$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a6fa7ef-8b6f-340a-b22e-b684c5f07789.roa File: 3a6fa7ef-8b6f-340a-b22e-b684c5f07789.roa (raw, json) Hash identifier: H7idQOFpfdN4PWW96wilWlbyf9v0D32J6A/47zLmHtQ= Subject key identifier: D8:5E:8E:E0:4F:15:A1:A3:55:D2:10:D9:A7:E2:D9:B5:3F:45:F5:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F498A35E9C4C748E4FA91C800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a6fa7ef-8b6f-340a-b22e-b684c5f07789.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 104.22.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:35:e9:c4:c7:48:e4:fa:91:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fa22b12f-24e5-499e-be9b-32f170cd8b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:b1:d0:47:44:47:f0:bd:78:34:6f:99:2c: 10:20:a5:bc:4b:88:00:4b:43:1f:f3:c2:fb:f4:32: b3:a8:0c:ee:73:68:2e:45:37:37:d8:64:6d:41:8e: d2:3b:df:f7:a4:f3:c4:81:a5:33:46:a3:75:74:c7: 90:74:bc:49:55:f6:71:a7:66:0f:81:51:f5:0e:a7: 7b:f1:21:2e:71:6a:5a:7d:66:ef:ad:f0:47:f0:54: 78:78:2b:18:8c:bc:52:bc:62:33:d7:bc:ea:8c:64: 0b:e1:b6:73:82:c7:5a:ff:82:73:1e:86:9d:69:8b: 5d:67:95:be:cd:36:d2:07:74:b3:9b:72:da:7a:c6: 43:c8:0d:16:4c:92:b4:be:88:9f:99:dd:bd:f6:80: b4:5c:05:53:4a:34:8b:66:a2:c3:1e:c6:bd:c6:b2: 78:20:2b:92:42:8d:91:22:a2:c5:e6:1a:3d:f1:38: b4:09:c0:79:04:5f:00:df:cf:ce:26:f4:e3:c4:c1: b2:30:66:1e:9e:23:41:86:1f:2d:18:e2:89:a6:5b: ed:7d:a0:9f:f5:16:cd:33:64:1f:8f:44:37:ca:82: c4:73:12:16:d0:fc:e2:43:13:11:ee:b4:2b:7c:1e: e0:18:92:04:7b:7f:a5:e5:39:88:15:37:8c:e2:e9: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:8E:E0:4F:15:A1:A3:55:D2:10:D9:A7:E2:D9:B5:3F:45:F5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a6fa7ef-8b6f-340a-b22e-b684c5f07789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:de:42:76:f0:93:07:d4:17:c9:d0:87:8c:d3:26:3e:6a:97: 3c:d7:ed:d9:ec:43:cd:5a:d2:3a:f1:4a:64:00:ca:7d:d3:84: c0:5f:a4:81:f1:40:6a:23:c5:a5:b3:80:6f:af:98:3a:9f:9b: dc:26:3c:be:13:03:11:c3:7c:c5:2c:07:04:53:13:5b:e0:99: f8:cf:28:4b:6d:e2:de:7c:62:0f:dc:ab:36:42:39:4f:bf:5a: 13:fe:99:3d:47:6d:06:53:32:2e:8a:e8:d8:f7:89:e2:7c:35: 17:8e:97:f4:47:8a:9c:82:7c:3d:aa:99:d0:e4:88:05:3b:5b: c0:6a:41:cc:b0:2c:71:c4:94:27:6b:57:c8:fa:6b:01:d5:62: 3a:ff:6d:95:dc:7c:83:7f:34:32:14:74:b2:7a:24:c7:2e:0d: 9b:99:43:e2:6b:4c:ee:9d:48:88:f7:d2:21:e8:10:bb:12:3d: a9:b0:79:c1:bf:5e:84:7d:d2:3e:a3:d0:40:4e:d6:4e:a1:89: 44:c7:84:b8:59:57:5e:e7:81:02:a7:d5:ae:45:a6:38:7e:b7: 22:aa:fe:a5:e9:6d:9c:7e:47:db:19:33:e7:a1:26:81:3b:b1: 44:f9:95:c8:f9:66:4a:de:b5:ed:5c:c9:46:58:c2:9a:47:88: db:ac:21:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JijXpxMdI5PqRyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmEyMmIxMmYtMjRlNS00OTllLWJlOWItMzJmMTcwY2Q4YjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmWx0EdER/C9eDRvmSwQIKW8S4gAS0Mf88L7 9DKzqAzuc2guRTc32GRtQY7SO9/3pPPEgaUzRqN1dMeQdLxJVfZxp2YPgVH1Dqd7 8SEucWpafWbvrfBH8FR4eCsYjLxSvGIz17zqjGQL4bZzgsda/4JzHoadaYtdZ5W+ zTbSB3Szm3LaesZDyA0WTJK0voifmd299oC0XAVTSjSLZqLDHsa9xrJ4ICuSQo2R IqLF5ho98Ti0CcB5BF8A38/OJvTjxMGyMGYeniNBhh8tGOKJplvtfaCf9RbNM2Qf j0Q3yoLEcxIW0PziQxMR7rQrfB7gGJIEe3+l5TmIFTeM4unxGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhejuBPFaGjVdIQ2afi2bU/RfXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2E2ZmE3ZWYtOGI2Zi0z NDBhLWIyMmUtYjY4NGM1ZjA3Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTeQnbwkwfUF8nQh4zTJj5qlzzX7dnsQ81a0jrxSmQAyn3ThMBfpIHx QGojxaWzgG+vmDqfm9wmPL4TAxHDfMUsBwRTE1vgmfjPKEtt4t58Yg/cqzZCOU+/ WhP+mT1HbQZTMi6K6Nj3ieJ8NReOl/RHipyCfD2qmdDkiAU7W8BqQcywLHHElCdr V8j6awHVYjr/bZXcfIN/NDIUdLJ6JMcuDZuZQ+JrTO6dSIj30iHoELsSPamwecG/ XoR90j6j0EBO1k6hiUTHhLhZV17ngQKn1a5Fpjh+tyKq/qXpbZx+R9sZM+ehJoE7 sUT5lcj5Zkrete1cyUZYwppHiNusIYA= -----END CERTIFICATE-----Generated at Sun Sep 27 07:27:40 2026 by rpki-client