$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c817bc0e-8a8a-34f1-9266-2722155e1c24.roa File: c817bc0e-8a8a-34f1-9266-2722155e1c24.roa (raw, json) Hash identifier: RNceCvPhmhiVok4YzhbTkWpjhZXLNwP4yZH7LfkzJ18= Subject key identifier: 31:E3:47:18:1A:47:78:92:99:F7:58:B6:45:59:5E:D2:2E:B7:6E:6B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D9E502B64B7902DC2A62D9D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c817bc0e-8a8a-34f1-9266-2722155e1c24.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 104.23.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2b:64:b7:90:2d:c2:a6:2d:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=5ca4c3a7-3072-44b7-a5ba-10256dbc4310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:07:f1:0d:84:13:33:f8:66:7e:06:0d:4a: 0e:19:7a:3c:7e:b1:d3:0d:a2:ed:02:d7:62:18:8d: f2:7f:a0:d8:e3:45:d9:7f:7e:3f:c6:2e:7e:6c:31: 27:9d:4d:e6:f3:e9:3a:4d:3d:dd:43:01:0f:47:ee: d0:3b:fe:ff:59:d7:0e:61:f2:09:c6:59:11:10:16: cc:3b:80:ea:ae:a1:7d:59:95:59:af:2f:3e:e3:95: e0:93:1e:47:88:7c:3f:e8:12:a1:67:30:02:b2:84: e6:94:95:49:55:7d:88:4a:01:2d:33:af:f6:56:5d: 3c:ec:44:c7:55:f2:1b:ba:ca:29:0f:7d:0b:f0:86: c7:07:9f:67:ff:1b:00:ba:86:d1:d9:5b:c6:14:83: 94:50:7f:49:18:78:31:58:00:aa:2f:80:b0:36:a1: 1c:7c:3e:5f:72:52:88:8f:b6:42:c5:94:3b:78:a0: 0b:79:97:74:9a:e1:ae:0b:1b:f2:d1:50:5a:2e:93: fa:63:77:1a:41:c2:97:11:b0:3f:9f:9d:30:e8:05: da:e9:dc:60:11:ee:d9:2e:41:94:46:e9:32:89:b4: 76:8d:5e:a9:29:0f:1c:bd:fb:56:34:22:79:0a:95: ce:34:4a:5d:28:72:17:96:07:d8:cf:97:51:f4:8a: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E3:47:18:1A:47:78:92:99:F7:58:B6:45:59:5E:D2:2E:B7:6E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c817bc0e-8a8a-34f1-9266-2722155e1c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:14:45:b6:66:bb:29:b4:56:cb:9b:01:43:06:75:fe:3a:17: ff:97:b5:db:cb:08:9e:00:45:2f:6e:e5:f0:60:ea:c9:35:2c: 71:9a:62:b2:9a:22:42:0c:10:75:b8:a1:5e:50:b3:5b:3b:1b: 26:09:1c:80:29:b2:88:de:e4:f8:c2:e8:20:dc:f5:65:5f:20: 14:7c:37:dc:6b:d8:34:31:a9:a8:62:a9:d4:b4:70:93:ac:9a: 1c:59:c6:67:ea:04:bd:0b:51:d7:a0:21:6f:1c:3c:c1:3e:f1: c2:9c:5c:31:3a:91:0c:96:eb:ae:15:48:55:f7:69:97:a5:fb: eb:b2:7c:5e:2b:aa:40:2d:e8:eb:86:d9:51:1b:6e:21:0e:66: e7:1c:f6:06:75:e1:93:f7:a8:ca:02:08:fc:0a:e7:58:c3:8b: 61:96:5a:f6:b2:b9:cf:f5:92:e3:a5:81:f8:72:57:03:ff:cf: 9d:e6:8f:74:02:c5:47:73:28:26:ab:41:4a:f4:fb:41:3d:8f: 8a:d6:f2:a2:f2:05:fb:22:2e:5b:7d:e5:c8:7e:25:89:d5:bc: 39:df:32:d3:c4:a0:ff:2e:4f:1f:d1:c6:2c:b5:c9:69:62:46: c0:29:c2:94:49:9b:ae:2f:c7:c0:6f:9b:fa:5b:bb:a4:3e:c8: 47:6a:64:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCtkt5AtwqYtnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NWNhNGMzYTctMzA3Mi00NGI3LWE1YmEtMTAyNTZkYmM0MzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwIH8Q2EEzP4Zn4GDUoOGXo8frHTDaLtAtdi GI3yf6DY40XZf34/xi5+bDEnnU3m8+k6TT3dQwEPR+7QO/7/WdcOYfIJxlkREBbM O4DqrqF9WZVZry8+45Xgkx5HiHw/6BKhZzACsoTmlJVJVX2ISgEtM6/2Vl087ETH VfIbusopD30L8IbHB59n/xsAuobR2VvGFIOUUH9JGHgxWACqL4CwNqEcfD5fclKI j7ZCxZQ7eKALeZd0muGuCxvy0VBaLpP6Y3caQcKXEbA/n50w6AXa6dxgEe7ZLkGU RukyibR2jV6pKQ8cvftWNCJ5CpXONEpdKHIXlgfYz5dR9IpGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHjRxgaR3iSmfdYtkVZXtIut25rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzgxN2JjMGUtOGE4YS0z NGYxLTkyNjYtMjcyMjE1NWUxYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYURbZmuym0VsubAUMGdf46F/+XtdvLCJ4ARS9u5fBg6sk1LHGaYrKa IkIMEHW4oV5Qs1s7GyYJHIApsoje5PjC6CDc9WVfIBR8N9xr2DQxqahiqdS0cJOs mhxZxmfqBL0LUdegIW8cPME+8cKcXDE6kQyW664VSFX3aZel++uyfF4rqkAt6OuG 2VEbbiEOZucc9gZ14ZP3qMoCCPwK51jDi2GWWvayuc/1kuOlgfhyVwP/z53mj3QC xUdzKCarQUr0+0E9j4rW8qLyBfsiLlt95ch+JYnVvDnfMtPEoP8uTx/Rxiy1yWli RsApwpRJm64vx8Bvm/pbu6Q+yEdqZP4= -----END CERTIFICATE-----Generated at Wed May 13 12:36:45 2026 by rpki-client