$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e32223e-d183-3253-99b5-a67b051b7412.roa File: 5e32223e-d183-3253-99b5-a67b051b7412.roa (raw, json) Hash identifier: 3LYOKHMRIw1MKfpLy48atCTsPvB8Lco7Ur6+YiYjK3Q= Subject key identifier: 6B:C2:5E:D1:DA:DF:3F:4E:9B:85:1B:7B:B5:E1:02:43:E5:AA:B2:C2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D9576AEE140B23CA81D9B5200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e32223e-d183-3253-99b5-a67b051b7412.roa Signing time: Tue 21 Apr 2026 20:56:09 +0000 ROA not before: Tue 21 Apr 2026 20:56:09 +0000 ROA not after: Mon 20 Jul 2026 20:56:09 +0000 asID: 13335 IP address blocks: 104.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:76:ae:e1:40:b2:3c:a8:1d:9b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 21 20:56:09 2026 GMT Not After : Jul 20 20:56:09 2026 GMT Subject: CN=b01f780e-d2ff-4d0a-a6c2-c14090b33a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:7a:0a:85:85:22:df:5d:22:fb:c0:99:82: a2:bf:f6:2f:84:26:ec:63:36:20:d4:a0:50:07:4a: 1f:82:42:44:06:32:84:e5:33:d9:36:f1:13:66:5f: cd:54:06:b5:03:be:48:12:29:cc:a6:26:74:61:64: 48:9c:dd:48:1a:a1:36:10:38:3c:df:20:22:d2:b1: 31:dd:0d:b0:4c:ad:44:a1:11:18:89:bc:d6:c5:ee: 37:46:02:93:89:94:a8:f8:6c:d7:7b:bb:2b:c0:69: d3:3b:1d:80:ea:6b:ba:2e:aa:88:74:e2:4e:4d:82: 3b:d1:12:86:2f:25:b1:42:64:60:ba:2f:16:d5:45: 1d:7c:b7:26:37:b6:14:f6:a7:27:29:38:e4:03:c3: 62:0b:f1:ac:57:78:e9:7c:51:55:4d:63:dc:e3:ec: 89:e9:04:d0:f3:e3:83:36:38:39:8e:25:92:96:dd: ea:5e:9d:09:fc:52:a1:da:df:01:4a:2a:60:d8:b4: 79:df:a5:6a:3a:c1:98:b3:01:93:94:50:86:a6:4b: 8a:32:6e:1d:50:76:38:d1:12:df:10:66:78:68:37: c2:6e:62:94:64:9f:e8:3d:90:e6:d3:64:86:50:22: db:2b:3c:bd:a8:fd:3b:50:0c:35:6d:59:5c:d6:9d: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C2:5E:D1:DA:DF:3F:4E:9B:85:1B:7B:B5:E1:02:43:E5:AA:B2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e32223e-d183-3253-99b5-a67b051b7412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:72:12:5c:b7:41:d8:03:48:06:1d:25:59:09:be:c1:eb:eb: 30:4c:a3:88:2d:6a:95:b0:56:93:2a:0f:df:e5:46:20:33:c8: 59:36:1e:0e:22:b8:34:28:4c:da:0e:b9:53:0f:7a:80:61:15: 23:b9:c9:b4:e7:e8:e8:27:2a:7a:d9:91:71:83:70:94:ec:42: f4:23:40:11:60:34:cc:56:0a:e5:cc:91:0b:5f:84:e0:7a:bf: 13:fe:c9:1c:90:bc:74:6c:b0:2b:19:cd:cc:98:b4:15:c5:9e: 2f:d9:a2:ba:d7:22:3e:70:0a:a6:6b:04:69:97:df:3e:05:51: b8:77:0c:19:fb:be:94:63:15:cd:b4:e8:4c:44:37:51:c0:1f: 9d:55:5b:30:40:ba:60:44:08:49:62:f2:fa:17:31:16:2e:2f: f7:59:3d:83:64:98:55:f3:d2:e6:cd:ae:c5:de:15:b7:42:00: 72:23:30:30:ea:5c:bc:ea:22:06:c1:90:2d:52:20:7c:53:60: 8c:41:b8:fe:31:15:e0:5f:bc:a9:93:ad:ca:ac:99:bb:9e:7c: dc:f1:78:93:9b:f2:89:c5:1b:94:0f:7e:90:b6:63:ad:23:a4: d6:8f:93:54:75:fe:9a:0d:c7:77:0a:41:c5:c7:96:ae:7c:c6: 52:fe:c1:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Vdq7hQLI8qB2bUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMTIwNTYwOVoXDTI2MDcyMDIwNTYwOVowLzEtMCsGA1UEAxMk YjAxZjc4MGUtZDJmZi00ZDBhLWE2YzItYzE0MDkwYjMzYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP56CoWFIt9dIvvAmYKiv/YvhCbsYzYg1KBQ B0ofgkJEBjKE5TPZNvETZl/NVAa1A75IEinMpiZ0YWRInN1IGqE2EDg83yAi0rEx 3Q2wTK1EoREYibzWxe43RgKTiZSo+GzXe7srwGnTOx2A6mu6LqqIdOJOTYI70RKG LyWxQmRgui8W1UUdfLcmN7YU9qcnKTjkA8NiC/GsV3jpfFFVTWPc4+yJ6QTQ8+OD Njg5jiWSlt3qXp0J/FKh2t8BSipg2LR536VqOsGYswGTlFCGpkuKMm4dUHY40RLf EGZ4aDfCbmKUZJ/oPZDm02SGUCLbKzy9qP07UAw1bVlc1p0oJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvCXtHa3z9Om4Ube7XhAkPlqrLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWUzMjIyM2UtZDE4My0z MjUzLTk5YjUtYTY3YjA1MWI3NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFyEly3QdgDSAYdJVkJvsHr6zBMo4gtapWwVpMqD9/lRiAzyFk2Hg4i uDQoTNoOuVMPeoBhFSO5ybTn6OgnKnrZkXGDcJTsQvQjQBFgNMxWCuXMkQtfhOB6 vxP+yRyQvHRssCsZzcyYtBXFni/ZorrXIj5wCqZrBGmX3z4FUbh3DBn7vpRjFc20 6ExEN1HAH51VWzBAumBECEli8voXMRYuL/dZPYNkmFXz0ubNrsXeFbdCAHIjMDDq XLzqIgbBkC1SIHxTYIxBuP4xFeBfvKmTrcqsmbuefNzxeJOb8onFG5QPfpC2Y60j pNaPk1R1/poNx3cKQcXHlq58xlL+wWE= -----END CERTIFICATE-----Generated at Sat May 9 08:09:42 2026 by rpki-client