$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d559edf-6852-3b2e-8e62-8a0d1cd8b3e0.roa File: 4d559edf-6852-3b2e-8e62-8a0d1cd8b3e0.roa (raw, json) Hash identifier: my4/oa5Kx5DRYT33Z8L1+wbxp976GeF8BOoiZHc1o/4= Subject key identifier: FC:80:16:15:C8:33:B7:9F:94:E0:22:9C:3D:65:FA:15:81:28:85:29 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F3B7D2180A6208CBD82F43340 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d559edf-6852-3b2e-8e62-8a0d1cd8b3e0.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 14789 IP address blocks: 104.22.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:21:80:a6:20:8c:bd:82:f4:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=652afd3b-509c-44c9-8f81-17214b14e7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:66:b7:06:08:d6:5d:16:98:71:70:1b:76: b9:31:f2:47:ff:33:65:6f:08:67:89:0f:1f:1f:6e: 16:41:3c:f8:58:1f:9a:f0:d6:78:66:f5:99:0b:be: 48:7a:c4:00:89:7b:88:1a:9b:17:93:80:26:c7:b9: 7f:12:fd:af:61:b1:fd:e3:bf:be:c9:09:62:e2:cd: d8:6f:2c:97:89:dd:fa:86:43:9d:bb:a1:de:a3:5f: e6:a8:6b:7c:63:c6:60:b8:28:ca:5f:5b:dd:7e:e6: 9b:f2:1b:c4:fb:6c:71:45:16:07:61:ad:06:59:7b: ca:4e:fb:de:c8:b7:3b:fc:9c:92:12:97:f2:54:74: 8e:42:05:4c:09:52:e0:11:e7:2f:1e:49:e7:d6:ad: ba:c0:f7:41:aa:58:e9:15:ff:26:14:cb:f8:db:99: ee:41:3a:d9:7f:4a:fe:36:b7:bc:11:c7:15:7d:d0: 56:31:48:76:33:f5:7a:83:44:58:5c:69:72:48:af: ae:ac:9a:04:2e:e6:c2:c0:2c:c5:96:8d:ab:58:b0: 09:da:1d:26:23:8c:bc:f0:c5:97:e7:66:dc:3a:16: 58:23:ed:60:76:6b:16:72:ee:f5:77:f1:41:e4:17: 61:21:6c:1f:13:bb:85:54:55:cc:16:7b:36:8d:0c: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:80:16:15:C8:33:B7:9F:94:E0:22:9C:3D:65:FA:15:81:28:85:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d559edf-6852-3b2e-8e62-8a0d1cd8b3e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a1:5e:dd:ff:6d:93:c5:79:eb:36:92:8f:76:80:de:8e:68: 6d:44:18:0e:12:08:a5:35:c4:2b:48:29:4b:70:b9:a8:be:94: ee:99:53:63:6c:0d:20:cb:18:74:27:ba:f4:16:bd:21:bd:ce: 8f:20:f3:a0:d5:ce:04:75:24:d0:9a:f0:b3:a8:70:d2:4f:77: 4c:23:35:0c:28:8e:a3:47:33:0b:ea:ab:60:96:01:fa:7c:de: 9a:6b:3d:1a:c0:b7:de:b6:a9:df:b1:b0:bc:df:60:0d:23:6d: 7d:59:63:d1:e8:65:b9:32:20:0d:53:ce:44:47:1d:9f:70:e6: e7:06:0c:55:56:79:61:3d:e7:e2:24:f8:fd:93:19:91:c7:f5: eb:24:7b:43:cb:17:13:2f:49:bb:84:78:d8:db:31:fe:5e:08: 7c:e3:80:70:40:5c:5a:34:5d:d0:98:54:db:50:e6:38:aa:e0: e8:18:a1:96:b2:42:ed:8f:70:19:d9:06:d9:63:32:5f:a5:96: f2:1c:b3:ca:4d:7e:04:79:8c:1d:8a:a1:e1:74:04:a9:31:f1: b6:72:e2:91:dc:12:df:bf:a9:36:c4:3d:7b:e7:2c:92:9f:46: 20:0c:69:66:2b:72:b4:7e:a8:7e:f1:58:1e:91:bf:22:b7:da: fb:e6:65:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSGApiCMvYL0M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk NjUyYWZkM2ItNTA5Yy00NGM5LThmODEtMTcyMTRiMTRlN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHNmtwYI1l0WmHFwG3a5MfJH/zNlbwhniQ8f H24WQTz4WB+a8NZ4ZvWZC75IesQAiXuIGpsXk4Amx7l/Ev2vYbH947++yQli4s3Y byyXid36hkOdu6Heo1/mqGt8Y8ZguCjKX1vdfuab8hvE+2xxRRYHYa0GWXvKTvve yLc7/JySEpfyVHSOQgVMCVLgEecvHknn1q26wPdBqljpFf8mFMv425nuQTrZf0r+ Nre8EccVfdBWMUh2M/V6g0RYXGlySK+urJoELubCwCzFlo2rWLAJ2h0mI4y88MWX 52bcOhZYI+1gdmsWcu71d/FB5BdhIWwfE7uFVFXMFns2jQyFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyAFhXIM7eflOAinD1l+hWBKIUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGQ1NTllZGYtNjg1Mi0z YjJlLThlNjItOGEwZDFjZDhiM2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJShXt3/bZPFees2ko92gN6OaG1EGA4SCKU1xCtIKUtwuai+lO6ZU2Ns DSDLGHQnuvQWvSG9zo8g86DVzgR1JNCa8LOocNJPd0wjNQwojqNHMwvqq2CWAfp8 3pprPRrAt962qd+xsLzfYA0jbX1ZY9HoZbkyIA1TzkRHHZ9w5ucGDFVWeWE95+Ik +P2TGZHH9eske0PLFxMvSbuEeNjbMf5eCHzjgHBAXFo0XdCYVNtQ5jiq4OgYoZay Qu2PcBnZBtljMl+llvIcs8pNfgR5jB2KoeF0BKkx8bZy4pHcEt+/qTbEPXvnLJKf RiAMaWYrcrR+qH7xWB6RvyK32vvmZVU= -----END CERTIFICATE-----Generated at Tue Sep 22 10:52:57 2026 by rpki-client