$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa File: afde6ea1-89e2-3302-863c-c2ece761e905.roa (raw, json) Hash identifier: hmZzObaRH+FHzH7PlJy5XnDkSHW3BqousJPy8BgO8l0= Subject key identifier: A2:24:59:70:3B:8D:85:0C:50:3A:11:F6:DE:01:7D:5E:01:CE:14:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D95F01EA746EEBC77990A0F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.22.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1e:a7:46:ee:bc:77:99:0a:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=b610e9ac-ac3b-4407-be77-9d930683ad23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:0b:1d:de:e1:fd:85:97:01:42:c6:97:2e: a0:b7:b9:be:f7:91:80:1f:b8:72:87:b7:c3:af:93: 5e:09:5f:a9:85:48:90:24:cf:9d:62:2f:12:9a:e3: fe:39:7e:ba:50:dc:46:a4:ad:48:79:11:1b:45:25: 2d:0f:b4:2d:19:42:3f:f6:62:11:b3:51:39:c5:8b: 24:4b:26:e0:38:f9:02:f1:f7:cb:0d:c0:0d:3c:fb: 93:93:1f:27:35:c8:c2:f5:0e:2b:ef:b6:69:24:9d: fb:53:19:11:66:58:49:28:8c:12:76:85:75:66:63: 03:68:83:89:1c:25:d8:f6:17:c8:55:85:d1:bf:03: 52:70:07:b9:74:bd:fe:ed:5b:6c:f9:26:36:f4:59: 74:8f:d7:8d:1c:13:e8:7a:fd:e1:89:63:0f:7c:6a: bf:76:f0:59:22:5f:84:5a:11:a0:c3:94:71:79:08: 6b:9c:7e:02:c3:42:ef:40:42:72:84:70:98:dc:e5: 23:94:7f:78:a3:61:3a:18:5e:d4:86:b0:ef:0d:6d: 7b:ec:3a:76:bd:5a:69:e8:a9:72:f5:92:8e:bc:e3: eb:39:20:52:5f:ae:73:d1:be:f4:25:45:9e:6b:bd: 4f:4a:a8:20:83:21:39:81:17:aa:44:75:be:c9:1e: 3b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:24:59:70:3B:8D:85:0C:50:3A:11:F6:DE:01:7D:5E:01:CE:14:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9d:e3:f2:24:de:44:df:71:78:2a:a3:4a:92:c1:f5:c5:bd: a9:c6:75:91:1a:06:70:1e:04:44:00:ba:00:2b:47:32:94:6f: 6f:36:55:84:a6:c4:63:e1:2e:4a:6b:c3:b8:d6:e8:be:83:eb: a9:a2:36:17:ba:2e:d1:e3:90:85:3a:3b:f5:d5:6f:bd:9b:3b: 68:1d:a2:2d:88:72:14:f1:0c:72:fc:b9:70:c7:35:a5:5f:48: a6:df:63:f4:e7:e8:16:81:2a:05:a5:4c:e2:91:14:31:ec:61: 59:07:c4:dc:90:a0:23:9e:51:86:3c:fb:55:c0:d3:15:7a:60: 05:fa:a4:aa:5b:48:f4:5b:e7:01:14:c7:1a:60:4b:7f:b4:6c: 36:9e:4f:70:0c:38:f9:d9:ae:5f:41:4e:65:b8:7d:a3:fb:a7: 3f:71:bb:3b:bc:0c:8a:0f:dc:67:b3:25:51:b0:c2:3e:dc:e5: 2c:e6:d1:15:27:64:36:40:b4:ce:71:a4:71:c6:02:3e:7d:d6: 49:b8:52:ec:eb:b1:47:b4:69:f0:54:a4:b5:61:f9:57:4a:f2: b8:33:e2:98:14:a8:cf:45:ad:33:61:41:63:bd:fc:80:2e:d7: f2:b5:4e:77:3d:c3:bc:26:ac:2d:4a:08:c6:74:f4:c7:90:c6: 1d:14:11:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8B6nRu68d5kKD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YjYxMGU5YWMtYWMzYi00NDA3LWJlNzctOWQ5MzA2ODNhZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBILHd7h/YWXAULGly6gt7m+95GAH7hyh7fD r5NeCV+phUiQJM+dYi8SmuP+OX66UNxGpK1IeREbRSUtD7QtGUI/9mIRs1E5xYsk SybgOPkC8ffLDcANPPuTkx8nNcjC9Q4r77ZpJJ37UxkRZlhJKIwSdoV1ZmMDaIOJ HCXY9hfIVYXRvwNScAe5dL3+7Vts+SY29Fl0j9eNHBPoev3hiWMPfGq/dvBZIl+E WhGgw5RxeQhrnH4Cw0LvQEJyhHCY3OUjlH94o2E6GF7UhrDvDW177Dp2vVpp6Kly 9ZKOvOPrOSBSX65z0b70JUWea71PSqgggyE5gReqRHW+yR47kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIkWXA7jYUMUDoR9t4BfV4BzhT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZkZTZlYTEtODllMi0z MzAyLTg2M2MtYzJlY2U3NjFlOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOd4/Ik3kTfcXgqo0qSwfXFvanGdZEaBnAeBEQAugArRzKUb282VYSm xGPhLkprw7jW6L6D66miNhe6LtHjkIU6O/XVb72bO2gdoi2IchTxDHL8uXDHNaVf SKbfY/Tn6BaBKgWlTOKRFDHsYVkHxNyQoCOeUYY8+1XA0xV6YAX6pKpbSPRb5wEU xxpgS3+0bDaeT3AMOPnZrl9BTmW4faP7pz9xuzu8DIoP3GezJVGwwj7c5Szm0RUn ZDZAtM5xpHHGAj591km4UuzrsUe0afBUpLVh+VdK8rgz4pgUqM9FrTNhQWO9/IAu 1/K1Tnc9w7wmrC1KCMZ09MeQxh0UEfI= -----END CERTIFICATE-----Generated at Wed May 13 10:02:52 2026 by rpki-client