$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5ee346f-8171-312c-9239-f54d3ec2d969.roa File: a5ee346f-8171-312c-9239-f54d3ec2d969.roa (raw, json) Hash identifier: gPVc4xpz33Ubybo6kNWHrxKx9kwd6TELnuQVUC3xmsc= Subject key identifier: 76:1E:46:D6:CF:FB:DC:5B:F7:9F:A5:B9:2E:8E:20:7F:7A:9F:AF:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF717BA94A9A2B4F8798E6FE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5ee346f-8171-312c-9239-f54d3ec2d969.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.22.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:ba:94:a9:a2:b4:f8:79:8e:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=047decad-dd42-4ec2-acad-92fd2d9755bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:0f:3b:e6:a4:30:d9:f9:2c:ab:7a:73:9d: 16:53:ba:76:b7:21:58:f3:2a:4b:e9:1d:f4:ff:b9: 76:34:1b:7e:32:26:b3:56:d2:97:88:b6:92:bf:d5: b9:f4:e9:bd:7c:7e:fc:7c:d7:ce:52:2c:38:f0:85: 0a:7c:54:4c:21:69:13:20:96:62:2c:fd:fb:50:36: 96:cf:52:85:52:37:35:0d:d5:ff:96:e4:bb:cc:a9: 69:ea:75:4d:99:93:46:a0:1c:2c:c6:b1:7e:dc:b5: f6:85:52:58:b3:13:b7:0b:06:07:4f:ee:a6:a7:e8: 07:17:23:72:da:15:72:7d:4d:82:4a:34:43:9b:c7: f9:42:f3:00:3c:aa:44:f8:eb:2f:da:65:9f:a9:af: cb:f2:67:9c:9f:8c:c0:1f:19:38:e7:e8:48:90:d6: 5c:6e:83:97:00:6e:dd:da:c8:a3:a2:ef:65:36:7c: 1c:d0:ac:59:ac:08:dd:00:a0:27:eb:b9:80:00:33: a3:63:3a:69:66:0f:b7:6c:0a:e2:9f:13:cd:31:de: 31:2f:09:c2:84:af:67:61:86:00:7c:13:9b:56:8f: c3:3f:7d:b8:4d:8c:f8:88:1c:cd:97:1d:a6:42:6f: 7f:f1:75:5c:01:12:a0:f2:59:02:e2:96:0b:f4:48: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1E:46:D6:CF:FB:DC:5B:F7:9F:A5:B9:2E:8E:20:7F:7A:9F:AF:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5ee346f-8171-312c-9239-f54d3ec2d969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:af:34:5c:93:e6:ec:9e:cb:4b:8c:ff:cc:c9:94:0b:aa:32: 3e:55:73:6a:6c:e6:81:54:a5:48:1b:e8:73:bb:ce:63:f8:9d: 9b:50:5b:08:d0:f9:10:c1:f5:17:3a:a7:1b:a8:4d:2d:04:0e: 32:79:e5:33:5f:10:86:ff:f6:f9:2b:bc:cf:77:a1:c0:9c:fc: e5:e1:65:51:bf:15:94:61:be:ad:e7:a5:c1:94:42:19:04:51: 7d:4f:f2:41:26:36:66:79:9d:34:30:64:82:32:08:4d:8b:b3: 4d:e3:9f:d5:1d:e2:76:61:3e:66:33:fd:db:e6:ec:98:94:10: 09:c1:74:1f:8d:d0:5b:19:d7:05:56:7d:7c:2d:6d:bb:7f:a5: 03:e0:e3:d8:71:1a:46:a8:fa:41:a4:d6:2d:31:30:a6:b5:ce: 39:83:37:7c:82:44:d5:1f:5d:58:04:42:03:07:9c:d6:ec:cc: 88:c0:3e:60:b0:9b:ef:b6:bd:35:e7:29:95:c4:32:1a:5a:e7: cb:2f:6c:40:0b:4d:3c:8c:ab:ea:d0:0d:fc:d3:f1:30:78:34: 54:c8:ce:b6:a3:c5:b6:24:07:3b:70:c5:83:1f:63:b3:d5:ad: 67:92:63:b6:0a:bd:b6:30:fb:37:06:b2:8a:af:c2:65:bf:2e: bb:df:bb:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F7qUqaK0+HmOb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MDQ3ZGVjYWQtZGQ0Mi00ZWMyLWFjYWQtOTJmZDJkOTc1NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinEPO+akMNn5LKt6c50WU7p2tyFY8ypL6R30 /7l2NBt+MiazVtKXiLaSv9W59Om9fH78fNfOUiw48IUKfFRMIWkTIJZiLP37UDaW z1KFUjc1DdX/luS7zKlp6nVNmZNGoBwsxrF+3LX2hVJYsxO3CwYHT+6mp+gHFyNy 2hVyfU2CSjRDm8f5QvMAPKpE+Osv2mWfqa/L8mecn4zAHxk45+hIkNZcboOXAG7d 2sijou9lNnwc0KxZrAjdAKAn67mAADOjYzppZg+3bArinxPNMd4xLwnChK9nYYYA fBObVo/DP324TYz4iBzNlx2mQm9/8XVcARKg8lkC4pYL9EgVUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYeRtbP+9xb95+luS6OIH96n685MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTVlZTM0NmYtODE3MS0z MTJjLTkyMzktZjU0ZDNlYzJkOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAivNFyT5uyey0uM/8zJlAuqMj5Vc2ps5oFUpUgb6HO7zmP4nZtQWwjQ +RDB9Rc6pxuoTS0EDjJ55TNfEIb/9vkrvM93ocCc/OXhZVG/FZRhvq3npcGUQhkE UX1P8kEmNmZ5nTQwZIIyCE2Ls03jn9Ud4nZhPmYz/dvm7JiUEAnBdB+N0FsZ1wVW fXwtbbt/pQPg49hxGkao+kGk1i0xMKa1zjmDN3yCRNUfXVgEQgMHnNbszIjAPmCw m++2vTXnKZXEMhpa58svbEALTTyMq+rQDfzT8TB4NFTIzrajxbYkBztwxYMfY7PV rWeSY7YKvbYw+zcGsoqvwmW/Lrvfu5I= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:55 2026 by rpki-client