$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa File: 897fb56e-da5b-3350-83c3-5691de7bc50e.roa (raw, json) Hash identifier: NcrXS9jCp2c2hUZ37Z9EyzKqo7qz6Modx1I94zkw1TQ= Subject key identifier: DD:A4:4E:03:C3:19:70:90:79:AC:C9:1C:76:C2:57:29:6D:E8:3C:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D0912B573387E1A4F564BCB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 13335 IP address blocks: 104.23.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b5:73:38:7e:1a:4f:56:4b:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=32ae448c-9e2a-47a4-b5b3-ec698d76f04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:f6:57:42:b9:41:65:aa:cc:6b:16:3c:7f: c8:4e:bc:e5:8b:31:e3:dc:6a:a3:65:da:95:00:42: 19:54:14:ef:dd:c9:6a:34:ca:38:8c:59:fe:2a:7a: 9b:a4:d0:b8:3a:b7:1b:9c:b2:31:2a:b9:6d:ac:ed: e7:5d:85:26:ec:ad:18:0e:02:a8:40:94:e5:fa:c6: ed:8b:c4:de:f6:bb:80:bd:66:a0:3c:88:0f:8e:f9: 61:6e:b1:22:20:10:c6:0a:ca:2e:6d:64:d3:61:10: 9b:6b:40:12:df:21:62:70:e0:21:bf:e0:d2:6e:df: 9c:1f:55:44:a2:ef:8b:1d:a6:06:d3:53:b6:f4:dd: 3a:d1:d0:cd:02:a1:c6:b6:5b:49:88:76:d9:35:c1: 38:24:f1:c4:4b:3e:dc:20:ef:8b:91:a9:e1:90:c8: 96:0f:36:9f:2b:30:36:65:e8:ce:aa:98:92:e5:18: bc:0a:88:cc:30:ca:4a:59:7e:7f:12:a0:de:4a:c4: 7b:6a:05:55:a5:55:a0:5a:d3:1c:4c:ec:8f:53:d7: 4d:eb:cd:c6:67:9e:dd:df:4e:e9:48:77:17:b5:22: f6:c4:21:22:62:20:2b:10:aa:1f:df:f6:fa:92:69: 58:e3:56:2c:9f:22:f2:5b:9b:42:08:de:7d:ce:06: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:4E:03:C3:19:70:90:79:AC:C9:1C:76:C2:57:29:6D:E8:3C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7a:79:22:45:25:e5:39:cc:00:b3:95:4c:d8:03:1b:f0:89: c2:cd:b2:ba:f8:c1:2b:b4:e4:b7:93:f3:7d:b3:38:18:8a:95: 9b:cc:23:0a:77:ad:26:56:0f:73:a1:cc:bd:a4:25:50:c4:1e: 26:ac:2a:15:fd:a3:1d:38:60:4d:5b:18:b5:c5:b1:87:eb:88: 30:e7:78:df:c7:45:89:69:e7:e6:62:34:a0:28:db:0f:a2:ed: a2:d8:8e:c1:7e:ee:af:f4:e8:5f:1d:58:f5:bc:48:48:7b:75: 18:7f:10:3e:b6:21:d7:c1:d5:30:bb:3a:79:1e:57:0a:71:6d: eb:45:53:92:de:a4:2c:9b:84:e1:f5:7f:2c:ff:4d:cf:f5:03: 04:de:aa:58:56:7e:7b:9f:83:f4:3b:16:c6:2a:e5:2a:54:17: 43:30:ac:26:99:d5:ce:60:89:0a:f0:af:8c:54:05:c2:2c:c0: 72:ec:a5:2f:97:fd:dc:24:0a:5b:7d:aa:f4:30:eb:53:0d:71: 30:f4:a1:78:db:af:8b:11:a8:fc:76:1c:20:de:61:4c:14:4a: 9a:b1:b5:11:77:4c:05:fb:e4:d1:c3:be:8c:ff:27:2f:d1:90: ed:ac:88:18:42:bf:0a:45:7d:03:11:4f:56:89:05:8b:7d:fd: df:18:5b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JErVzOH4aT1ZLy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzJhZTQ0OGMtOWUyYS00N2E0LWI1YjMtZWM2OThkNzZmMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ72V0K5QWWqzGsWPH/ITrzlizHj3GqjZdqV AEIZVBTv3clqNMo4jFn+KnqbpNC4OrcbnLIxKrltrO3nXYUm7K0YDgKoQJTl+sbt i8Te9ruAvWagPIgPjvlhbrEiIBDGCsoubWTTYRCba0AS3yFicOAhv+DSbt+cH1VE ou+LHaYG01O29N060dDNAqHGtltJiHbZNcE4JPHESz7cIO+LkanhkMiWDzafKzA2 ZejOqpiS5Ri8CojMMMpKWX5/EqDeSsR7agVVpVWgWtMcTOyPU9dN683GZ57d307p SHcXtSL2xCEiYiArEKof3/b6kmlY41YsnyLyW5tCCN59zgZRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2kTgPDGXCQeazJHHbCVylt6Dx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODk3ZmI1NmUtZGE1Yi0z MzUwLTgzYzMtNTY5MWRlN2JjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC56eSJFJeU5zACzlUzYAxvwicLNsrr4wSu05LeT832zOBiKlZvMIwp3 rSZWD3OhzL2kJVDEHiasKhX9ox04YE1bGLXFsYfriDDneN/HRYlp5+ZiNKAo2w+i 7aLYjsF+7q/06F8dWPW8SEh7dRh/ED62IdfB1TC7OnkeVwpxbetFU5LepCybhOH1 fyz/Tc/1AwTeqlhWfnufg/Q7FsYq5SpUF0MwrCaZ1c5giQrwr4xUBcIswHLspS+X /dwkClt9qvQw61MNcTD0oXjbr4sRqPx2HCDeYUwUSpqxtRF3TAX75NHDvoz/Jy/R kO2siBhCvwpFfQMRT1aJBYt9/d8YW4M= -----END CERTIFICATE-----Generated at Wed Mar 4 16:07:57 2026 by rpki-client