$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa File: cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa (raw, json) Hash identifier: +S+p/MHxGaZsMdd92qpi6e3KGaPREOTNS5C9RNPDLM4= Subject key identifier: A4:7F:A3:7F:39:FA:65:26:22:F2:5C:AF:7D:FA:4B:33:AD:7A:2F:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F14678D772D8879789DAE3A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 13335 IP address blocks: 104.23.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8d:77:2d:88:79:78:9d:ae:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ca6561c9-d89b-431b-9a60-0b837cfc4170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:34:3f:1b:9e:bf:d7:fe:c5:f2:a8:2f:72:ff: a5:c6:9b:92:3f:3d:62:60:9f:6a:61:e5:ee:3f:8b: 8d:93:c6:14:c6:4c:bc:79:a1:03:3f:f8:55:4b:3b: c5:72:d2:31:0d:88:58:2e:a2:c7:20:e1:36:5a:11: 1d:31:0b:1a:ba:ad:71:6a:51:39:30:02:22:c5:3a: 7b:73:ac:b2:45:be:94:0f:e1:a6:e9:a2:b7:c6:af: b4:95:e1:e7:47:0f:61:08:05:0b:8d:9b:d3:e6:75: dd:1c:ec:96:6d:15:c8:f6:72:32:7d:df:65:6e:0e: 3c:27:1a:97:ed:6c:c7:97:c8:2c:1f:1a:23:01:bf: 50:a2:6a:bb:45:7c:4b:d6:18:9f:d9:cd:5b:c5:1b: 40:61:16:7b:36:db:03:a0:26:72:6d:e0:28:9a:d1: 8a:f7:50:64:cd:cd:da:25:e9:df:ac:d0:97:f4:9d: 79:67:1b:14:6e:10:6d:08:88:74:c9:17:91:b2:d2: e2:c2:fc:00:2a:3e:b4:d7:bf:55:5a:13:70:fd:fb: 73:99:d5:be:34:15:2e:f3:65:c2:7e:0a:55:56:8d: bf:ab:e3:b6:d2:7b:70:b7:33:69:c0:7f:41:f3:a2: fc:77:34:6a:68:6e:4e:e4:9c:ff:bf:6f:ea:24:5c: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7F:A3:7F:39:FA:65:26:22:F2:5C:AF:7D:FA:4B:33:AD:7A:2F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ae:db:a5:ef:9e:ba:77:56:a0:9f:37:7d:45:9e:73:4b:4f: 7b:78:db:97:d2:68:16:31:a8:08:0e:13:b2:1b:33:e4:01:75: 23:a7:18:d9:b1:07:49:11:c6:33:bd:52:13:67:9e:57:7a:77: 4d:ab:de:3c:79:70:34:a3:2a:bc:3e:df:37:65:3a:71:25:11: 71:f6:96:9d:ef:b0:2e:d4:04:90:0f:b5:9d:4e:f6:9c:07:67: 2b:f3:c9:ff:b1:a3:5f:a7:36:6a:2c:26:05:32:c8:48:ad:02: 12:f9:00:b8:09:9b:91:77:b6:4d:f9:1a:8e:c2:dc:a8:7a:b7: f1:29:a5:00:8a:79:13:9d:b0:e1:54:f3:56:6e:16:56:07:83: 0b:46:1a:f2:f1:ed:1e:c1:c6:95:c8:d1:0d:ed:e3:b2:e0:6c: 9c:77:6b:aa:3e:31:a0:19:86:4c:fc:11:4b:6b:50:c4:22:91: fa:6f:1d:22:fa:ce:36:ab:d6:f0:0f:e1:36:e1:17:3b:72:89: 64:59:e1:b5:4a:eb:95:63:57:e8:1e:b9:54:7d:90:a8:8c:84: 24:72:04:28:05:8f:e2:95:02:00:d7:ac:3f:89:05:6c:25:91: 3b:c8:12:21:91:9c:9b:43:14:9a:d8:cc:8c:22:cb:f7:92:54: 03:de:1f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ413LYh5eJ2uOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Y2E2NTYxYzktZDg5Yi00MzFiLTlhNjAtMGI4MzdjZmM0MTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzQ/G56/1/7F8qgvcv+lxpuSPz1iYJ9qYeXu P4uNk8YUxky8eaEDP/hVSzvFctIxDYhYLqLHIOE2WhEdMQsauq1xalE5MAIixTp7 c6yyRb6UD+Gm6aK3xq+0leHnRw9hCAULjZvT5nXdHOyWbRXI9nIyfd9lbg48JxqX 7WzHl8gsHxojAb9Qomq7RXxL1hif2c1bxRtAYRZ7NtsDoCZybeAomtGK91Bkzc3a JenfrNCX9J15ZxsUbhBtCIh0yReRstLiwvwAKj60179VWhNw/ftzmdW+NBUu82XC fgpVVo2/q+O20ntwtzNpwH9B86L8dzRqaG5O5Jz/v2/qJFweQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR/o385+mUmIvJcr336SzOtei/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2VlMDNjZDAtNWJhMC0z NjQyLWI5ZGMtOTkwYjgxYWVlYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOu26Xvnrp3VqCfN31FnnNLT3t425fSaBYxqAgOE7IbM+QBdSOnGNmx B0kRxjO9UhNnnld6d02r3jx5cDSjKrw+3zdlOnElEXH2lp3vsC7UBJAPtZ1O9pwH Zyvzyf+xo1+nNmosJgUyyEitAhL5ALgJm5F3tk35Go7C3Kh6t/EppQCKeROdsOFU 81ZuFlYHgwtGGvLx7R7BxpXI0Q3t47LgbJx3a6o+MaAZhkz8EUtrUMQikfpvHSL6 zjar1vAP4TbhFztyiWRZ4bVK65VjV+geuVR9kKiMhCRyBCgFj+KVAgDXrD+JBWwl kTvIEiGRnJtDFJrYzIwiy/eSVAPeH3k= -----END CERTIFICATE-----Generated at Tue Sep 22 11:26:11 2026 by rpki-client