79: b7:fa:28:9f:2c:2b:54:75:5d:e5:18:9b:d2:76:4d: 2c:04:bf:e8:0a:f1:27:65:84:fb:d9:d2:6d:e3:60: 13:70:ab:b7:ae:1a:2e:f6:45:c1:dc:8c:1f:09:0b: e4:c9:3d:76:21:6e:c6:7d:4a:cb:88:99:6b:2d:21: ee:37:75:bd:9e:8d:3d:e0:09:39:df:c2:3f:8f:f9: fb:39:b3:d5:99:68:11:43:fc:db:e8:b4:9a:87:11: 80:be:6a:da:07:99:03:3f:2c:f3:72:23:d8:47:aa: d4:4e:91:24:e9:0e:f2:b8:fe:38:6c:a4:c4:5a:81: 01:bd:86:1d:d0:f5:1e:ba:c8:ae:0c:56:78:6f:11: 4b:13:cd:19:29:4f:02:ed:12:b5:54:86:2e:da:50: 0d:4d:d1:98:2f:d7:ac:34:5c:0c:a4:62:8c:23:40: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:81:5B:E6:63:F8:BC:CF:C7:5F:06:44:C8:93:1C:3C:47:E3:3F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/401dd40a-d16b-3981-8e27-63ff5630b6fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:df:b2:36:bc:64:56:85:dd:bd:c3:9a:62:21:9c:1a:d3:28: 8c:ff:48:71:6e:15:21:ee:40:65:a6:75:1b:f7:3c:0f:c8:7c: 55:73:4b:10:b7:2a:c8:0e:09:54:c2:6c:82:4a:5c:cf:37:68: 22:ed:5e:90:7a:bd:65:97:14:75:6b:9a:72:9f:75:c7:be:4a: 52:59:2f:04:e7:1e:36:57:94:66:03:44:0d:ad:19:2c:10:c7: ba:7e:93:88:b6:dd:68:37:5d:8a:86:6d:cf:3c:69:53:4e:86: 32:dd:a7:28:4f:1e:a1:9a:c0:f6:3c:51:e4:73:f9:ae:21:76: 4d:cb:7c:34:e8:0c:65:5c:d8:08:b0:3d:3e:40:e4:5f:ed:fb: 4a:a5:29:25:ee:af:1d:25:84:07:e6:60:54:78:fb:1e:4a:0a: 8b:4e:85:aa:43:c3:7b:37:08:8e:6a:7c:20:61:66:a3:c5:3e: f6:db:a0:8e:5f:15:12:65:2f:fb:d9:0e:2d:da:bc:4c:fe:d2: ef:53:06:bf:f1:6d:90:21:58:57:fc:f4:0a:48:92:01:7b:c7: c6:81:c8:e0:2d:4f:82:d4:03:a6:77:5d:f6:35:c1:85:68:a2: d1:2c:f9:3b:c5:e6:47:8b:56:45:bf:2e:d0:75:cd:29:4e:0c: 57:94:01:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ19n66Y3DJ0czAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZjZjOGQ5ZjQtMzlmNi00Mjk0LWJkODktOGI4NmNlYzE4NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqATxZOvVrhCuKHVjUtBIKn/+DRTcpHKUHalV SCk78JRkKnmRYR15N38KR7MkseNiwv3573gpOJLDgNZ1njPZp9GlmVYgRZqJO9bS Wz/THlG6OYcHTUuLjHm3+iifLCtUdV3lGJvSdk0sBL/oCvEnZYT72dJt42ATcKu3 rhou9kXB3IwfCQvkyT12IW7GfUrLiJlrLSHuN3W9no094Ak538I/j/n7ObPVmWgR Q/zb6LSahxGAvmraB5kDPyzzciPYR6rUTpEk6Q7yuP44bKTEWoEBvYYd0PUeusiu DFZ4bxFLE80ZKU8C7RK1VIYu2lANTdGYL9esNFwMpGKMI0B5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+BW+Zj+LzPx18GRMiTHDxH4z8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDAxZGQ0MGEtZDE2Yi0z OTgxLThlMjctNjNmZjU2MzBiNmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/fsja8ZFaF3b3DmmIhnBrTKIz/SHFuFSHuQGWmdRv3PA/IfFVzSxC3 KsgOCVTCbIJKXM83aCLtXpB6vWWXFHVrmnKfdce+SlJZLwTnHjZXlGYDRA2tGSwQ x7p+k4i23Wg3XYqGbc88aVNOhjLdpyhPHqGawPY8UeRz+a4hdk3LfDToDGVc2Aiw PT5A5F/t+0qlKSXurx0lhAfmYFR4+x5KCotOhapDw3s3CI5qfCBhZqPFPvbboI5f FRJlL/vZDi3avEz+0u9TBr/xbZAhWFf89ApIkgF7x8aByOAtT4LUA6Z3XfY1wYVo otEs+TvF5keLVkW/LtB1zSlODFeUASc= -----END CERTIFICATE-----Generated at Tue Sep 22 14:58:19 2026 by rpki-client