$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa File: d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa (raw, json) Hash identifier: QsldCL3KP6WJ4M/YZubBhfJ98lC0BLoEsL88HhDTcxg= Subject key identifier: 94:7A:7A:FA:B6:82:B8:02:9E:05:0A:74:BE:57:A9:B7:64:5B:2D:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D95F01F599A5FC9E5F24F9160 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.23.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1f:59:9a:5f:c9:e5:f2:4f:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=7e973a65-6c43-4337-9b2c-b8ef1c3a0936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:ef:9a:bc:44:28:73:a0:f8:4d:d1:e4:47: 12:c3:b6:26:d0:c0:7e:56:3f:3d:96:03:ed:48:1f: 39:ed:90:68:72:32:e7:3c:7d:c9:93:e4:fa:79:09: ed:1f:3f:52:a2:7e:d9:fa:11:cd:3a:d4:5a:19:5c: a0:da:f5:52:b0:51:ee:ad:67:03:9f:fa:7b:e3:62: b8:b3:c5:9c:bc:ff:be:fb:1b:81:00:51:b8:27:8c: b5:da:af:58:30:c8:4e:6d:e3:08:e9:7d:53:9d:94: f8:d0:fe:56:62:84:63:f3:d2:f2:21:20:32:5e:ce: 12:3d:bc:23:13:e9:50:82:76:76:a3:53:30:93:ec: 7c:2b:39:e2:4d:61:7a:53:b0:fd:3d:44:df:2a:8f: 84:89:01:c3:ff:4b:e1:11:1a:33:79:00:ee:64:57: 05:b2:89:49:49:42:90:24:6e:5f:67:75:56:a6:13: 7c:36:cb:90:5a:20:21:b3:30:55:63:22:8e:9b:f2: dc:7c:5e:13:c1:b4:54:70:ab:e8:c7:79:b6:f1:bc: 2a:f4:1f:fe:da:9f:98:f9:23:fe:98:b0:f5:83:3a: 53:45:21:c6:51:18:19:5a:fd:47:8a:47:4c:50:8a: 55:2a:fb:0f:85:aa:e4:ab:8c:11:b8:14:73:9e:ea: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7A:7A:FA:B6:82:B8:02:9E:05:0A:74:BE:57:A9:B7:64:5B:2D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d9:a2:29:59:35:4f:a3:7a:bc:1c:cd:8d:5d:75:5f:8b:13: 52:f7:26:02:11:2d:a8:a4:bf:72:f1:e1:dc:02:22:9a:c9:eb: 82:bb:be:be:3f:2c:d5:4c:2b:d4:be:ab:36:3f:c3:92:96:ed: eb:fc:92:19:18:e7:44:8a:9a:a5:f0:46:47:de:e3:9d:1f:18: 07:ff:1c:f1:7e:ab:30:b8:11:7a:cf:fa:05:11:e8:6d:e3:5c: 0f:e8:3a:dc:ca:ac:02:31:98:13:6e:6a:56:96:31:14:79:d9: b6:d4:e8:35:37:87:1e:ef:8a:01:b1:e3:9c:ed:28:fd:11:55: 5a:ff:91:a0:72:bf:4f:0c:72:68:b6:cb:bf:73:65:3c:a9:89: da:a0:55:d1:64:61:39:cb:17:c4:8e:52:51:d5:e0:ea:b7:7d: ab:87:d9:e0:28:81:29:e0:93:38:7a:35:2d:58:91:6b:9e:21: 21:24:87:dc:eb:e9:37:59:0f:07:2c:18:70:fd:09:bf:a6:66: 89:8a:ff:ba:7b:9f:14:f0:26:1a:05:b9:b7:70:47:c8:98:ae: 27:2f:8d:b4:99:7a:03:48:0c:94:9d:1d:18:34:b6:18:46:0a: 9a:a0:b5:8e:f4:e3:5d:b6:03:32:07:7a:93:db:f1:6c:7f:8e: 2d:28:61:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8B9Zml/J5fJPkWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk N2U5NzNhNjUtNmM0My00MzM3LTliMmMtYjhlZjFjM2EwOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLXvmrxEKHOg+E3R5EcSw7Ym0MB+Vj89lgPt SB857ZBocjLnPH3Jk+T6eQntHz9Son7Z+hHNOtRaGVyg2vVSsFHurWcDn/p742K4 s8WcvP+++xuBAFG4J4y12q9YMMhObeMI6X1TnZT40P5WYoRj89LyISAyXs4SPbwj E+lQgnZ2o1Mwk+x8KzniTWF6U7D9PUTfKo+EiQHD/0vhERozeQDuZFcFsolJSUKQ JG5fZ3VWphN8NsuQWiAhszBVYyKOm/LcfF4TwbRUcKvox3m28bwq9B/+2p+Y+SP+ mLD1gzpTRSHGURgZWv1HikdMUIpVKvsPharkq4wRuBRznuoBBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJR6evq2grgCngUKdL5XqbdkWy2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDRiNTczYjktNGI3ZS0z YmMxLWFhNDktM2IyNjZkYTIzOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3ZoilZNU+jerwczY1ddV+LE1L3JgIRLaikv3Lx4dwCIprJ64K7vr4/ LNVMK9S+qzY/w5KW7ev8khkY50SKmqXwRkfe450fGAf/HPF+qzC4EXrP+gUR6G3j XA/oOtzKrAIxmBNualaWMRR52bbU6DU3hx7vigGx45ztKP0RVVr/kaByv08Mcmi2 y79zZTypidqgVdFkYTnLF8SOUlHV4Oq3fauH2eAogSngkzh6NS1YkWueISEkh9zr 6TdZDwcsGHD9Cb+mZomK/7p7nxTwJhoFubdwR8iYricvjbSZegNIDJSdHRg0thhG CpqgtY704122AzIHepPb8Wx/ji0oYQo= -----END CERTIFICATE-----Generated at Sat May 9 08:10:55 2026 by rpki-client