$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa File: fd0ad239-50b5-3adc-a9f2-317315ec4039.roa (raw, json) Hash identifier: GnmZ/acptQxYBMPHjgZgtBROqSswPXOy90nZE1JQkgs= Subject key identifier: 5D:6A:B8:F1:38:35:83:07:76:1F:3A:BD:8D:6E:06:47:D6:4B:58:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E31CF81E561B5E7F2E320F740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.23.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:81:e5:61:b5:e7:f2:e3:20:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=cae5aa56-58a6-4e80-bfb0-753eb405ec5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:da:8d:95:c4:38:3e:a7:17:c0:5d:02:2c: ea:fc:e0:74:43:1d:39:41:e4:de:ea:7b:2c:5e:63: de:67:97:0c:b2:fe:81:84:f9:02:d1:eb:49:0b:6a: 99:a8:f0:7e:0d:13:6e:a3:bb:27:a4:21:dd:b6:69: c7:7d:fe:f6:e0:64:92:37:36:aa:2b:3a:bd:67:ab: 65:26:ad:e8:1c:b6:b5:96:12:77:b8:2a:c2:e4:42: e6:98:9d:fa:cc:4a:c1:8d:91:a2:da:fa:88:58:cb: e3:45:b2:4c:c9:71:dd:2e:13:8c:f0:a2:07:1a:af: 4f:00:c8:2c:3f:2e:dc:2b:51:0c:2d:10:6a:2b:ea: ab:a5:32:aa:53:6e:2d:a8:76:09:ad:3e:a1:f4:59: 5c:df:35:2c:0b:a2:4b:a5:ce:0e:33:bd:e8:90:e4: e2:c9:40:b4:0a:c8:59:1c:1d:d4:09:22:3c:dd:04: f9:95:f3:30:79:7f:47:a2:1e:be:cd:31:9a:58:8c: a1:33:7b:ec:5c:05:55:ab:c2:c9:ae:41:1e:75:88: 8a:e8:b3:a6:d9:d9:78:66:ed:eb:4a:1e:28:9d:c7: 67:41:81:30:b1:2e:55:de:de:d3:55:59:cd:2c:7c: 75:25:87:b2:4f:46:d6:2a:df:e4:3c:ae:89:44:6a: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6A:B8:F1:38:35:83:07:76:1F:3A:BD:8D:6E:06:47:D6:4B:58:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bd:15:f0:56:08:3f:50:0c:10:9a:07:05:96:cc:06:4d:5d: 00:e8:2d:9f:9b:86:64:56:3a:43:d0:17:cf:8f:47:2b:e6:c6: 4e:62:2b:86:46:54:eb:86:fe:c2:06:d5:c3:3a:1d:2e:34:05: 92:3c:f2:d2:e8:e6:1e:f9:fc:69:48:da:49:09:a5:01:81:cd: 8e:d8:d7:07:d4:56:4a:07:af:8e:3f:ba:dd:b0:a8:07:0b:5f: 24:28:f0:e5:01:a9:aa:d8:89:d2:d0:78:d8:6e:d3:09:9e:4d: 92:06:f5:17:6a:85:77:95:64:06:e8:00:b0:57:5b:b3:b6:0c: e4:4f:18:ad:a0:91:a4:6a:5a:04:00:e8:03:f3:59:d4:4f:cb: a4:fa:8d:f8:67:27:f2:70:c0:44:bd:cb:95:b3:c9:0a:40:4e: 39:6f:99:39:b2:9e:a8:7f:4a:74:9a:9f:3c:c2:57:ec:d0:8a: c2:06:d6:66:68:b7:15:d8:34:c5:6a:8a:e2:52:e3:b2:cd:35: c8:1f:ae:a9:43:a3:5a:38:ad:17:f8:c2:c5:e6:a7:20:a0:e2: e9:03:a7:4b:fe:2d:73:a1:85:cf:d2:76:bd:71:9e:09:b5:6d: c9:50:95:ac:20:a0:dd:70:ab:46:92:38:3c:c2:2c:ce:22:c0: 37:6c:d6:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz4HlYbXn8uMg90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk Y2FlNWFhNTYtNThhNi00ZTgwLWJmYjAtNzUzZWI0MDVlYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY/ajZXEOD6nF8BdAizq/OB0Qx05QeTe6nss XmPeZ5cMsv6BhPkC0etJC2qZqPB+DRNuo7snpCHdtmnHff724GSSNzaqKzq9Z6tl Jq3oHLa1lhJ3uCrC5ELmmJ36zErBjZGi2vqIWMvjRbJMyXHdLhOM8KIHGq9PAMgs Py7cK1EMLRBqK+qrpTKqU24tqHYJrT6h9Flc3zUsC6JLpc4OM73okOTiyUC0CshZ HB3UCSI83QT5lfMweX9Hoh6+zTGaWIyhM3vsXAVVq8LJrkEedYiK6LOm2dl4Zu3r Sh4oncdnQYEwsS5V3t7TVVnNLHx1JYeyT0bWKt/kPK6JRGrXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1quPE4NYMHdh86vY1uBkfWS1hmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmQwYWQyMzktNTBiNS0z YWRjLWE5ZjItMzE3MzE1ZWM0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD69FfBWCD9QDBCaBwWWzAZNXQDoLZ+bhmRWOkPQF8+PRyvmxk5iK4ZG VOuG/sIG1cM6HS40BZI88tLo5h75/GlI2kkJpQGBzY7Y1wfUVkoHr44/ut2wqAcL XyQo8OUBqarYidLQeNhu0wmeTZIG9RdqhXeVZAboALBXW7O2DORPGK2gkaRqWgQA 6APzWdRPy6T6jfhnJ/JwwES9y5WzyQpATjlvmTmynqh/SnSanzzCV+zQisIG1mZo txXYNMVqiuJS47LNNcgfrqlDo1o4rRf4wsXmpyCg4ukDp0v+LXOhhc/Sdr1xngm1 bclQlawgoN1wq0aSODzCLM4iwDds1l8= -----END CERTIFICATE-----Generated at Wed Jun 24 00:01:20 2026 by rpki-client