$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa File: caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa (raw, json) Hash identifier: 3Ty2Nyd4vB6uL4JKscIY4YMvhdHsYqRn+ZLSWY5a2Fo= Subject key identifier: 63:EA:03:6A:D7:09:61:0C:96:00:0F:AC:6E:BC:73:20:8F:0F:E9:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E3E5F57C960348F8023EEDBC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 13335 IP address blocks: 104.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:57:c9:60:34:8f:80:23:ee:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=addb881d-f56e-4889-a0fe-3d6925e6ca11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:25:2f:82:aa:ea:b9:11:d2:1c:3b:55:f0:22: 0d:72:29:2d:cb:b9:bf:f9:67:fa:79:52:52:43:5b: 56:97:3a:c2:b2:b3:77:ee:45:79:56:5c:09:a6:07: 8e:d6:ba:d3:55:dd:2c:15:3e:89:64:48:1a:d2:67: aa:38:5c:23:5d:7a:74:e3:ac:19:fb:3b:cd:7b:13: 9b:2c:e5:8c:a1:76:8a:f1:2c:eb:a2:f6:62:40:b9: 18:bf:8a:1a:fe:ea:cb:80:2c:dc:47:2c:0a:bd:17: 1d:73:87:80:ef:24:67:44:d2:c1:20:5c:64:e0:77: ab:04:e8:92:f8:0a:79:ad:d3:29:3c:a3:ce:dc:3e: 5a:1d:87:e4:f4:9d:b1:0c:41:b9:a3:a7:25:4a:a2: 2e:ef:68:6b:08:5b:45:c3:3d:7b:fb:bd:08:3c:7b: de:59:bf:76:c3:27:c7:ac:47:25:e1:30:df:31:35: aa:c2:16:21:cc:88:4e:8c:b5:23:ef:e4:af:e9:ec: 8f:c9:02:45:3f:b3:9b:c7:9a:43:6a:73:cd:40:65: 84:5c:83:a2:8a:8b:20:94:08:db:08:4f:51:52:26: c4:a2:a7:23:d6:98:70:dd:ff:9e:90:f2:73:b7:98: 8d:f3:5c:2b:8a:6a:1c:9d:f1:c5:68:eb:98:a9:13: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EA:03:6A:D7:09:61:0C:96:00:0F:AC:6E:BC:73:20:8F:0F:E9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:31:62:29:ee:38:7c:f4:c8:7b:81:90:3b:07:72:b6:c3:c5: d7:e3:fc:15:ce:8e:90:de:1b:e9:91:bb:f5:48:90:8a:b2:1b: e3:ca:92:99:28:ae:af:69:9c:ec:d7:3d:6a:50:9a:44:00:67: 59:40:29:e9:58:bd:b8:0e:19:cd:6b:8f:39:a4:62:ac:1f:7d: df:e6:1f:c2:51:f3:43:f6:2d:3a:9c:ed:00:ab:4e:52:73:46: b4:ac:0c:f4:eb:d5:31:bd:03:4b:a8:25:04:d6:22:69:f3:2c: c3:e7:b4:50:4b:d0:e3:af:d7:89:6f:e6:e8:49:d6:54:8d:d2: 3b:0b:cd:33:eb:4c:df:d9:77:4d:0e:82:a3:6f:ef:b7:42:17: 61:ad:9c:a2:01:77:48:e2:5b:b5:94:6f:8f:af:15:fc:d8:94: 34:c2:de:d6:69:db:d7:4e:b1:5a:89:87:08:ca:8c:11:29:d0: 16:4f:d3:da:e3:93:61:21:b9:ae:44:7d:fe:ea:a3:22:34:89: 7f:6e:72:0c:84:99:77:b4:6c:8d:16:3b:ef:5b:5e:07:69:83: c4:09:05:75:aa:26:d4:a0:b9:d6:27:92:32:b7:b6:5f:8e:8a: 23:c3:e3:10:50:97:0c:d1:8d:a7:7f:b8:8e:2d:0c:ba:bd:48: 73:82:40:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X1fJYDSPgCPu28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk YWRkYjg4MWQtZjU2ZS00ODg5LWEwZmUtM2Q2OTI1ZTZjYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyUvgqrquRHSHDtV8CINcikty7m/+Wf6eVJS Q1tWlzrCsrN37kV5VlwJpgeO1rrTVd0sFT6JZEga0meqOFwjXXp046wZ+zvNexOb LOWMoXaK8SzrovZiQLkYv4oa/urLgCzcRywKvRcdc4eA7yRnRNLBIFxk4HerBOiS +Ap5rdMpPKPO3D5aHYfk9J2xDEG5o6clSqIu72hrCFtFwz17+70IPHveWb92wyfH rEcl4TDfMTWqwhYhzIhOjLUj7+Sv6eyPyQJFP7Obx5pDanPNQGWEXIOiiosglAjb CE9RUibEoqcj1phw3f+ekPJzt5iN81wrimocnfHFaOuYqROIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPqA2rXCWEMlgAPrG68cyCPD+ltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FhZGM5OGItMmE4OC0z YmRkLTlkYjAtNmQ5OGYyZjg0NWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkxYinuOHz0yHuBkDsHcrbDxdfj/BXOjpDeG+mRu/VIkIqyG+PKkpko rq9pnOzXPWpQmkQAZ1lAKelYvbgOGc1rjzmkYqwffd/mH8JR80P2LTqc7QCrTlJz RrSsDPTr1TG9A0uoJQTWImnzLMPntFBL0OOv14lv5uhJ1lSN0jsLzTPrTN/Zd00O gqNv77dCF2GtnKIBd0jiW7WUb4+vFfzYlDTC3tZp29dOsVqJhwjKjBEp0BZP09rj k2Ehua5Eff7qoyI0iX9ucgyEmXe0bI0WO+9bXgdpg8QJBXWqJtSgudYnkjK3tl+O iiPD4xBQlwzRjad/uI4tDLq9SHOCQI0= -----END CERTIFICATE-----Generated at Tue Jun 23 23:53:36 2026 by rpki-client