$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f997e100-8ab5-3678-af97-ccf3e018969a.roa File: f997e100-8ab5-3678-af97-ccf3e018969a.roa (raw, json) Hash identifier: iG+NRuXN33cbVV3ykVukkFnJsCbpN/HPC+pGsHrARm8= Subject key identifier: 06:2B:7D:B2:2E:87:99:43:DC:F3:12:6A:29:3F:B8:67:76:7E:53:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E7E94ECB07C87358B68678480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f997e100-8ab5-3678-af97-ccf3e018969a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 13335 IP address blocks: 104.23.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ec:b0:7c:87:35:8b:68:67:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=3d7ebc64-7db7-4b1f-8e50-5b3f70b578fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:99:c8:da:72:56:46:ea:5f:d9:04:99:bf: 2f:28:44:51:65:e1:0e:0c:cd:a7:fb:dc:a8:d2:0e: 3d:27:a3:fe:3b:b1:98:b5:49:98:f8:aa:01:83:61: f4:28:67:9a:8a:52:bf:f3:65:f4:d6:2a:50:81:0c: fe:37:13:8a:35:bb:74:a6:b8:6e:a5:ee:41:dc:a9: c3:5d:95:ed:a5:db:ed:bc:34:a6:c3:39:96:f4:30: d2:2b:e0:bc:e3:ce:be:65:90:44:d1:c8:74:aa:36: 0b:45:c9:29:cd:e9:f1:a9:a6:da:bb:9d:c2:4d:8d: 4e:38:13:83:3f:8c:24:eb:1c:61:71:21:06:cf:69: 44:b9:60:0f:6e:48:53:ea:f4:4b:60:83:26:73:ad: a3:b7:f6:03:65:e8:a1:7b:26:aa:21:e1:50:bd:68: 74:d1:ed:61:b4:2c:fe:d2:b2:40:59:a5:21:38:29: 70:b3:f0:a6:65:ab:b5:6c:25:33:52:78:0b:43:88: ae:3b:be:05:f2:53:02:51:17:95:86:5c:be:fc:c2: 1b:f5:9b:ce:5a:a2:91:d1:cd:a4:06:d3:89:a9:1b: 7e:7a:ad:72:fb:c1:22:38:2c:a4:d4:bd:0e:21:79: 74:a6:ba:5c:b7:23:18:cb:6c:38:ba:6d:27:fc:e7: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2B:7D:B2:2E:87:99:43:DC:F3:12:6A:29:3F:B8:67:76:7E:53:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f997e100-8ab5-3678-af97-ccf3e018969a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fa:5c:91:f9:d2:2d:df:77:df:22:21:36:88:98:7d:05:aa: 78:4f:e0:ee:88:2d:fe:31:2c:0b:aa:df:e1:1e:44:ce:19:d0: 35:4f:f0:51:0d:91:23:76:d2:b6:73:9e:9e:ed:60:ad:54:b2: 8b:d5:ef:7d:c1:53:94:8e:7e:80:4a:c8:84:df:9a:12:2f:7f: 4d:42:ec:71:aa:c8:08:e7:96:4f:31:66:bb:da:44:d6:33:7d: 9f:74:19:98:60:c0:cd:ad:d0:78:15:79:3c:30:47:2d:96:2c: 48:82:6a:27:21:b0:d3:56:0d:8a:49:d9:5b:e2:f8:e5:10:a7: 52:31:76:be:ac:04:a5:ec:7a:e8:2e:c3:4d:e0:64:66:85:2a: 8f:80:d1:4e:80:7c:d6:67:bc:fb:32:dc:a3:3e:a6:60:e9:94: aa:f9:ab:e8:3b:d6:73:9e:7b:06:30:a4:03:48:09:fc:d2:a4: ab:ae:62:b9:c9:cb:88:41:dc:27:28:ed:2b:9e:75:a9:28:b9: 2e:56:35:c8:13:6e:d5:c6:d3:86:be:b2:26:4c:77:ab:91:85: 57:ac:ff:2c:ab:f4:f6:1b:0b:e1:4d:1f:57:56:bb:ca:ed:9a: 1f:8a:07:56:2e:bc:4b:2b:9c:4e:81:5c:de:ee:d9:94:85:c3: 0c:e0:1a:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOywfIc1i2hnhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk M2Q3ZWJjNjQtN2RiNy00YjFmLThlNTAtNWIzZjcwYjU3OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28KZyNpyVkbqX9kEmb8vKERRZeEODM2n+9yo 0g49J6P+O7GYtUmY+KoBg2H0KGeailK/82X01ipQgQz+NxOKNbt0prhupe5B3KnD XZXtpdvtvDSmwzmW9DDSK+C8486+ZZBE0ch0qjYLRckpzenxqabau53CTY1OOBOD P4wk6xxhcSEGz2lEuWAPbkhT6vRLYIMmc62jt/YDZeiheyaqIeFQvWh00e1htCz+ 0rJAWaUhOClws/CmZau1bCUzUngLQ4iuO74F8lMCUReVhly+/MIb9ZvOWqKR0c2k BtOJqRt+eq1y+8EiOCyk1L0OIXl0prpctyMYy2w4um0n/OeauQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYrfbIuh5lD3PMSaik/uGd2flPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjk5N2UxMDAtOGFiNS0z Njc4LWFmOTctY2NmM2UwMTg5NjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn6XJH50i3fd98iITaImH0FqnhP4O6ILf4xLAuq3+EeRM4Z0DVP8FEN kSN20rZznp7tYK1UsovV733BU5SOfoBKyITfmhIvf01C7HGqyAjnlk8xZrvaRNYz fZ90GZhgwM2t0HgVeTwwRy2WLEiCaichsNNWDYpJ2Vvi+OUQp1Ixdr6sBKXseugu w03gZGaFKo+A0U6AfNZnvPsy3KM+pmDplKr5q+g71nOeewYwpANICfzSpKuuYrnJ y4hB3Cco7SuedakouS5WNcgTbtXG04a+siZMd6uRhVes/yyr9PYbC+FNH1dWu8rt mh+KB1YuvEsrnE6BXN7u2ZSFwwzgGsQ= -----END CERTIFICATE-----Generated at Sat Jul 18 01:53:12 2026 by rpki-client