$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58154fe6-99a6-34ed-b145-84b8f9aa4536.roa File: 58154fe6-99a6-34ed-b145-84b8f9aa4536.roa (raw, json) Hash identifier: 8TvXpEU8z6r1/OAjJ24BhO6zqy8hlkf0WjwzSGMM9Sg= Subject key identifier: 68:C1:47:6A:5D:FD:83:DE:7B:81:28:49:CD:8E:FA:96:E0:A9:82:36 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F331D321EEF4D9443E6A46180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58154fe6-99a6-34ed-b145-84b8f9aa4536.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 13335 IP address blocks: 104.22.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:32:1e:ef:4d:94:43:e6:a4:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=8570c484-83d5-430b-9129-c2d940c5688a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:41:a9:29:47:30:7f:9a:41:be:b9:af:44:b0: a2:d6:d6:d4:af:de:8d:4e:b8:4a:86:4d:b9:41:90: 81:5b:44:2e:74:f4:52:cd:99:4a:13:1b:9a:4f:e2: 25:16:5c:b9:49:c7:fc:6c:27:51:8a:b9:dc:fe:fc: e1:d0:b7:11:aa:02:4f:6b:ef:90:14:f6:0f:b1:bb: d0:d6:c7:f7:be:34:21:8d:b6:f0:66:84:53:e6:4e: 76:78:a7:61:5e:8c:e9:45:04:9c:1e:d3:e4:b8:02: 47:e3:84:fd:aa:f6:b4:ed:04:83:a2:d9:d7:42:28: cd:3a:65:44:62:88:6f:99:59:a3:41:82:8a:8d:61: 19:0d:69:07:80:e9:6a:11:1c:28:40:ab:ca:ff:99: d4:23:60:50:b1:16:4f:be:e3:1e:5f:a6:8c:08:7f: 90:98:48:c7:c3:ac:23:d9:12:2e:bc:91:fb:5d:b7: b4:0f:00:c2:e2:4f:b9:c3:83:36:19:be:c8:d9:32: 23:96:de:5d:ae:90:86:2b:d1:87:9f:5e:7b:d1:c9: 3b:89:8f:16:9b:00:9c:33:cb:a0:ea:48:00:3b:ce: e5:d9:d1:d2:88:8c:2f:aa:ae:45:31:cb:95:60:9e: 10:91:85:cf:eb:fb:6c:05:69:6e:02:a2:13:c7:a2: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C1:47:6A:5D:FD:83:DE:7B:81:28:49:CD:8E:FA:96:E0:A9:82:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58154fe6-99a6-34ed-b145-84b8f9aa4536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f4:f9:d4:9d:92:dd:85:49:f6:58:de:71:8e:9c:5b:ae:7f: 1b:45:5f:da:e0:c0:3a:d8:eb:73:ce:04:fd:33:8f:f8:54:04: 33:c4:9e:31:97:8b:be:00:89:b2:1d:f7:eb:e6:ad:90:58:c1: 85:70:ca:68:e7:4d:e5:6b:46:27:05:ba:85:f2:7d:87:96:d6: 5b:27:b8:41:ab:bb:8b:dc:47:01:1d:bd:9e:22:2a:10:5a:23: 2b:a5:8b:27:c3:89:78:d3:8c:36:ec:10:27:e5:18:45:bf:88: 91:50:2a:a7:07:17:21:04:59:f7:cb:b0:6c:5d:71:20:ea:18: 57:27:f8:6a:a1:60:84:b7:d5:48:02:ce:5a:11:4b:dd:d8:61: c5:7c:2f:22:d8:4c:9c:49:f3:79:05:45:ef:18:e5:96:51:94: 94:72:e8:50:3e:15:f5:7e:33:1a:4a:c2:ff:cd:6e:e3:b3:1f: 8a:a6:3f:cb:76:ad:37:cd:42:63:11:ad:b3:4f:23:e0:3b:f9: 0e:cf:8e:47:d9:98:bf:b4:e0:44:98:d5:22:c2:d8:99:01:d7: e3:32:49:45:3d:1a:7e:a9:ec:4d:c1:1d:98:02:9d:48:6d:ea: f2:1f:1e:82:03:21:14:f7:63:f9:22:dc:f0:81:72:e0:f0:9e: ac:a0:92:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHTIe702UQ+akYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ODU3MGM0ODQtODNkNS00MzBiLTkxMjktYzJkOTQwYzU2ODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0GpKUcwf5pBvrmvRLCi1tbUr96NTrhKhk25 QZCBW0QudPRSzZlKExuaT+IlFly5Scf8bCdRirnc/vzh0LcRqgJPa++QFPYPsbvQ 1sf3vjQhjbbwZoRT5k52eKdhXozpRQScHtPkuAJH44T9qva07QSDotnXQijNOmVE YohvmVmjQYKKjWEZDWkHgOlqERwoQKvK/5nUI2BQsRZPvuMeX6aMCH+QmEjHw6wj 2RIuvJH7Xbe0DwDC4k+5w4M2Gb7I2TIjlt5drpCGK9GHn1570ck7iY8WmwCcM8ug 6kgAO87l2dHSiIwvqq5FMcuVYJ4QkYXP6/tsBWluAqITx6K2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjBR2pd/YPee4EoSc2O+pbgqYI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTgxNTRmZTYtOTlhNi0z NGVkLWIxNDUtODRiOGY5YWE0NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX0+dSdkt2FSfZY3nGOnFuufxtFX9rgwDrY63POBP0zj/hUBDPEnjGX i74AibId9+vmrZBYwYVwymjnTeVrRicFuoXyfYeW1lsnuEGru4vcRwEdvZ4iKhBa IyuliyfDiXjTjDbsECflGEW/iJFQKqcHFyEEWffLsGxdcSDqGFcn+GqhYIS31UgC zloRS93YYcV8LyLYTJxJ83kFRe8Y5ZZRlJRy6FA+FfV+MxpKwv/NbuOzH4qmP8t2 rTfNQmMRrbNPI+A7+Q7PjkfZmL+04ESY1SLC2JkB1+MySUU9Gn6p7E3BHZgCnUht 6vIfHoIDIRT3Y/ki3PCBcuDwnqygkvY= -----END CERTIFICATE-----Generated at Tue Sep 22 15:09:43 2026 by rpki-client