$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa File: 0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa (raw, json) Hash identifier: tlnH/44HpqTuDaAWLtqyFADL7zi+EMiRzI/bEiix7zI= Subject key identifier: CB:BB:09:34:D9:C6:79:8A:1F:A3:8F:4C:28:92:56:D7:F1:1F:EF:E0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DCF2B1C7C8C6578B08E49D500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 13335 IP address blocks: 104.23.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:1c:7c:8c:65:78:b0:8e:49:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=faf7a22d-9e8d-4245-9b4e-c26fa0d9b5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:fd:d9:a0:ae:0f:d2:5c:71:f7:8d:72:bd: b0:97:de:9b:55:3f:50:f2:91:88:a5:a4:18:b1:b7: a2:f9:6a:a0:a7:49:ab:0f:d2:d1:50:1a:48:37:18: 5a:15:24:ba:ea:52:ee:0b:6b:7f:b2:99:56:24:ae: ef:64:f6:3a:ee:3a:33:9c:df:15:08:9e:3a:47:62: 86:ae:c7:91:26:de:bf:aa:33:dd:eb:07:df:7d:6a: bd:2f:4c:89:da:30:90:83:09:5e:bf:f9:40:7a:4c: 76:dd:60:f9:1c:2b:51:34:af:55:71:ae:47:8b:19: 4c:b0:12:91:8f:c5:f6:d3:2e:49:ac:bf:83:50:ac: d6:ef:13:71:e7:3b:05:90:ab:71:ce:48:b3:d2:0c: 07:fa:6c:f5:36:4a:81:90:0a:dc:96:bc:d8:df:e8: 83:83:d0:87:5a:c0:8b:ae:a2:4c:a0:87:a7:e6:d7: 4a:47:b3:60:c1:8b:4b:7c:fc:17:c4:93:68:9b:66: 52:e0:e6:d1:c7:d3:65:6b:54:69:29:05:89:f0:5b: 52:fc:37:ff:62:59:66:4e:72:b1:37:0d:f0:dc:02: ba:ef:06:61:09:13:ac:10:b6:a0:8e:03:1f:2b:2c: c8:9a:08:93:62:36:96:c6:cf:8d:ce:ff:73:a1:b6: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BB:09:34:D9:C6:79:8A:1F:A3:8F:4C:28:92:56:D7:F1:1F:EF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:ed:8f:b2:1f:55:1f:8d:42:80:6c:41:3d:94:37:99:62:94: 3c:a4:9a:5f:f2:de:1b:1c:e0:b8:a3:dd:10:ff:7d:0a:98:fe: 06:f9:a5:9a:ce:19:c2:1d:ae:41:5f:10:d3:22:50:08:cf:dc: 5e:c3:c4:66:91:f3:dd:ae:7c:43:44:b3:61:ee:a2:eb:2c:da: de:84:45:bb:6e:d4:03:1a:9f:7e:84:51:e0:23:95:a9:76:d1: e1:c8:32:6e:e5:7e:20:0b:c6:e9:07:f7:05:10:a6:bf:30:6a: 0a:34:90:59:c0:7a:ec:10:32:50:b4:a6:67:fd:9e:f3:c5:96: 9b:b7:de:e4:2c:01:f2:04:4a:ab:6c:07:8c:53:02:eb:d4:fa: d3:c2:b6:3f:ea:48:3e:1f:7a:93:87:e3:39:19:2a:0c:29:43: bf:98:e3:78:48:6c:55:81:5a:ea:15:38:51:90:94:45:b8:90: ba:4c:37:2f:ef:5f:cd:8d:77:1a:2e:d8:3f:1b:7f:41:e0:ce: 97:c1:6c:fe:be:5a:ad:29:c7:75:7b:71:a2:f8:ac:9d:ca:0c: 4b:bf:c4:d7:47:ed:83:5b:83:ee:28:ee:12:f6:78:34:0f:13: 0b:aa:af:19:cb:58:56:b8:48:a0:1c:86:fc:4f:92:db:43:2e: 7c:82:02:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKxx8jGV4sI5J1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk ZmFmN2EyMmQtOWU4ZC00MjQ1LTliNGUtYzI2ZmEwZDliNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P/92aCuD9JccfeNcr2wl96bVT9Q8pGIpaQY sbei+Wqgp0mrD9LRUBpINxhaFSS66lLuC2t/splWJK7vZPY67joznN8VCJ46R2KG rseRJt6/qjPd6wfffWq9L0yJ2jCQgwlev/lAekx23WD5HCtRNK9Vca5HixlMsBKR j8X20y5JrL+DUKzW7xNx5zsFkKtxzkiz0gwH+mz1NkqBkArclrzY3+iDg9CHWsCL rqJMoIen5tdKR7NgwYtLfPwXxJNom2ZS4ObRx9Nla1RpKQWJ8FtS/Df/YllmTnKx Nw3w3AK67wZhCROsELagjgMfKyzImgiTYjaWxs+Nzv9zobb2AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu7CTTZxnmKH6OPTCiSVtfxH+/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE0OTU2MmYtMGQ2Yy0z MGQyLWE4YzMtZGYzNDIzY2JiOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7tj7IfVR+NQoBsQT2UN5lilDykml/y3hsc4Lij3RD/fQqY/gb5pZrO GcIdrkFfENMiUAjP3F7DxGaR892ufENEs2Huouss2t6ERbtu1AMan36EUeAjlal2 0eHIMm7lfiALxukH9wUQpr8wago0kFnAeuwQMlC0pmf9nvPFlpu33uQsAfIESqts B4xTAuvU+tPCtj/qSD4fepOH4zkZKgwpQ7+Y43hIbFWBWuoVOFGQlEW4kLpMNy/v X82Ndxou2D8bf0HgzpfBbP6+Wq0px3V7caL4rJ3KDEu/xNdH7YNbg+4o7hL2eDQP EwuqrxnLWFa4SKAchvxPkttDLnyCAs8= -----END CERTIFICATE-----Generated at Wed May 13 12:11:46 2026 by rpki-client