$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa File: cdff553a-7cbe-3262-a645-67dfb5f6f569.roa (raw, json) Hash identifier: HuxppfIMQPng0tKawtpc1czu7lY+K6MKq9ytz1+x/Ag= Subject key identifier: 6A:3F:4E:93:D1:F3:0E:49:B7:6D:5F:A7:29:FF:F1:8B:16:97:3D:FD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA87789E88A4682A918D9B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.18.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:78:9e:88:a4:68:2a:91:8d:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=578c08bc-46a5-4a05-a28e-846af857ee76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:02:4c:66:07:f9:61:d2:81:9f:8d:f4:56: 65:3e:53:4a:3c:eb:1a:c8:f2:b6:69:ae:78:fd:e5: 7c:2d:2b:a5:5c:9b:f5:06:cf:41:89:4c:ad:d6:76: 46:52:cc:87:a8:b7:5b:89:73:fd:29:30:d3:c8:36: 0d:56:43:37:42:2b:14:a1:13:66:17:c5:7c:87:0d: dd:96:83:c5:1a:cb:22:1a:29:3a:b7:b4:92:4d:ba: 65:fd:ac:db:61:e4:dc:f8:32:54:ba:31:7b:0f:08: 7e:38:bb:db:31:8c:7c:3a:4d:2a:17:83:e9:5d:00: ad:62:e4:1c:e7:03:bb:b5:62:30:84:18:a8:cc:5b: 07:97:ad:8c:6b:22:0d:79:18:be:05:79:fb:52:43: 15:8e:d9:f4:83:48:83:a3:40:e3:3e:20:f5:74:a9: 9b:1a:20:20:5e:c0:bc:bb:ea:d6:c8:7d:10:da:19: b6:15:59:53:6b:f1:09:c9:d3:49:dc:78:fc:02:a3: 07:72:21:45:dc:cf:e1:0d:6c:65:45:b6:98:c5:ea: 0c:35:1d:99:53:60:08:e4:5c:60:89:50:f8:c3:32: b7:bb:ac:8c:37:e9:bc:53:a8:2f:67:d6:69:73:05: 22:0e:57:70:f8:f9:6c:72:f7:77:d9:6f:b4:83:d8: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3F:4E:93:D1:F3:0E:49:B7:6D:5F:A7:29:FF:F1:8B:16:97:3D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdff553a-7cbe-3262-a645-67dfb5f6f569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:69:22:d0:c1:e6:04:2e:0b:39:24:9c:99:07:40:b1:e9:07: e8:be:27:0d:1a:fb:f4:dd:f7:42:dd:0b:90:f4:94:e3:df:14: d3:67:5a:29:b3:76:d2:29:3f:35:9d:65:2c:b1:90:b9:94:d0: 6b:7d:e6:dd:05:e6:f8:2a:73:08:a0:a2:04:ae:fd:99:9b:ee: 1c:0f:1c:01:70:d4:05:a3:1a:c1:12:c6:8b:7a:5c:65:57:47: e2:1a:61:54:ed:78:ec:6f:d0:90:db:98:da:16:e1:79:6b:d6: fd:26:0d:96:fa:c3:e2:e0:96:b4:d5:9d:be:6c:38:61:60:2b: 27:28:64:13:77:a9:af:00:ed:1c:f9:28:7b:cb:e5:b7:da:08: f8:4e:d7:03:a7:53:1b:9e:6e:10:fa:a2:c7:a3:5b:01:c9:69: cd:0d:cb:92:e9:72:74:51:6a:5c:4e:7f:8b:b2:83:da:b4:03: cb:9c:fc:13:26:53:04:35:b7:73:8d:89:ce:58:31:1a:d9:2d: 74:65:f9:f0:62:ac:4e:da:6e:69:7b:80:a3:b5:16:44:ce:91: 24:58:b2:b7:7e:90:a6:96:71:80:74:de:c2:b2:ba:27:53:3c: fd:07:7a:4b:63:df:02:6e:7d:19:27:ab:e6:fc:45:db:e2:0a: e5:c3:f2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3ieiKRoKpGNmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NTc4YzA4YmMtNDZhNS00YTA1LWEyOGUtODQ2YWY4NTdlZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPYCTGYH+WHSgZ+N9FZlPlNKPOsayPK2aa54 /eV8LSulXJv1Bs9BiUyt1nZGUsyHqLdbiXP9KTDTyDYNVkM3QisUoRNmF8V8hw3d loPFGssiGik6t7SSTbpl/azbYeTc+DJUujF7Dwh+OLvbMYx8Ok0qF4PpXQCtYuQc 5wO7tWIwhBiozFsHl62MayINeRi+BXn7UkMVjtn0g0iDo0DjPiD1dKmbGiAgXsC8 u+rWyH0Q2hm2FVlTa/EJydNJ3Hj8AqMHciFF3M/hDWxlRbaYxeoMNR2ZU2AI5Fxg iVD4wzK3u6yMN+m8U6gvZ9ZpcwUiDldw+Plscvd32W+0g9jeQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo/TpPR8w5Jt21fpyn/8YsWlz39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2RmZjU1M2EtN2NiZS0z MjYyLWE2NDUtNjdkZmI1ZjZmNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1pItDB5gQuCzkknJkHQLHpB+i+Jw0a+/Td90LdC5D0lOPfFNNnWimz dtIpPzWdZSyxkLmU0Gt95t0F5vgqcwigogSu/Zmb7hwPHAFw1AWjGsESxot6XGVX R+IaYVTteOxv0JDbmNoW4Xlr1v0mDZb6w+LglrTVnb5sOGFgKycoZBN3qa8A7Rz5 KHvL5bfaCPhO1wOnUxuebhD6osejWwHJac0Ny5LpcnRRalxOf4uyg9q0A8uc/BMm UwQ1t3ONic5YMRrZLXRl+fBirE7abml7gKO1FkTOkSRYsrd+kKaWcYB03sKyuidT PP0Hektj3wJufRknq+b8RdviCuXD8mk= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:34 2026 by rpki-client