$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b213216-b630-3fd1-b7e7-09316927b8c0.roa File: 9b213216-b630-3fd1-b7e7-09316927b8c0.roa (raw, json) Hash identifier: 0Yu9KBaKqWx+YWc56Fjs988lL2rTJ6ypc3Fi4mEwo+I= Subject key identifier: C2:76:5E:68:B4:A0:91:C4:F7:99:F0:91:F5:FD:6E:81:A6:F6:5D:1F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F13023744D93D2AA784CCE180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b213216-b630-3fd1-b7e7-09316927b8c0.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.23.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:37:44:d9:3d:2a:a7:84:cc:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=134ef739-1d47-415d-9fbd-105ff9f3c104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:24:b9:ae:29:24:b5:8a:ba:85:4a:82:3f: 57:48:b6:49:dc:a0:69:23:cd:0c:cb:9e:22:cd:a6: ac:4f:e6:11:e6:44:5f:12:8c:03:74:de:15:62:d0: df:a3:7a:62:be:7a:cf:bf:d8:82:3a:fc:02:44:ea: 44:bb:55:14:d1:53:76:dd:bd:ea:d3:5a:c9:f2:c9: a9:25:e1:4a:6c:1c:b4:fc:67:e2:2f:43:4c:d0:4f: d4:83:0e:b7:3d:93:12:00:bf:06:24:a3:df:00:df: 50:4b:be:ff:a0:cd:9c:72:9c:d7:99:00:cb:d0:26: 24:85:26:50:28:f2:ff:d1:54:85:55:d8:e0:17:c6: b4:cf:83:17:59:04:ac:a2:a9:89:e9:c0:ca:be:68: cb:73:17:7d:7d:4c:a4:a1:1c:5a:3a:48:b4:97:8b: e2:dc:3c:9f:c7:da:86:43:cd:d6:da:71:62:38:4c: e9:16:b9:bd:c6:45:66:7e:9a:64:56:d9:08:3b:80: 38:f2:9d:04:58:2f:3d:dd:cc:85:6b:b2:ee:67:30: dc:52:36:37:af:90:0f:11:cf:0a:f9:eb:cf:86:96: f8:3e:7f:45:dc:77:f9:8e:43:89:e2:6a:e3:dc:2b: 5d:0a:5d:8c:ea:bc:f4:76:5c:dc:a8:09:c9:91:44: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:76:5E:68:B4:A0:91:C4:F7:99:F0:91:F5:FD:6E:81:A6:F6:5D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b213216-b630-3fd1-b7e7-09316927b8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a5:d0:bd:80:d2:b7:99:8a:30:13:09:dd:2a:07:46:62:9e: ea:ff:9d:ad:36:6c:ae:22:d2:c1:12:5a:0c:42:1a:d6:58:01: d1:55:63:85:91:7d:e6:d9:0b:5f:d6:b1:05:61:f7:08:bb:2e: 91:0a:08:ae:e6:00:52:2a:b4:dd:98:27:3c:f1:20:07:8c:4c: 07:72:da:15:ee:19:d3:41:d8:65:e8:d6:3b:6a:ee:36:27:0d: 6b:80:91:18:06:b2:30:f6:60:42:d4:44:66:7a:76:dd:34:1c: f0:09:e7:d1:09:12:fb:57:8e:63:d2:a0:03:85:af:57:06:d2: 31:b0:44:bf:e4:b1:bc:2f:f0:b0:2e:00:b2:cc:ce:40:4b:6f: 2f:eb:a2:85:36:be:28:55:a5:39:40:7e:41:be:df:24:65:ea: 6f:3a:53:5d:43:85:69:24:26:35:6a:80:41:15:8c:aa:e1:2a: 39:1f:4f:48:24:fd:f7:99:01:3b:67:fb:dd:a1:23:cd:58:af: 79:b0:19:f9:19:7e:b2:25:bf:8a:49:81:10:a0:7c:20:1f:f7: 75:32:80:7d:21:da:34:41:67:c2:7a:ca:00:16:4a:70:4b:f3: 65:96:3c:e8:14:75:c9:86:2a:27:37:55:17:9d:fb:9f:8c:88: c8:b8:d3:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjdE2T0qp4TM4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MTM0ZWY3MzktMWQ0Ny00MTVkLTlmYmQtMTA1ZmY5ZjNjMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeIkua4pJLWKuoVKgj9XSLZJ3KBpI80My54i zaasT+YR5kRfEowDdN4VYtDfo3pivnrPv9iCOvwCROpEu1UU0VN23b3q01rJ8smp JeFKbBy0/GfiL0NM0E/Ugw63PZMSAL8GJKPfAN9QS77/oM2ccpzXmQDL0CYkhSZQ KPL/0VSFVdjgF8a0z4MXWQSsoqmJ6cDKvmjLcxd9fUykoRxaOki0l4vi3Dyfx9qG Q83W2nFiOEzpFrm9xkVmfppkVtkIO4A48p0EWC893cyFa7LuZzDcUjY3r5APEc8K +evPhpb4Pn9F3Hf5jkOJ4mrj3CtdCl2M6rz0dlzcqAnJkUR+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ2Xmi0oJHE95nwkfX9boGm9l0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWIyMTMyMTYtYjYzMC0z ZmQxLWI3ZTctMDkzMTY5MjdiOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJel0L2A0reZijATCd0qB0Zinur/na02bK4i0sESWgxCGtZYAdFVY4WR febZC1/WsQVh9wi7LpEKCK7mAFIqtN2YJzzxIAeMTAdy2hXuGdNB2GXo1jtq7jYn DWuAkRgGsjD2YELURGZ6dt00HPAJ59EJEvtXjmPSoAOFr1cG0jGwRL/ksbwv8LAu ALLMzkBLby/rooU2vihVpTlAfkG+3yRl6m86U11DhWkkJjVqgEEVjKrhKjkfT0gk /feZATtn+92hI81Yr3mwGfkZfrIlv4pJgRCgfCAf93UygH0h2jRBZ8J6ygAWSnBL 82WWPOgUdcmGKic3VRed+5+MiMi40+M= -----END CERTIFICATE-----Generated at Tue Oct 6 15:50:24 2026 by rpki-client