$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c866806-6d79-3b67-a043-761b6dcaba0f.roa File: 8c866806-6d79-3b67-a043-761b6dcaba0f.roa (raw, json) Hash identifier: YvTc4482r/a6wqXv5aqIg7ZT3LEsyLXD87DyzA2V+L0= Subject key identifier: CF:97:CC:2C:A3:5C:A1:53:32:AA:B9:6B:2F:9E:A3:11:56:92:E8:25 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4972FE372239B750336CA580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c866806-6d79-3b67-a043-761b6dcaba0f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 104.22.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fe:37:22:39:b7:50:33:6c:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=41b5e50a-8416-4b18-8ef0-db71abfd1749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:9b:0d:83:3f:0a:9a:6b:db:b2:33:6b:92: c9:a2:1f:bb:ea:5b:17:2e:10:ef:b7:22:dc:dc:fa: 58:db:96:68:dc:b5:6c:fa:51:07:e5:2c:e2:63:e0: 0d:21:3f:84:73:e2:32:b3:84:22:a4:09:65:39:54: e9:6c:55:eb:84:51:b3:78:ba:57:36:72:b3:93:49: 44:e0:d6:46:8f:c5:fc:29:f8:4d:d8:7c:36:ab:45: 80:44:d0:01:f0:34:2a:1b:f8:8b:81:29:09:ef:b9: 71:bc:70:b9:4d:12:8d:7d:10:18:41:91:30:b5:1b: 72:7e:db:58:8d:35:90:97:52:5f:4b:b1:d1:b2:cc: 22:0b:61:10:d3:ff:cb:90:89:c5:61:08:2e:27:6a: c8:9d:0d:ea:72:34:10:05:d9:8b:a4:7d:a2:a4:61: cc:07:cb:82:6e:3f:67:78:56:3b:f0:17:61:8b:bd: 8d:5d:96:ed:7b:10:f2:11:74:5d:d1:26:ec:8f:9e: 6d:0f:7c:3d:68:2a:a5:bf:d0:07:40:2c:1f:bb:0c: c8:9a:4e:79:c8:7d:05:e2:42:0a:58:23:30:07:20: 72:3c:fb:2a:68:f2:06:b8:d4:37:53:9c:4f:af:cc: 45:0c:44:c4:7c:27:5d:26:24:2d:e5:1b:67:06:6b: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:CC:2C:A3:5C:A1:53:32:AA:B9:6B:2F:9E:A3:11:56:92:E8:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c866806-6d79-3b67-a043-761b6dcaba0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:15:cd:e9:41:e4:03:ca:e6:50:ee:cb:52:ed:be:eb:ae:41: e0:ec:6c:89:1a:66:1c:45:56:83:8c:30:67:af:c3:f7:84:33: bb:e1:e2:1d:e4:0c:e4:36:da:2c:6a:cc:59:69:ee:17:09:a0: b5:f5:c0:22:23:ca:09:b0:41:5d:8d:24:fb:db:2e:99:22:f5: fa:22:f7:85:9a:0c:39:a4:bb:2d:4b:5c:2b:96:34:4e:6c:bc: a0:e1:8e:81:fa:7d:cc:a4:e5:50:73:94:b0:e3:3a:ea:5d:78: 25:61:14:55:21:cc:a2:43:ae:ce:51:fa:36:73:3e:38:34:e3: 2d:1e:37:12:e3:28:e0:12:96:d0:a2:00:aa:69:66:73:93:b6: 0e:cf:83:b5:15:05:cb:ed:28:b0:ff:4a:e5:e6:54:bd:e7:60: 05:d1:cf:a1:5a:58:9f:95:4a:65:65:47:04:12:97:9f:ed:05: 2c:8e:a4:fc:d4:76:db:7b:ca:56:80:76:05:99:bc:57:d5:43: 08:91:e4:e7:f8:eb:9b:8f:8b:3c:8f:1f:9a:ab:43:d6:e9:dc: 85:dd:13:44:6f:6c:bd:de:77:c5:af:a9:94:ef:3d:3a:42:ae: a6:e7:e0:4e:d3:3a:60:3c:34:9c:9c:93:16:a6:45:5e:af:67: f4:74:63:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcv43Ijm3UDNspYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDFiNWU1MGEtODQxNi00YjE4LThlZjAtZGI3MWFiZmQxNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqebDYM/Cppr27Iza5LJoh+76lsXLhDvtyLc 3PpY25Zo3LVs+lEH5SziY+ANIT+Ec+Iys4QipAllOVTpbFXrhFGzeLpXNnKzk0lE 4NZGj8X8KfhN2Hw2q0WARNAB8DQqG/iLgSkJ77lxvHC5TRKNfRAYQZEwtRtyfttY jTWQl1JfS7HRsswiC2EQ0//LkInFYQguJ2rInQ3qcjQQBdmLpH2ipGHMB8uCbj9n eFY78Bdhi72NXZbtexDyEXRd0Sbsj55tD3w9aCqlv9AHQCwfuwzImk55yH0F4kIK WCMwByByPPsqaPIGuNQ3U5xPr8xFDETEfCddJiQt5RtnBmvS6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+XzCyjXKFTMqq5ay+eoxFWkuglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGM4NjY4MDYtNmQ3OS0z YjY3LWEwNDMtNzYxYjZkY2FiYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0VzelB5APK5lDuy1LtvuuuQeDsbIkaZhxFVoOMMGevw/eEM7vh4h3k DOQ22ixqzFlp7hcJoLX1wCIjygmwQV2NJPvbLpki9foi94WaDDmkuy1LXCuWNE5s vKDhjoH6fcyk5VBzlLDjOupdeCVhFFUhzKJDrs5R+jZzPjg04y0eNxLjKOASltCi AKppZnOTtg7Pg7UVBcvtKLD/SuXmVL3nYAXRz6FaWJ+VSmVlRwQSl5/tBSyOpPzU dtt7ylaAdgWZvFfVQwiR5Of465uPizyPH5qrQ9bp3IXdE0RvbL3ed8WvqZTvPTpC rqbn4E7TOmA8NJyckxamRV6vZ/R0Y80= -----END CERTIFICATE-----Generated at Sat Sep 26 11:42:27 2026 by rpki-client