$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f596fb-ab4e-33f8-8432-1d9fa0589521.roa File: 43f596fb-ab4e-33f8-8432-1d9fa0589521.roa (raw, json) Hash identifier: 138FI+5MuiVgVyyn3mJRwaPEXnIYoGsdM5jDCEb0/Ik= Subject key identifier: C8:3B:A7:1F:D9:F4:8C:49:18:A2:B5:84:C8:50:31:60:0A:11:C1:9F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8783D1B18FEF46BC0A9800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f596fb-ab4e-33f8-8432-1d9fa0589521.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.30.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:83:d1:b1:8f:ef:46:bc:0a:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=efe9c652-177f-4f62-944d-0226b52671bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:16:7c:13:a5:6c:ce:14:af:fa:a0:a5:36: 09:bd:1d:5b:fd:de:8f:85:8b:3f:a8:c2:ab:83:76: 17:2e:82:24:06:15:73:cc:8b:e3:a4:50:ae:aa:07: 88:d5:b2:8c:b0:cb:43:34:a1:7c:74:9a:60:ee:02: 08:aa:98:d3:27:87:44:6b:cd:4d:f3:d2:b2:6f:6d: ba:e9:5f:dd:85:3b:c5:52:31:9d:1b:d9:1d:d6:d3: 97:1c:5f:73:82:aa:39:ea:29:8d:4d:4b:a7:61:e1: 06:b9:7c:61:6d:7d:0b:bf:47:4b:43:9a:bc:b2:d2: ba:bc:86:d7:f1:5c:62:19:d0:d8:09:b3:ef:3b:0b: 18:bf:f5:4a:b1:48:91:1c:c4:47:60:aa:f1:1d:ef: 14:06:70:a0:61:6e:69:47:70:e1:fc:83:05:75:83: 61:9d:3a:6e:5a:6f:fd:fb:17:e1:ae:5f:9a:d0:2f: 95:cb:04:b5:14:85:30:44:cc:f1:cc:9f:6c:97:7a: 66:4e:e6:c8:28:dd:cf:8e:3d:62:e0:99:ec:f9:0b: a0:47:6d:a8:85:b2:b9:12:e4:8b:70:9e:d8:5d:07: 7a:15:22:e2:17:c0:bc:26:e2:e1:63:b1:d3:19:9d: 0e:c7:fe:3c:12:09:e5:9a:82:d4:c1:1a:bc:a3:ad: a4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3B:A7:1F:D9:F4:8C:49:18:A2:B5:84:C8:50:31:60:0A:11:C1:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f596fb-ab4e-33f8-8432-1d9fa0589521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.30.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:47:11:ae:35:1c:ca:e3:7c:c6:98:7a:05:c6:33:ec:79:7d: 82:18:73:ce:30:93:fa:e8:36:52:b4:d3:10:84:1b:6d:82:f4: 65:1b:0e:b6:00:ea:3d:73:86:fa:05:5e:4e:d7:48:07:4b:b9: 18:14:09:f5:79:2c:1f:40:bb:8d:be:59:6f:3f:24:b4:da:3e: de:27:10:16:97:40:be:49:70:ae:8d:a2:c8:0b:79:b0:91:31: af:5d:3f:9c:93:43:18:8e:9c:6e:bf:a9:69:c0:10:3c:32:4d: 14:11:b1:0e:8b:de:29:9d:b0:24:8e:c3:13:c5:51:a9:0d:16: 5c:3c:eb:04:81:05:f8:0e:87:3d:63:78:18:ea:ed:c0:2c:6f: 75:6d:76:99:9c:b2:84:16:d5:d1:fe:a4:42:a8:1e:2d:82:45: d9:f6:c1:45:9a:cc:dd:0a:e7:23:95:b7:aa:d3:fc:d5:9a:31: c4:21:b9:f7:a6:5c:54:ab:2a:fb:74:7f:20:93:10:03:dc:fb: 5c:e2:69:81:28:c7:41:66:1d:c2:82:70:b9:a5:c3:fc:a6:0e: 78:02:43:6e:c4:a2:ef:38:42:ad:38:e1:b6:c2:70:38:c1:72: 74:9d:ad:47:88:74:07:3c:2b:5f:98:0f:d7:2f:f8:7e:c6:d8: 42:a3:ac:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4PRsY/vRrwKmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWZlOWM2NTItMTc3Zi00ZjYyLTk0NGQtMDIyNmI1MjY3MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXEWfBOlbM4Ur/qgpTYJvR1b/d6PhYs/qMKr g3YXLoIkBhVzzIvjpFCuqgeI1bKMsMtDNKF8dJpg7gIIqpjTJ4dEa81N89Kyb226 6V/dhTvFUjGdG9kd1tOXHF9zgqo56imNTUunYeEGuXxhbX0Lv0dLQ5q8stK6vIbX 8VxiGdDYCbPvOwsYv/VKsUiRHMRHYKrxHe8UBnCgYW5pR3Dh/IMFdYNhnTpuWm/9 +xfhrl+a0C+VywS1FIUwRMzxzJ9sl3pmTubIKN3Pjj1i4Jns+QugR22ohbK5EuSL cJ7YXQd6FSLiF8C8JuLhY7HTGZ0Ox/48EgnlmoLUwRq8o62kfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg7px/Z9IxJGKK1hMhQMWAKEcGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDNmNTk2ZmItYWI0ZS0z M2Y4LTg0MzItMWQ5ZmEwNTg5NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB6HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFHEa41HMrjfMaYegXGM+x5fYIYc84wk/roNlK00xCEG22C9GUbDrYA 6j1zhvoFXk7XSAdLuRgUCfV5LB9Au42+WW8/JLTaPt4nEBaXQL5JcK6NosgLebCR Ma9dP5yTQxiOnG6/qWnAEDwyTRQRsQ6L3imdsCSOwxPFUakNFlw86wSBBfgOhz1j eBjq7cAsb3VtdpmcsoQW1dH+pEKoHi2CRdn2wUWazN0K5yOVt6rT/NWaMcQhufem XFSrKvt0fyCTEAPc+1ziaYEox0FmHcKCcLmlw/ymDngCQ27Eou84Qq044bbCcDjB cnSdrUeIdAc8K1+YD9cv+H7G2EKjrEo= -----END CERTIFICATE-----Generated at Tue Sep 1 01:56:54 2026 by rpki-client