$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa File: 9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa (raw, json) Hash identifier: CWmPi4QOg2TyR37jWC0gwY6Kd4nj4sCxiMyfw9K2JFY= Subject key identifier: DE:82:7D:7B:F0:4A:F5:3B:5D:1C:A2:12:E6:10:05:05:67:93:E1:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D9A2002D30C091369D8872880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 13335 IP address blocks: 104.23.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:02:d3:0c:09:13:69:d8:87:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=0cfc7ba7-ce6f-4590-bb02-c604f5e61318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:16:95:1f:64:9a:b5:c9:8e:48:c7:48:a3: 88:74:e2:af:2d:08:39:e7:ae:70:b8:3a:d8:7a:17: 6f:fd:db:b5:f4:be:0a:43:c7:20:a4:aa:c8:95:f1: 34:23:5b:d1:bd:a0:a9:59:b3:44:65:c6:85:0d:d1: 5d:dd:c8:5c:bf:75:e4:d1:78:8b:f7:d4:8b:9a:5e: a5:a6:87:40:a6:a2:a4:7c:fe:35:4c:5b:87:93:08: 28:39:83:0e:8f:10:68:ba:57:0d:62:b6:ff:a1:4b: e6:1c:28:3e:37:83:3e:36:3b:87:46:ee:e0:98:d7: 80:91:61:d5:14:ce:a1:52:4c:d0:ae:05:2c:aa:26: db:f3:c8:08:b6:87:4f:2e:b2:36:46:4c:c7:05:a6: b7:61:31:31:63:6f:6f:e9:a5:51:04:c2:6f:fa:bf: f1:a8:67:0f:1f:76:03:93:c3:e1:57:e4:d3:60:9a: 23:fb:96:94:bb:61:bd:2a:fc:a7:4e:d4:eb:bf:5b: b9:cd:34:b8:5e:e5:ab:cc:ea:41:1a:83:d6:74:b3: ad:86:e4:db:83:c0:42:a3:72:a1:34:59:98:c5:8f: 5e:4d:f1:54:e3:d3:6e:17:62:64:12:6e:b5:00:8f: 57:53:55:7e:7a:21:c3:04:c1:34:2d:8d:85:d9:cf: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:82:7D:7B:F0:4A:F5:3B:5D:1C:A2:12:E6:10:05:05:67:93:E1:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:78:39:e9:96:e9:67:d6:0c:e5:eb:bf:82:8c:ea:be:f0:4f: 96:b4:b5:10:c5:de:e1:f6:96:d0:c3:4f:cd:19:55:be:3f:31: 37:a4:db:f6:f7:57:ee:c2:a8:8f:81:72:ca:d7:13:3d:98:a1: e4:ff:98:a0:8c:b2:d9:fc:e8:f4:12:3f:e5:f8:2e:6e:b6:70: 55:2c:a7:83:ee:1f:7a:18:a9:6f:99:a5:9d:a0:0c:07:80:a5: c7:fd:1e:32:4a:e3:31:41:77:f4:a1:66:1d:44:35:ea:2a:bb: 9e:55:f8:0d:25:8e:b9:76:fe:62:66:75:40:96:64:3e:30:ac: ab:48:db:25:28:d8:f1:42:eb:0f:a0:e1:0e:d2:fd:54:aa:f9: 30:e8:44:c3:37:78:8e:58:64:c8:32:72:3c:0e:12:6e:ce:39: 7d:4e:cc:2d:42:33:df:b0:00:bc:70:97:51:19:e0:1e:42:bc: d5:35:19:ac:d4:0b:0d:cc:f6:63:e2:68:a6:aa:d3:d0:c8:aa: 61:4b:01:ee:a3:5f:fb:07:55:1a:b0:b5:01:1e:90:39:ec:c5: 44:96:aa:26:65:a8:1a:5f:aa:68:39:4f:c2:f9:9b:a9:49:97: 80:d2:03:0f:fd:70:3e:5c:44:43:75:ea:c9:31:60:81:7c:ce: 80:cb:db:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIALTDAkTadiHKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MGNmYzdiYTctY2U2Zi00NTkwLWJiMDItYzYwNGY1ZTYxMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB4WlR9kmrXJjkjHSKOIdOKvLQg5565wuDrY ehdv/du19L4KQ8cgpKrIlfE0I1vRvaCpWbNEZcaFDdFd3chcv3Xk0XiL99SLml6l podApqKkfP41TFuHkwgoOYMOjxBoulcNYrb/oUvmHCg+N4M+NjuHRu7gmNeAkWHV FM6hUkzQrgUsqibb88gItodPLrI2RkzHBaa3YTExY29v6aVRBMJv+r/xqGcPH3YD k8PhV+TTYJoj+5aUu2G9KvynTtTrv1u5zTS4XuWrzOpBGoPWdLOthuTbg8BCo3Kh NFmYxY9eTfFU49NuF2JkEm61AI9XU1V+eiHDBME0LY2F2c/mhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6CfXvwSvU7XRyiEuYQBQVnk+EiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWM4NWY0OTgtNWY4MS0z ZGFmLThiMzEtOWEzOWY5NWMzOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh4OemW6WfWDOXrv4KM6r7wT5a0tRDF3uH2ltDDT80ZVb4/MTek2/b3 V+7CqI+BcsrXEz2YoeT/mKCMstn86PQSP+X4Lm62cFUsp4PuH3oYqW+ZpZ2gDAeA pcf9HjJK4zFBd/ShZh1ENeoqu55V+A0ljrl2/mJmdUCWZD4wrKtI2yUo2PFC6w+g 4Q7S/VSq+TDoRMM3eI5YZMgycjwOEm7OOX1OzC1CM9+wALxwl1EZ4B5CvNU1GazU Cw3M9mPiaKaq09DIqmFLAe6jX/sHVRqwtQEekDnsxUSWqiZlqBpfqmg5T8L5m6lJ l4DSAw/9cD5cREN16skxYIF8zoDL26U= -----END CERTIFICATE-----Generated at Sat May 9 08:13:46 2026 by rpki-client