$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa File: 90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa (raw, json) Hash identifier: P1vVKzYLqR2tFcFZYN9DclHVAiZ+wXa2a9GRBRNUiv0= Subject key identifier: 03:30:12:D4:FB:8F:D2:26:CA:41:A1:16:25:02:17:F2:08:BC:25:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DBA3ADF1E96538A26273B86CE Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.23.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:df:1e:96:53:8a:26:27:3b:86:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=ad0a61db-d964-4d71-bc7d-565087bc4676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:8e:08:3f:df:c3:47:b6:63:1e:f8:d5:de: 4c:68:b5:58:10:50:e4:52:70:fe:1e:f2:f2:5b:5e: 1d:07:8b:98:9e:e8:2f:8c:11:b9:db:07:50:8f:61: ac:f1:50:f5:63:10:b6:39:77:be:5c:c6:2f:c0:68: 53:95:95:14:a0:0c:7b:d1:1e:04:ab:c5:25:ba:c3: bd:55:1f:22:e9:e0:d7:74:95:9c:fb:9f:ff:7f:19: de:9f:c3:ac:bf:6e:61:0b:5b:8f:63:67:b0:fe:73: 15:57:db:d2:ab:4c:e8:e4:ae:05:c2:64:7c:7e:00: e1:69:58:b5:f3:85:cd:db:0e:04:c8:2c:25:86:b4: 66:84:29:5b:c5:b1:85:f7:f7:57:f6:44:48:62:2b: 8a:30:85:61:c5:32:d4:d1:2d:6c:58:e0:7b:a8:d7: 38:f8:f2:b5:db:8f:4c:f2:ca:15:fc:34:f8:01:df: 1f:a0:9c:4b:93:e1:3f:3a:09:6c:ac:e9:a1:9a:1f: 58:79:03:72:de:96:35:f2:8c:99:41:5e:e2:b1:01: 82:6e:b0:e0:25:3d:85:02:5c:a9:6a:96:17:a4:bf: 24:12:ec:29:de:7a:37:4e:99:89:e1:52:17:47:ba: 76:bb:84:b7:fa:ee:ac:2a:20:87:e8:7f:6f:92:34: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:30:12:D4:FB:8F:D2:26:CA:41:A1:16:25:02:17:F2:08:BC:25:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:9d:e9:c4:d2:de:40:a3:5c:29:07:1e:71:05:2f:14:a1:17: 9b:c1:e4:76:6e:64:8c:45:91:de:19:e7:aa:6d:d0:0a:6b:8f: 53:b3:6f:68:9b:47:66:bc:89:a4:21:0e:6f:64:70:ed:a2:6a: cf:28:6b:02:25:0b:47:18:28:0a:1e:ef:83:72:48:c6:a0:70: e8:a8:fe:af:fa:01:f7:77:9b:8d:17:43:0b:f1:d5:34:fc:74: 44:c4:77:85:9f:4d:6a:a9:a2:8c:26:89:e6:59:3e:05:96:64: 30:89:06:e2:28:12:75:d3:eb:cc:24:1a:c5:4f:d7:ec:37:29: 6c:89:44:90:19:8d:9b:42:93:be:8b:9d:c9:cb:b1:ef:cc:34: e1:aa:19:74:97:dc:4c:7a:49:a8:77:55:65:41:a9:a2:78:b6: 2e:25:02:e8:b5:41:9c:94:0f:79:48:a6:60:30:c3:eb:fc:f7: 82:c3:7f:2f:a6:75:0c:e7:6b:9e:e0:04:c3:ff:98:b3:bb:79: d9:be:1a:0a:c6:56:e2:08:0a:c3:5d:af:33:97:16:0c:8e:27: 5a:b5:30:7c:46:6e:cc:35:86:87:77:f7:00:bc:ed:70:6e:bc: 33:c4:1b:c5:03:dc:3b:ca:a5:25:4e:5d:08:e6:3d:36:06:da: 4e:f2:15:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ot8ellOKJic7hs4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk YWQwYTYxZGItZDk2NC00ZDcxLWJjN2QtNTY1MDg3YmM0Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNKOCD/fw0e2Yx741d5MaLVYEFDkUnD+HvLy W14dB4uYnugvjBG52wdQj2Gs8VD1YxC2OXe+XMYvwGhTlZUUoAx70R4Eq8UlusO9 VR8i6eDXdJWc+5//fxnen8Osv25hC1uPY2ew/nMVV9vSq0zo5K4FwmR8fgDhaVi1 84XN2w4EyCwlhrRmhClbxbGF9/dX9kRIYiuKMIVhxTLU0S1sWOB7qNc4+PK1249M 8soV/DT4Ad8foJxLk+E/OglsrOmhmh9YeQNy3pY18oyZQV7isQGCbrDgJT2FAlyp apYXpL8kEuwp3no3TpmJ4VIXR7p2u4S3+u6sKiCH6H9vkjQEowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMwEtT7j9ImykGhFiUCF/IIvCVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTBjMWQzYTctMjYxYy0z Y2RiLWJmYzktYjcwY2IzZDZhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+d6cTS3kCjXCkHHnEFLxShF5vB5HZuZIxFkd4Z56pt0Aprj1Ozb2ib R2a8iaQhDm9kcO2ias8oawIlC0cYKAoe74NySMagcOio/q/6Afd3m40XQwvx1TT8 dETEd4WfTWqpoowmieZZPgWWZDCJBuIoEnXT68wkGsVP1+w3KWyJRJAZjZtCk76L ncnLse/MNOGqGXSX3Ex6Sah3VWVBqaJ4ti4lAui1QZyUD3lIpmAww+v894LDfy+m dQzna57gBMP/mLO7edm+GgrGVuIICsNdrzOXFgyOJ1q1MHxGbsw1hod39wC87XBu vDPEG8UD3DvKpSVOXQjmPTYG2k7yFVg= -----END CERTIFICATE-----Generated at Sat May 9 08:10:32 2026 by rpki-client