$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa File: 035b5f20-dc11-3ab2-aea9-25fce532f437.roa (raw, json) Hash identifier: 4iVCQ14eEneYwHtOplkoLWCgGqGq1RClpudG16zhVc8= Subject key identifier: 9A:81:01:C1:6D:F9:9D:CE:BB:1F:17:70:CB:87:67:4C:FD:A2:73:41 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4987FE026A9617990FDB5740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.22.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:fe:02:6a:96:17:99:0f:db:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97a9fa1e-c6e7-4232-bac6-edbcbed57ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:30:f5:ba:03:a7:49:70:56:a9:e1:71:6c: d5:61:f5:2c:8c:96:ec:1b:e3:6f:bd:a3:41:3d:7e: a7:37:cd:35:32:69:01:8f:96:f2:3f:e5:57:4c:3b: bc:b0:2e:9b:f3:57:87:1f:ff:0b:5b:0d:bb:3e:72: c7:b1:ab:be:6d:5d:dc:f7:6e:d5:ab:cb:96:8c:18: b1:2d:d4:30:32:aa:b0:46:9f:49:3f:e7:af:c4:99: c1:c9:72:3f:a6:ad:f6:8d:db:fa:f3:f4:75:18:ae: b7:9a:84:9e:4e:8a:85:da:ae:4d:53:d5:ec:56:20: 4d:05:b3:2f:95:e4:8d:28:23:e2:bb:a3:60:42:20: 36:3d:fa:31:ef:6f:e6:19:88:dc:0c:c2:64:2c:01: a8:0f:67:48:bc:64:dc:84:ea:32:c9:07:1e:30:43: 32:d8:46:52:68:05:c1:0d:2f:37:99:dd:3d:97:39: 4f:33:2c:0e:ed:5f:16:2d:0c:81:30:dc:93:66:f9: 63:c6:34:c4:f3:29:6e:0d:b3:a1:83:3e:63:21:80: 1a:ee:5a:4c:72:52:4e:d8:ed:b3:15:60:84:89:90: 2d:cf:9b:50:17:e0:6a:b7:42:59:ac:b9:79:b2:2c: d8:f3:3c:52:c8:c3:56:1f:4f:84:65:74:94:5c:43: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:81:01:C1:6D:F9:9D:CE:BB:1F:17:70:CB:87:67:4C:FD:A2:73:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:81:b4:4a:0c:45:26:0d:6c:ce:3f:34:08:ef:01:c7:3e:a0: 66:10:a3:98:8a:a6:d5:7c:50:9c:e8:8d:26:21:db:a0:97:49: c6:17:fb:03:77:c7:78:d5:36:ca:83:2d:ad:34:bd:9e:d8:d5: 02:68:4b:5d:69:b9:94:0f:71:a7:1c:c0:cc:26:a2:63:08:ce: a1:40:fa:d7:0a:55:2e:a7:32:dd:71:fb:41:2d:74:e4:7c:d5: 66:88:04:b9:b7:9d:30:80:a1:98:7d:e3:c5:9a:a9:27:79:fa: 2f:2a:75:e6:49:87:83:96:6e:0e:ff:0f:4b:9a:09:f5:f7:85: 96:23:ff:b3:27:81:6f:6d:24:18:46:80:d0:d2:37:ec:00:77: 78:d1:3b:81:fc:1a:73:ea:2e:59:fd:89:c9:f2:5f:06:70:be: 8c:f6:a8:5a:82:72:ec:c3:53:b1:13:e2:49:02:b7:a7:3f:0a: 2d:89:fc:64:3f:6c:1f:a7:b6:8c:fb:40:44:be:dc:a2:c6:38: c2:00:7c:f1:02:fc:d8:78:46:59:64:d4:ac:a2:2c:fa:f2:a7: 2c:31:cf:33:eb:43:3f:2c:26:ca:1f:01:e4:7a:ed:04:5b:f7: e5:86:16:b7:d9:ce:99:b7:f6:0a:a2:d7:a7:ba:20:f6:10:54: 23:ce:bd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh/4CapYXmQ/bV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTdhOWZhMWUtYzZlNy00MjMyLWJhYzYtZWRiY2JlZDU3ZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43Mw9boDp0lwVqnhcWzVYfUsjJbsG+NvvaNB PX6nN801MmkBj5byP+VXTDu8sC6b81eHH/8LWw27PnLHsau+bV3c927Vq8uWjBix LdQwMqqwRp9JP+evxJnByXI/pq32jdv68/R1GK63moSeToqF2q5NU9XsViBNBbMv leSNKCPiu6NgQiA2Pfox72/mGYjcDMJkLAGoD2dIvGTchOoyyQceMEMy2EZSaAXB DS83md09lzlPMywO7V8WLQyBMNyTZvljxjTE8yluDbOhgz5jIYAa7lpMclJO2O2z FWCEiZAtz5tQF+Bqt0JZrLl5sizY8zxSyMNWH0+EZXSUXEP6SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqBAcFt+Z3Oux8XcMuHZ0z9onNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDM1YjVmMjAtZGMxMS0z YWIyLWFlYTktMjVmY2U1MzJmNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKBtEoMRSYNbM4/NAjvAcc+oGYQo5iKptV8UJzojSYh26CXScYX+wN3 x3jVNsqDLa00vZ7Y1QJoS11puZQPcaccwMwmomMIzqFA+tcKVS6nMt1x+0EtdOR8 1WaIBLm3nTCAoZh948WaqSd5+i8qdeZJh4OWbg7/D0uaCfX3hZYj/7MngW9tJBhG gNDSN+wAd3jRO4H8GnPqLln9icnyXwZwvoz2qFqCcuzDU7ET4kkCt6c/Ci2J/GQ/ bB+ntoz7QES+3KLGOMIAfPEC/Nh4Rllk1KyiLPrypywxzzPrQz8sJsofAeR67QRb 9+WGFrfZzpm39gqi16e6IPYQVCPOveA= -----END CERTIFICATE-----Generated at Sat Sep 26 14:58:10 2026 by rpki-client