$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4e2361-74e3-3d47-bbb8-10fa08ca98d8.roa File: ba4e2361-74e3-3d47-bbb8-10fa08ca98d8.roa (raw, json) Hash identifier: NwJyDqn+ozoIW2Ve0VzKkmXb/WwfAElDxzyfGQ5C2eM= Subject key identifier: 29:9F:C5:37:DA:0F:AE:F1:EC:BA:2A:82:3A:91:92:0D:A4:CA:27:5F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF34ED7BDE3E64FA52BE4D540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4e2361-74e3-3d47-bbb8-10fa08ca98d8.roa Signing time: Tue 25 Aug 2026 04:28:48 +0000 ROA not before: Tue 25 Aug 2026 04:28:48 +0000 ROA not after: Mon 23 Nov 2026 05:28:48 +0000 asID: 13335 IP address blocks: 104.22.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:4e:d7:bd:e3:e6:4f:a5:2b:e4:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 04:28:48 2026 GMT Not After : Nov 23 05:28:48 2026 GMT Subject: CN=3bd21758-392f-4426-9c4f-5ed05b65dc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1b:9a:e2:4f:51:88:ec:95:65:8e:fe:34:fc: 9a:6d:0b:b6:59:2f:6a:65:4c:cf:f5:f1:2f:7f:9d: fe:4a:b4:d9:de:81:d0:96:22:7f:b6:15:5c:ec:14: 67:96:0e:29:10:ce:8a:ea:9c:cb:51:f7:54:20:79: d2:20:6d:c7:ae:71:b2:d0:ce:de:3a:d5:f8:e8:05: 4d:42:77:f4:8d:87:d4:45:42:32:87:03:87:6d:ec: 8f:61:6e:c9:c4:84:52:23:ee:9c:0e:3e:b5:df:ad: b2:79:7a:9b:a9:ea:71:dd:fe:04:0a:b4:b4:2c:bc: f4:e0:fa:18:28:81:83:96:8f:18:62:18:18:1c:5e: 56:b5:43:41:5d:d6:b2:5a:81:ac:46:14:3a:e6:4a: 1a:70:36:43:f7:e0:bc:24:07:4a:6e:9b:ae:cf:ea: 1c:8e:9b:6e:10:78:2f:59:01:2a:de:84:98:df:51: 58:cb:40:e1:0c:bd:09:67:a8:91:eb:ad:51:a7:6f: c1:71:91:03:7e:d6:06:26:93:0f:52:fb:6b:a4:24: 10:ba:f1:29:b5:07:c5:e1:b4:f7:40:cc:c2:6e:6e: f2:92:71:68:cb:6b:c3:42:ba:aa:41:cf:88:af:77: 3c:6d:e6:11:4f:bf:da:44:31:62:54:7c:be:12:ef: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9F:C5:37:DA:0F:AE:F1:EC:BA:2A:82:3A:91:92:0D:A4:CA:27:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4e2361-74e3-3d47-bbb8-10fa08ca98d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:53:5b:21:cc:87:95:54:83:bf:30:53:62:03:87:68:51:54: 86:7b:85:3c:33:b6:c3:0c:b5:8e:fd:18:1b:7b:5c:1b:dc:17: b3:37:0e:84:e1:29:c2:6a:ef:2e:42:a4:8a:6f:51:be:41:2c: c7:10:8e:eb:79:67:d3:d6:02:b4:69:76:3a:3a:cd:a6:e6:b2: 55:24:f2:8b:9a:9a:6a:02:9a:41:9a:3a:f3:f4:22:6c:dc:99: 6e:dc:46:d3:a4:a4:49:f4:e3:3a:06:05:c3:94:f4:12:ca:98: b9:20:a4:aa:76:9d:f3:a9:64:b2:a1:60:db:c9:b4:69:b4:ed: 99:5a:e2:58:3d:e1:c8:4b:35:0a:63:88:67:7b:73:96:3e:60: 51:67:ec:1d:33:39:ae:d2:3c:a0:8c:3d:55:1f:9b:c5:29:71: 0e:42:38:f0:41:2e:ef:91:09:fc:8e:1c:04:e8:7e:3a:86:b2: 53:e6:73:7d:41:9d:e9:d8:d8:b8:f8:42:96:45:1f:95:43:b5: a2:28:26:98:b2:aa:1c:7c:11:fd:61:60:0c:18:14:d6:40:6a: cf:0b:e3:17:7f:72:fc:5b:e1:b1:93:47:94:5a:ae:26:8b:ec: c5:4e:4d:e0:a6:27:f6:85:ba:7a:f7:a7:91:b8:a9:c9:6a:b6: e7:b2:40:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7zTte94+ZPpSvk1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTA0Mjg0OFoXDTI2MTEyMzA1Mjg0OFowLzEtMCsGA1UEAxMk M2JkMjE3NTgtMzkyZi00NDI2LTljNGYtNWVkMDViNjVkYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBua4k9RiOyVZY7+NPyabQu2WS9qZUzP9fEv f53+SrTZ3oHQliJ/thVc7BRnlg4pEM6K6pzLUfdUIHnSIG3HrnGy0M7eOtX46AVN Qnf0jYfURUIyhwOHbeyPYW7JxIRSI+6cDj61362yeXqbqepx3f4ECrS0LLz04PoY KIGDlo8YYhgYHF5WtUNBXdayWoGsRhQ65koacDZD9+C8JAdKbpuuz+ocjptuEHgv WQEq3oSY31FYy0DhDL0JZ6iR661Rp2/BcZEDftYGJpMPUvtrpCQQuvEptQfF4bT3 QMzCbm7yknFoy2vDQrqqQc+Ir3c8beYRT7/aRDFiVHy+Eu8oCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmfxTfaD67x7LoqgjqRkg2kyidfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmE0ZTIzNjEtNzRlMy0z ZDQ3LWJiYjgtMTBmYTA4Y2E5OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApTWyHMh5VUg78wU2IDh2hRVIZ7hTwztsMMtY79GBt7XBvcF7M3DoTh KcJq7y5CpIpvUb5BLMcQjut5Z9PWArRpdjo6zabmslUk8ouammoCmkGaOvP0Imzc mW7cRtOkpEn04zoGBcOU9BLKmLkgpKp2nfOpZLKhYNvJtGm07Zla4lg94chLNQpj iGd7c5Y+YFFn7B0zOa7SPKCMPVUfm8UpcQ5COPBBLu+RCfyOHATofjqGslPmc31B nenY2Lj4QpZFH5VDtaIoJpiyqhx8Ef1hYAwYFNZAas8L4xd/cvxb4bGTR5RariaL 7MVOTeCmJ/aFunr3p5G4qclqtueyQFQ= -----END CERTIFICATE-----Generated at Tue Sep 1 02:08:39 2026 by rpki-client