$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7403c67d-06c2-3e94-974c-8f751de6a374.roa File: 7403c67d-06c2-3e94-974c-8f751de6a374.roa (raw, json) Hash identifier: qlcfrtMhvLKEh0Qqt7YyfkzvhebQMpS0IlZX9xakpOg= Subject key identifier: FB:A1:DA:6E:83:0A:57:E0:D0:02:FF:37:A8:FD:F0:0F:7A:AA:FC:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E779A19CD62F09A12773A7100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7403c67d-06c2-3e94-974c-8f751de6a374.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 13335 IP address blocks: 104.22.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:19:cd:62:f0:9a:12:77:3a:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=e27d0c20-8230-4303-9889-a269d12f9dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:d9:12:a3:bd:f0:fa:6d:14:c0:90:8e:b2: 22:17:31:78:db:cc:44:30:b6:87:f8:db:71:76:80: ca:b2:e0:38:46:04:f1:df:84:28:59:d7:a9:36:dd: 85:7b:d2:7a:e9:e4:04:74:0c:76:85:03:da:84:1c: 28:6e:e9:81:08:02:50:0d:2c:ab:62:a7:7d:1a:8a: b1:2c:b5:9e:1f:92:20:f7:f7:4f:60:a8:e9:46:ab: b9:53:db:78:19:02:46:da:aa:e1:a0:b8:bb:ec:2b: 18:97:31:8e:c1:4d:e7:97:51:6f:37:f1:bc:db:cb: cc:9b:85:7a:20:c9:6f:1d:84:13:19:a9:f3:8a:4b: 35:f5:85:08:fa:5a:c4:f9:99:3d:90:db:16:19:0d: 8c:38:99:d3:b9:a2:ae:34:d7:8d:ba:76:a6:0d:98: 25:5e:7a:81:87:cd:4a:be:7a:42:f0:ed:9d:c7:e2: 8a:d2:69:e4:eb:b9:4c:13:1d:96:d5:6a:7d:ad:a1: 16:fb:42:c6:83:75:03:e6:d2:e7:0f:02:c1:ca:39: 3f:cc:56:55:4b:64:d6:a1:17:a7:eb:66:08:58:04: da:9c:d3:2b:0a:08:2f:34:a9:69:43:08:ce:dd:27: 6a:0f:50:4e:d6:d6:5a:91:27:9c:70:b5:5b:79:a1: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A1:DA:6E:83:0A:57:E0:D0:02:FF:37:A8:FD:F0:0F:7A:AA:FC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7403c67d-06c2-3e94-974c-8f751de6a374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a3:dc:ce:f1:6c:18:91:c7:6c:29:1d:05:a7:05:84:40:3e: 11:1e:ca:64:cc:58:0f:eb:6f:29:24:d9:5d:27:b6:e0:c5:50: 9d:94:ea:f4:bd:9b:90:ac:42:8d:5c:18:ef:4c:93:a2:46:81: e0:5c:c8:68:04:ec:b4:82:f6:1e:76:6b:3e:02:1d:10:c6:8d: 65:b6:29:c1:13:68:67:05:51:8b:eb:c7:18:18:f7:67:9e:77: bb:73:9d:52:26:3a:7f:82:b8:fa:b6:b7:3f:67:89:51:41:10: 36:86:c3:b0:bd:cd:22:a9:6e:f6:e1:d6:85:5a:6e:2c:cd:34: d4:5d:96:76:04:0a:a5:4c:02:78:59:dd:64:7b:8f:60:3b:ce: 15:a0:82:2d:fd:ca:d3:f8:6d:3a:c9:4e:cf:6b:96:8c:bf:89: 9c:0b:1a:41:f2:5e:bb:94:9a:54:dc:90:41:74:84:e1:8f:f3: 3e:1b:66:6f:b4:63:43:13:d6:9a:8f:99:b3:6a:32:8d:76:46: 44:7f:98:72:96:9e:3e:13:b2:a5:02:ba:41:36:ec:c5:9d:29: 21:71:b0:f9:0c:59:1d:c5:89:dd:11:25:7a:cc:64:36:47:dd: 2c:bf:4b:a3:86:f5:bf:40:3a:56:f3:20:9b:af:d9:33:2a:30: a2:e2:26:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mhnNYvCaEnc6cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ZTI3ZDBjMjAtODIzMC00MzAzLTk4ODktYTI2OWQxMmY5ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy77ZEqO98PptFMCQjrIiFzF428xEMLaH+Ntx doDKsuA4RgTx34QoWdepNt2Fe9J66eQEdAx2hQPahBwobumBCAJQDSyrYqd9Goqx LLWeH5Ig9/dPYKjpRqu5U9t4GQJG2qrhoLi77CsYlzGOwU3nl1FvN/G828vMm4V6 IMlvHYQTGanziks19YUI+lrE+Zk9kNsWGQ2MOJnTuaKuNNeNunamDZglXnqBh81K vnpC8O2dx+KK0mnk67lMEx2W1Wp9raEW+0LGg3UD5tLnDwLByjk/zFZVS2TWoRen 62YIWATanNMrCggvNKlpQwjO3SdqD1BO1tZakSeccLVbeaGWhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuh2m6DClfg0AL/N6j98A96qvxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzQwM2M2N2QtMDZjMi0z ZTk0LTk3NGMtOGY3NTFkZTZhMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqj3M7xbBiRx2wpHQWnBYRAPhEeymTMWA/rbykk2V0ntuDFUJ2U6vS9 m5CsQo1cGO9Mk6JGgeBcyGgE7LSC9h52az4CHRDGjWW2KcETaGcFUYvrxxgY92ee d7tznVImOn+CuPq2tz9niVFBEDaGw7C9zSKpbvbh1oVabizNNNRdlnYECqVMAnhZ 3WR7j2A7zhWggi39ytP4bTrJTs9rloy/iZwLGkHyXruUmlTckEF0hOGP8z4bZm+0 Y0MT1pqPmbNqMo12RkR/mHKWnj4TsqUCukE27MWdKSFxsPkMWR3Fid0RJXrMZDZH 3Sy/S6OG9b9AOlbzIJuv2TMqMKLiJhU= -----END CERTIFICATE-----Generated at Thu Jul 23 20:25:19 2026 by rpki-client