$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/668d251f-1349-33b0-b58c-8d264d51b26e.roa File: 668d251f-1349-33b0-b58c-8d264d51b26e.roa (raw, json) Hash identifier: k9zRbBmc8RjwQ6Qhh4K62HRMZI6I8DAiQ/DEXM0+fuE= Subject key identifier: 87:98:84:E5:F5:86:4B:D6:A3:53:C7:3E:C1:4C:E2:69:89:6A:E3:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF87CC0BFF88D2736E0F2FE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/668d251f-1349-33b0-b58c-8d264d51b26e.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.23.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c0:bf:f8:8d:27:36:e0:f2:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=bf345e26-cc6a-483c-95dd-f0dff6403f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:1c:96:8e:03:c1:29:ad:e1:49:7e:06:de: 9d:40:d7:04:b0:78:91:b2:5c:36:71:78:4d:23:ba: db:42:6b:93:81:8e:2a:2d:0a:9e:81:7b:d0:40:7f: e2:75:0d:d0:c5:3a:52:e6:1c:a6:1d:e8:58:80:7a: f5:78:db:aa:65:81:43:a2:dc:12:53:cb:6c:61:a8: b8:31:23:96:90:a2:c0:78:fb:3c:1f:25:27:17:c5: ac:a2:28:74:69:d0:c2:48:10:c2:be:3e:f2:0a:30: 41:96:5a:33:24:b1:de:6f:d3:ce:d4:8d:dd:98:2f: fa:b5:bb:39:13:0f:2c:4c:35:a5:aa:72:af:fe:24: 72:ce:80:1d:6d:69:0c:d3:fa:b0:d8:ec:9b:91:de: 15:c7:f4:99:b0:67:26:3d:d9:0c:47:af:f0:75:1b: ac:42:7e:9c:60:ab:04:ca:c1:04:63:f8:f8:30:18: fc:3e:dc:c2:99:e3:8b:7e:4d:92:6f:88:1d:e3:db: bf:69:66:bb:95:3e:97:00:2d:33:a1:04:fb:86:4b: 61:3b:0e:36:35:ae:00:cc:39:42:db:36:9c:f6:d7: 72:9f:95:4b:ea:2e:0e:cc:4f:47:9d:65:03:79:60: 59:24:eb:3f:3a:2e:82:75:4c:56:fa:df:37:98:39: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:98:84:E5:F5:86:4B:D6:A3:53:C7:3E:C1:4C:E2:69:89:6A:E3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/668d251f-1349-33b0-b58c-8d264d51b26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b9:5f:02:b6:4b:58:9a:2e:a1:04:c5:42:4b:a9:44:11:72: 8b:57:ba:1a:41:c9:9d:e2:89:b6:73:00:29:54:ae:5f:ec:42: b2:47:aa:09:6e:e5:27:4d:c8:3e:65:b0:63:f6:c5:b2:39:c9: ca:f1:45:76:c3:ee:73:ba:73:e6:a7:db:5c:73:60:61:24:2d: 49:85:32:b8:ad:4a:69:b2:93:70:71:ce:1b:a5:ee:5e:49:1f: c7:ae:79:12:96:b4:34:22:26:eb:2b:42:5b:b7:3f:01:53:da: 5a:49:51:ed:f8:35:52:d1:64:38:11:e4:e4:fe:a0:5f:92:5e: f4:df:51:61:6f:59:30:ac:f6:31:dc:f0:56:29:f0:dc:db:f1: 19:ff:97:26:55:b4:9a:6a:2f:fa:2d:e6:7b:44:f4:2c:1d:92: 24:b4:0a:16:93:7a:ca:c6:5b:ec:1b:65:d6:bc:4e:06:a0:22: 68:6b:e2:2a:51:1a:60:2b:99:e8:e8:ec:ef:20:c2:6c:30:cc: d4:57:da:c2:be:48:33:f9:e9:39:3a:31:45:dc:c6:1d:29:e4: 5d:be:63:7d:08:8c:1d:9b:0c:da:43:71:2e:81:c1:3e:9c:ed: 48:21:8a:07:c6:00:de:83:9d:0f:52:6e:57:c3:ae:e9:fc:ce: db:d4:11:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMC/+I0nNuDy/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YmYzNDVlMjYtY2M2YS00ODNjLTk1ZGQtZjBkZmY2NDAzZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfMclo4DwSmt4Ul+Bt6dQNcEsHiRslw2cXhN I7rbQmuTgY4qLQqegXvQQH/idQ3QxTpS5hymHehYgHr1eNuqZYFDotwSU8tsYai4 MSOWkKLAePs8HyUnF8Wsoih0adDCSBDCvj7yCjBBllozJLHeb9PO1I3dmC/6tbs5 Ew8sTDWlqnKv/iRyzoAdbWkM0/qw2Oybkd4Vx/SZsGcmPdkMR6/wdRusQn6cYKsE ysEEY/j4MBj8PtzCmeOLfk2Sb4gd49u/aWa7lT6XAC0zoQT7hkthOw42Na4AzDlC 2zac9tdyn5VL6i4OzE9HnWUDeWBZJOs/Oi6CdUxW+t83mDns5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeYhOX1hkvWo1PHPsFM4mmJauPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjY4ZDI1MWYtMTM0OS0z M2IwLWI1OGMtOGQyNjRkNTFiMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES5XwK2S1iaLqEExUJLqUQRcotXuhpByZ3iibZzAClUrl/sQrJHqglu 5SdNyD5lsGP2xbI5ycrxRXbD7nO6c+an21xzYGEkLUmFMritSmmyk3Bxzhul7l5J H8eueRKWtDQiJusrQlu3PwFT2lpJUe34NVLRZDgR5OT+oF+SXvTfUWFvWTCs9jHc 8FYp8Nzb8Rn/lyZVtJpqL/ot5ntE9CwdkiS0ChaTesrGW+wbZda8TgagImhr4ipR GmArmejo7O8gwmwwzNRX2sK+SDP56Tk6MUXcxh0p5F2+Y30IjB2bDNpDcS6BwT6c 7UghigfGAN6DnQ9SblfDrun8ztvUEYQ= -----END CERTIFICATE-----Generated at Tue Sep 22 11:26:11 2026 by rpki-client