$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d78f6425-0c6d-3139-93b6-8d22b9c90d0a.roa File: d78f6425-0c6d-3139-93b6-8d22b9c90d0a.roa (raw, json) Hash identifier: jGcXT9PluqqOJbpWUXz29/avABunt4uyZSc0chz+it8= Subject key identifier: 70:05:07:55:05:65:BC:39:30:B1:F7:BF:41:D1:0E:1D:19:F0:10:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F19FCEF4B5BC3183E3B18D658 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d78f6425-0c6d-3139-93b6-8d22b9c90d0a.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.22.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:ef:4b:5b:c3:18:3e:3b:18:d6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=3fa81d7e-e1ce-4de1-a881-e6a62c96d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:43:b8:55:5b:29:e2:94:79:33:d2:ee:b2: ba:e7:13:ba:8c:20:2d:9a:76:e0:9d:74:2e:6a:f6: a5:14:8c:03:ae:ee:d9:d2:72:50:75:a5:a3:b3:74: ef:d5:57:f9:29:ff:7f:25:4a:67:a1:71:18:b5:63: 03:64:be:17:9f:26:5e:92:68:e1:35:fc:fc:c0:3f: e6:28:fe:0c:64:bf:5b:50:40:33:e9:ae:1f:e5:8c: 76:2a:4c:40:e7:54:65:4d:c1:92:7e:e5:25:40:cf: 61:21:28:f0:12:27:d1:30:82:e0:d9:97:b0:5d:b9: bf:ba:e1:08:1b:87:24:2a:57:b3:31:3b:2e:a9:de: f5:20:38:72:7f:f4:66:5f:7d:6e:81:38:dc:b1:1b: 95:1b:3a:e9:84:13:8a:3f:de:eb:85:b7:f9:7f:83: 99:77:d8:2d:9d:fa:51:c8:69:66:c6:69:75:55:8c: 99:9a:70:0d:9b:9d:19:47:a4:5e:b1:4b:37:59:a0: 9b:19:62:22:14:e8:2e:e2:de:ba:05:c1:03:bd:0c: d6:66:aa:70:2b:06:40:ba:31:e7:5e:08:53:f5:b2: 85:80:b3:75:b6:be:ca:38:62:aa:15:8e:25:37:60: 5c:27:ee:41:91:e0:0c:29:5b:6e:0a:df:c9:cd:ab: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:05:07:55:05:65:BC:39:30:B1:F7:BF:41:D1:0E:1D:19:F0:10:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d78f6425-0c6d-3139-93b6-8d22b9c90d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:e0:a0:bc:78:f5:c8:6d:92:5c:cc:88:84:0c:d1:ec:29:72: cf:1a:7a:ec:55:8e:0d:58:39:d5:43:37:0e:66:64:31:a8:b0: f0:db:73:c1:ad:8b:c8:14:74:1d:52:26:e8:05:ba:f3:16:d0: 66:86:d3:10:15:55:bd:92:91:a5:6d:6b:d9:ae:ca:d1:7d:c1: ee:08:ec:2b:6f:61:6c:64:1a:b4:d4:cb:98:0c:bf:54:66:f4: 64:b6:50:e3:36:0a:44:5c:2c:de:c3:cf:dd:85:13:32:67:97: 5e:42:93:70:eb:a6:9d:d8:a6:33:0d:d7:9e:a7:52:11:82:53: 6f:f9:98:cf:15:db:23:e4:63:7d:b4:09:76:2b:22:80:05:48: b6:23:67:a0:0b:66:40:9a:9d:1e:32:ac:5d:d8:84:7e:ed:5a: 0a:26:b4:a8:b3:f9:c5:7c:97:39:52:b6:b5:ad:00:a8:f6:e9: 1f:38:26:89:98:17:d9:c6:92:93:0a:dd:24:39:cf:86:8a:0c: bb:c7:50:ef:ef:a2:9f:61:45:7c:d1:99:9a:c5:63:26:6a:71: 3c:10:6d:4b:7e:d4:9a:a6:56:0c:2b:ac:ae:d8:50:7f:1d:95: d2:22:c2:63:73:8f:e2:81:1d:bb:33:d5:55:8f:c9:5f:3a:f4: ad:97:31:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/O9LW8MYPjsY1lgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk M2ZhODFkN2UtZTFjZS00ZGUxLWE4ODEtZTZhNjJjOTZkNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7VDuFVbKeKUeTPS7rK65xO6jCAtmnbgnXQu avalFIwDru7Z0nJQdaWjs3Tv1Vf5Kf9/JUpnoXEYtWMDZL4XnyZekmjhNfz8wD/m KP4MZL9bUEAz6a4f5Yx2KkxA51RlTcGSfuUlQM9hISjwEifRMILg2ZewXbm/uuEI G4ckKlezMTsuqd71IDhyf/RmX31ugTjcsRuVGzrphBOKP97rhbf5f4OZd9gtnfpR yGlmxml1VYyZmnANm50ZR6ResUs3WaCbGWIiFOgu4t66BcEDvQzWZqpwKwZAujHn XghT9bKFgLN1tr7KOGKqFY4lN2BcJ+5BkeAMKVtuCt/JzatHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAFB1UFZbw5MLH3v0HRDh0Z8BB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDc4ZjY0MjUtMGM2ZC0z MTM5LTkzYjYtOGQyMmI5YzkwZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDgoLx49chtklzMiIQM0ewpcs8aeuxVjg1YOdVDNw5mZDGosPDbc8Gt i8gUdB1SJugFuvMW0GaG0xAVVb2SkaVta9muytF9we4I7CtvYWxkGrTUy5gMv1Rm 9GS2UOM2CkRcLN7Dz92FEzJnl15Ck3Drpp3YpjMN156nUhGCU2/5mM8V2yPkY320 CXYrIoAFSLYjZ6ALZkCanR4yrF3YhH7tWgomtKiz+cV8lzlStrWtAKj26R84JomY F9nGkpMK3SQ5z4aKDLvHUO/vop9hRXzRmZrFYyZqcTwQbUt+1JqmVgwrrK7YUH8d ldIiwmNzj+KBHbsz1VWPyV869K2XMc0= -----END CERTIFICATE-----Generated at Tue Sep 22 09:38:48 2026 by rpki-client