$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d57e577-c7dd-359f-9ec2-0fd0922042ab.roa File: 0d57e577-c7dd-359f-9ec2-0fd0922042ab.roa (raw, json) Hash identifier: t2WF0vj6pEK7Mepd2/a1MekgeF7h8/ZupLddmdXqPK8= Subject key identifier: B0:EE:11:45:EF:AB:13:6A:11:50:4A:EE:CD:D2:89:B7:F3:39:2F:13 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D47C506BDB1D3C35E48C1BC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d57e577-c7dd-359f-9ec2-0fd0922042ab.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 13335 IP address blocks: 104.23.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:06:bd:b1:d3:c3:5e:48:c1:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=fba0bda6-acfe-4fbb-bbca-bf878b52a717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:32:79:f3:00:ba:ce:9d:3c:b3:b6:3f:25:62: 5d:49:4c:88:78:73:3a:98:5e:7c:82:93:3d:f4:d8: a9:91:8d:b2:69:2e:24:3f:5b:1e:ba:b5:d9:ad:e9: 7d:0e:7f:ae:2c:35:40:bd:4d:04:87:02:60:09:74: 55:53:26:6a:10:e9:52:0a:ff:5e:e9:f4:fe:a7:76: eb:0f:80:66:5e:fd:a1:5a:6f:6c:c2:8c:73:35:35: d9:a8:c8:59:38:96:26:4b:20:3b:bb:0d:26:58:a0: ca:ec:9f:5f:5a:cf:63:32:02:03:a9:da:22:47:7a: 0b:39:28:a1:42:1e:7c:4b:40:60:75:de:b6:e4:04: f1:00:37:51:bf:27:8d:29:a6:ea:8a:2e:71:89:87: 6d:db:0c:74:bd:e9:7f:c7:0a:39:ab:a9:b8:56:e9: 27:c0:00:fd:b8:dd:c4:ac:29:c6:e5:5f:5a:0a:06: 1c:fb:1a:28:08:ee:48:a8:68:e4:0a:1e:11:08:aa: b5:fb:62:58:5d:bd:df:7b:f7:2a:9a:9c:fb:64:c2: e5:66:1c:ac:c5:18:ed:2c:30:7e:db:d5:2e:f9:ee: 8e:9c:59:67:41:bc:02:97:d4:8b:33:ee:6c:28:89: 1c:d6:da:f8:27:f3:9c:27:03:39:77:92:56:e9:c6: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EE:11:45:EF:AB:13:6A:11:50:4A:EE:CD:D2:89:B7:F3:39:2F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d57e577-c7dd-359f-9ec2-0fd0922042ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:53:5f:95:ac:cd:45:d4:18:2b:b4:eb:a8:c2:26:f2:a3:f8: ec:e0:84:e2:e8:00:d2:ff:70:21:75:19:78:85:ae:d5:4f:c7: ff:a0:98:49:69:92:1a:7d:e4:bf:a1:f7:6f:78:d3:9f:72:e3: 7c:21:de:35:ae:9f:8b:87:9d:1b:b7:2f:08:22:37:71:84:e9: 21:c8:ff:11:ac:b9:34:5c:9c:a9:88:08:93:d6:ae:c2:fa:58: 62:6b:ae:53:d2:61:6a:84:54:df:49:82:04:94:95:af:68:fc: e6:11:a6:15:72:9c:6a:3f:dd:5b:7e:91:42:d4:2b:01:23:fc: 9d:77:9b:10:ba:e9:81:2a:eb:b4:23:08:98:b4:96:93:ac:dd: 2a:df:c7:d1:f8:ae:2e:a2:8d:e8:53:63:42:d8:84:fb:38:bb: c6:fa:71:8b:a1:96:b9:c5:a4:f0:fb:77:50:70:55:a4:73:7e: b4:bc:f4:f7:dd:7f:fb:2f:d6:8e:11:6e:57:d9:ff:d8:8a:59: cb:1d:aa:57:dd:9b:ac:a3:62:b0:f8:dc:90:d4:01:6d:8e:9a: 08:cf:f2:7b:33:c8:2a:0b:3c:14:bb:11:ef:bc:b4:66:b9:01: c4:f6:1c:e3:08:6d:ef:b5:57:ec:84:75:07:eb:3e:3c:c8:ad: 90:69:76:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQa9sdPDXkjBvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZmJhMGJkYTYtYWNmZS00ZmJiLWJiY2EtYmY4NzhiNTJhNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zJ58wC6zp08s7Y/JWJdSUyIeHM6mF58gpM9 9NipkY2yaS4kP1seurXZrel9Dn+uLDVAvU0EhwJgCXRVUyZqEOlSCv9e6fT+p3br D4BmXv2hWm9swoxzNTXZqMhZOJYmSyA7uw0mWKDK7J9fWs9jMgIDqdoiR3oLOSih Qh58S0Bgdd625ATxADdRvyeNKabqii5xiYdt2wx0vel/xwo5q6m4VuknwAD9uN3E rCnG5V9aCgYc+xooCO5IqGjkCh4RCKq1+2JYXb3fe/cqmpz7ZMLlZhysxRjtLDB+ 29Uu+e6OnFlnQbwCl9SLM+5sKIkc1tr4J/OcJwM5d5JW6cYGKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDuEUXvqxNqEVBK7s3SibfzOS8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGQ1N2U1NzctYzdkZC0z NTlmLTllYzItMGZkMDkyMjA0MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVTX5WszUXUGCu066jCJvKj+OzghOLoANL/cCF1GXiFrtVPx/+gmElp khp95L+h9294059y43wh3jWun4uHnRu3LwgiN3GE6SHI/xGsuTRcnKmICJPWrsL6 WGJrrlPSYWqEVN9JggSUla9o/OYRphVynGo/3Vt+kULUKwEj/J13mxC66YEq67Qj CJi0lpOs3Srfx9H4ri6ijehTY0LYhPs4u8b6cYuhlrnFpPD7d1BwVaRzfrS89Pfd f/sv1o4RblfZ/9iKWcsdqlfdm6yjYrD43JDUAW2OmgjP8nszyCoLPBS7Ee+8tGa5 AcT2HOMIbe+1V+yEdQfrPjzIrZBpdug= -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:19 2026 by rpki-client