$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c236b8c2-f280-36df-9ddf-2f334df43d0d.roa File: c236b8c2-f280-36df-9ddf-2f334df43d0d.roa (raw, json) Hash identifier: LJUwv+tF/kpoS61qK7GOlWg4r1U2LIudgryckjs8HbE= Subject key identifier: D7:48:3A:CF:C8:7E:FF:6C:7D:67:A0:92:96:CE:90:BD:62:F9:C6:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E08AF65BACF5AB539FC67B430 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c236b8c2-f280-36df-9ddf-2f334df43d0d.roa Signing time: Tue 02 Jun 2026 03:28:23 +0000 ROA not before: Tue 02 Jun 2026 03:28:23 +0000 ROA not after: Mon 31 Aug 2026 03:28:23 +0000 asID: 13335 IP address blocks: 104.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:af:65:ba:cf:5a:b5:39:fc:67:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 2 03:28:23 2026 GMT Not After : Aug 31 03:28:23 2026 GMT Subject: CN=80a64904-2d4e-4a8a-8a71-3811f55376ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:be:82:1c:29:ea:3f:a5:05:a1:02:bc:a3: 84:07:23:d7:9e:47:90:6e:a4:fc:7d:47:a3:d0:83: 93:4c:6d:ca:1c:bb:26:f9:ae:64:6b:44:84:7d:42: f6:19:c6:aa:0e:78:7e:72:93:91:33:7d:b3:27:62: 99:19:f3:9e:01:6e:67:ba:99:04:68:53:22:e1:15: b2:4b:bf:10:e1:b5:58:31:5e:25:c3:a5:88:8e:fc: 30:8c:5c:ef:77:7c:e2:6d:bd:e3:11:00:b1:bc:20: fd:7d:9a:fa:0a:51:ea:67:0a:29:1e:42:26:ba:84: fb:fd:68:ee:4a:66:21:7c:9a:49:5f:e3:9c:3e:be: 2c:77:ba:fc:f1:51:ce:27:5b:c0:48:ce:0b:f3:78: 66:cb:33:b6:62:fa:18:40:5c:44:d7:31:6e:d3:af: 0d:18:b5:6c:c0:0f:59:f2:c3:6d:ad:ac:c7:e1:0d: 1e:f6:09:e3:9b:1f:15:2f:5f:c5:5e:a4:f4:b3:56: 5b:c1:21:48:35:94:f7:83:e3:1b:ca:61:aa:4c:29: 76:fe:64:9e:25:ff:0b:37:2c:93:b1:06:c8:20:93: d2:fb:ce:62:5b:1a:d7:e5:db:a4:da:ab:7c:b6:ea: 65:fb:64:be:d0:6d:00:91:3e:7c:c3:90:d2:8d:e2: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:48:3A:CF:C8:7E:FF:6C:7D:67:A0:92:96:CE:90:BD:62:F9:C6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c236b8c2-f280-36df-9ddf-2f334df43d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:99:9c:5d:46:ce:6f:fb:26:fb:57:92:2b:fe:16:64:97:5c: 83:94:3a:92:35:6f:1c:32:05:bc:73:65:4a:f7:d1:40:35:09: 71:82:8d:63:61:e4:72:57:ca:02:1b:30:c5:0e:fb:f0:ce:76: 41:37:61:f5:6d:d8:5e:1a:13:b2:25:da:18:6c:3b:9a:32:6f: e3:92:e9:b9:bc:e8:08:2f:d2:15:e7:f9:db:ae:76:47:23:ce: 52:30:22:c0:17:5c:3d:2d:15:43:ba:20:ca:ff:dc:c1:00:f7: 2f:a2:38:9a:c1:99:45:13:aa:49:db:42:fc:3f:64:37:e0:c9: d4:6c:72:c7:2d:f7:a2:2b:15:07:b9:96:85:ea:e3:ed:03:b5: 41:00:51:33:d1:04:ac:73:b3:98:78:69:3b:17:97:f1:22:65: c5:21:a5:04:4c:40:62:9c:23:3f:24:39:d4:a3:10:25:ca:cd: 49:cd:9d:29:f8:f1:b6:e4:52:3b:78:c8:be:47:ec:c2:fe:e1: 26:28:b9:b7:ac:42:4c:8e:f5:cb:f1:73:1c:b4:5f:e4:83:c0: 24:d3:32:a0:ae:b9:27:02:89:a2:31:14:71:60:9a:c2:82:d8: 97:b7:e9:4b:26:17:12:ea:43:49:9b:92:b7:d9:4f:64:d5:73: be:d9:3a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Ir2W6z1q1OfxntDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYwMjAzMjgyM1oXDTI2MDgzMTAzMjgyM1owLzEtMCsGA1UEAxMk ODBhNjQ5MDQtMmQ0ZS00YThhLThhNzEtMzgxMWY1NTM3NmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrq+ghwp6j+lBaECvKOEByPXnkeQbqT8fUej 0IOTTG3KHLsm+a5ka0SEfUL2GcaqDnh+cpORM32zJ2KZGfOeAW5nupkEaFMi4RWy S78Q4bVYMV4lw6WIjvwwjFzvd3zibb3jEQCxvCD9fZr6ClHqZwopHkImuoT7/Wju SmYhfJpJX+OcPr4sd7r88VHOJ1vASM4L83hmyzO2YvoYQFxE1zFu068NGLVswA9Z 8sNtrazH4Q0e9gnjmx8VL1/FXqT0s1ZbwSFINZT3g+MbymGqTCl2/mSeJf8LNyyT sQbIIJPS+85iWxrX5duk2qt8tupl+2S+0G0AkT58w5DSjeI1wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdIOs/Ifv9sfWegkpbOkL1i+cYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzIzNmI4YzItZjI4MC0z NmRmLTlkZGYtMmYzMzRkZjQzZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSZnF1Gzm/7JvtXkiv+FmSXXIOUOpI1bxwyBbxzZUr30UA1CXGCjWNh 5HJXygIbMMUO+/DOdkE3YfVt2F4aE7Il2hhsO5oyb+OS6bm86Agv0hXn+duudkcj zlIwIsAXXD0tFUO6IMr/3MEA9y+iOJrBmUUTqknbQvw/ZDfgydRscsct96IrFQe5 loXq4+0DtUEAUTPRBKxzs5h4aTsXl/EiZcUhpQRMQGKcIz8kOdSjECXKzUnNnSn4 8bbkUjt4yL5H7ML+4SYoubesQkyO9cvxcxy0X+SDwCTTMqCuuScCiaIxFHFgmsKC 2Je36UsmFxLqQ0mbkrfZT2TVc77ZOk4= -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:09 2026 by rpki-client