$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7403c67d-06c2-3e94-974c-8f751de6a374.roa File: 7403c67d-06c2-3e94-974c-8f751de6a374.roa (raw, json) Hash identifier: vQ3EOLuXSgQYoz5wFoS9hKUV6FCd6LTy8qjE5xRvpkM= Subject key identifier: E7:59:C1:1A:4E:68:81:E4:22:92:9D:28:2B:7B:AE:63:FA:CA:F6:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D97208ECAD892355400CC4480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7403c67d-06c2-3e94-974c-8f751de6a374.roa Signing time: Wed 22 Apr 2026 11:14:14 +0000 ROA not before: Wed 22 Apr 2026 11:14:14 +0000 ROA not after: Tue 21 Jul 2026 11:14:14 +0000 asID: 13335 IP address blocks: 104.22.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:20:8e:ca:d8:92:35:54:00:cc:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 11:14:14 2026 GMT Not After : Jul 21 11:14:14 2026 GMT Subject: CN=e5b20bfa-253a-479a-bac7-8ad54ad5fa58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:da:ae:6c:42:ad:f6:14:21:43:56:85:12: 97:9f:06:e5:b0:38:6a:50:a6:50:1b:23:f1:2b:1a: ea:48:6e:6c:e9:da:49:b0:e1:0c:35:d6:18:2e:1f: 02:dc:d4:6a:dd:23:02:83:22:c3:7e:33:5f:4b:a2: dc:f3:bb:9c:b6:6c:aa:ec:56:c3:6d:63:71:88:85: f6:25:2d:9f:6f:c6:0d:29:98:80:2c:26:03:ac:72: 40:73:75:fc:1f:34:89:d2:7b:96:3f:f6:f8:50:54: 86:f0:86:2b:84:d5:c4:ca:0d:fe:4f:58:38:94:ea: 55:0f:c6:08:72:8a:8a:fe:94:7d:27:d6:20:73:fb: 4c:5b:8e:e2:3c:44:69:45:2f:5e:77:08:5a:6e:01: 10:b2:61:e3:e6:e2:e8:3b:bb:29:ba:aa:3d:5f:9c: 85:f1:5f:36:4d:84:24:48:ea:98:02:dc:64:5b:68: 11:80:d4:d1:4d:3f:4d:13:61:1b:56:03:e2:49:53: 85:9c:72:45:01:e2:16:cc:ae:39:63:4c:d5:29:e9: 46:1c:66:19:35:8f:26:ad:bd:79:45:d0:08:1f:88: ea:e1:ef:fd:0e:cb:72:1b:15:f1:ca:8b:2e:70:e7: 40:b8:cf:20:2e:50:67:9a:81:64:c3:4f:4d:2b:f4: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:59:C1:1A:4E:68:81:E4:22:92:9D:28:2B:7B:AE:63:FA:CA:F6:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7403c67d-06c2-3e94-974c-8f751de6a374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:14:08:b4:84:83:84:9c:d3:c3:c0:4d:25:e6:f0:9c:da:f1: 5c:29:d1:c9:59:b5:48:5e:ba:8f:fc:c3:28:fb:83:48:05:3f: 46:19:e5:84:e4:29:a3:ce:44:ff:f9:61:89:d7:60:ce:ca:ea: ef:38:30:30:37:c1:b3:08:00:f4:84:28:94:b2:2f:08:35:e9: fc:f8:cc:67:81:df:63:8b:ea:8a:8b:10:e2:25:92:11:48:12: f3:6f:8a:0c:7e:3f:78:27:19:9d:ac:a5:2f:16:9e:ad:cd:dc: a3:f9:08:78:54:2f:48:21:5d:9a:98:88:48:5b:d1:8c:5d:5c: 4d:e2:b4:67:16:36:4f:05:26:8f:ca:00:64:2d:e2:ef:44:2f: e1:78:a3:02:87:b0:97:a9:91:d6:8b:f4:07:fb:2c:5f:ac:e9: 06:7a:61:0b:21:57:14:4d:9b:6f:f4:67:01:96:a6:d4:77:e9: 1c:01:da:69:88:ac:1f:34:42:56:fa:d4:8d:9c:c1:62:10:c3: 5a:67:e7:79:57:63:b0:de:42:2f:7f:bc:3a:a0:83:70:14:e7: 85:89:14:58:34:ef:34:1e:e5:e5:f0:f3:0d:2e:f5:03:4f:f7: 2f:8b:09:ae:60:b3:9b:1d:8b:1e:6d:14:87:22:7c:f2:65:91: 78:67:4e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XII7K2JI1VADMRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMjExMTQxNFoXDTI2MDcyMTExMTQxNFowLzEtMCsGA1UEAxMk ZTViMjBiZmEtMjUzYS00NzlhLWJhYzctOGFkNTRhZDVmYTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgszarmxCrfYUIUNWhRKXnwblsDhqUKZQGyPx KxrqSG5s6dpJsOEMNdYYLh8C3NRq3SMCgyLDfjNfS6Lc87uctmyq7FbDbWNxiIX2 JS2fb8YNKZiALCYDrHJAc3X8HzSJ0nuWP/b4UFSG8IYrhNXEyg3+T1g4lOpVD8YI coqK/pR9J9Ygc/tMW47iPERpRS9edwhabgEQsmHj5uLoO7spuqo9X5yF8V82TYQk SOqYAtxkW2gRgNTRTT9NE2EbVgPiSVOFnHJFAeIWzK45Y0zVKelGHGYZNY8mrb15 RdAIH4jq4e/9DstyGxXxyosucOdAuM8gLlBnmoFkw09NK/Q0yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdZwRpOaIHkIpKdKCt7rmP6yvbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzQwM2M2N2QtMDZjMi0z ZTk0LTk3NGMtOGY3NTFkZTZhMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUUCLSEg4Sc08PATSXm8Jza8Vwp0clZtUheuo/8wyj7g0gFP0YZ5YTk KaPORP/5YYnXYM7K6u84MDA3wbMIAPSEKJSyLwg16fz4zGeB32OL6oqLEOIlkhFI EvNvigx+P3gnGZ2spS8Wnq3N3KP5CHhUL0ghXZqYiEhb0YxdXE3itGcWNk8FJo/K AGQt4u9EL+F4owKHsJepkdaL9Af7LF+s6QZ6YQshVxRNm2/0ZwGWptR36RwB2mmI rB80Qlb61I2cwWIQw1pn53lXY7DeQi9/vDqgg3AU54WJFFg07zQe5eXw8w0u9QNP 9y+LCa5gs5sdix5tFIcifPJlkXhnTio= -----END CERTIFICATE-----Generated at Sat May 9 08:09:42 2026 by rpki-client