$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa File: d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa (raw, json) Hash identifier: /3fMJVRVp3JVH7no7cs4Et4On2kXHIh+Pg7lovPWuNA= Subject key identifier: 39:46:E8:13:4E:33:7C:FA:D9:D2:02:2F:3C:9C:6B:8F:62:3F:01:31 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E7634F4F75E6C6E66D42A14D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 13335 IP address blocks: 104.23.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f4:f7:5e:6c:6e:66:d4:2a:14:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=3771f881-3d83-40c6-8476-96d72bf7a017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:6f:c8:3c:03:92:8d:97:d9:26:d7:b6:3e: 25:60:c0:6b:7e:02:bd:52:cc:46:fd:48:15:90:b9: 05:7a:d6:b0:35:11:a4:7a:81:d6:69:f4:5b:fb:5c: f7:2a:c3:2b:d6:08:68:8d:30:03:d2:86:52:40:9b: 9e:3c:4c:e5:1a:8b:b8:73:c9:ac:35:d9:fa:f4:37: 05:10:ba:7d:cf:7f:cf:4b:d4:50:19:9c:3d:1d:46: 34:e7:86:60:80:e0:01:21:f1:4b:b8:28:08:c4:84: 90:01:92:a2:00:84:0c:13:5e:a1:99:e9:2e:b1:7a: 2c:04:8d:0c:da:72:06:10:ad:2c:03:3c:a2:48:6b: 66:c6:01:4b:8d:eb:a9:0c:cc:2a:c9:2f:c7:f1:9c: 2f:aa:fb:36:be:76:ac:c9:7b:9f:0b:7f:0c:58:06: 22:64:3e:3d:e0:10:3f:5b:ad:30:a6:f0:86:aa:39: 75:7d:a7:4d:6e:23:94:cf:46:80:00:72:cf:b3:7b: de:e6:2b:7f:61:ab:3a:48:ff:86:6d:51:2f:99:1e: d3:c6:0c:02:0b:a3:c6:11:ea:5c:a2:14:c0:b9:7d: be:35:f4:74:e1:de:8f:35:d9:db:a3:71:f9:c3:bd: 86:4b:cf:ca:8d:20:19:27:b3:90:23:d6:83:8a:8b: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:46:E8:13:4E:33:7C:FA:D9:D2:02:2F:3C:9C:6B:8F:62:3F:01:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4b573b9-4b7e-3bc1-aa49-3b266da23942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:be:4c:86:c1:17:dd:5b:1c:17:26:50:80:90:4a:31:f2:b3: d5:23:23:aa:f5:76:85:af:fe:54:e8:bb:1e:bb:fb:88:08:1f: 29:99:c3:d8:dd:4d:d0:a2:6d:17:51:b3:66:a3:21:a9:d9:93: 85:9a:7b:45:2a:88:fb:2f:c3:63:dd:f6:6a:22:71:fe:04:6a: 67:5a:f9:37:d2:4f:25:ab:75:99:d7:b6:1d:32:68:a7:f5:31: 8b:6d:df:b8:ed:b2:cc:c4:e7:4f:86:b5:a7:62:07:ea:10:3a: fd:3e:77:30:c6:83:c1:1e:1c:32:9e:5b:60:91:ce:e9:94:0c: fb:d6:54:5b:62:e6:32:fa:3d:90:25:91:0b:61:65:43:d3:2a: 77:4c:97:ba:e8:a6:e3:a1:b0:13:95:91:93:28:fe:08:3a:20: d7:8b:5f:91:21:9e:b8:29:aa:df:61:26:c9:50:89:14:66:3b: e4:be:83:69:30:01:13:e9:42:31:a5:80:3e:00:e2:a6:73:fb: 3f:e1:aa:cd:9e:90:3f:9c:cb:4f:30:ed:e9:2c:d1:54:d2:46: c7:e5:de:19:93:73:ed:f3:c1:98:e5:e8:0b:d6:c8:da:92:36: d5:95:1f:94:0a:b0:2f:ad:3b:f8:f1:7f:5f:2d:55:03:66:bc: a7:2e:29:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPT3XmxuZtQqFNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk Mzc3MWY4ODEtM2Q4My00MGM2LTg0NzYtOTZkNzJiZjdhMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yZvyDwDko2X2SbXtj4lYMBrfgK9UsxG/UgV kLkFetawNRGkeoHWafRb+1z3KsMr1ghojTAD0oZSQJuePEzlGou4c8msNdn69DcF ELp9z3/PS9RQGZw9HUY054ZggOABIfFLuCgIxISQAZKiAIQME16hmekusXosBI0M 2nIGEK0sAzyiSGtmxgFLjeupDMwqyS/H8Zwvqvs2vnasyXufC38MWAYiZD494BA/ W60wpvCGqjl1fadNbiOUz0aAAHLPs3ve5it/Yas6SP+GbVEvmR7TxgwCC6PGEepc ohTAuX2+NfR04d6PNdnbo3H5w72GS8/KjSAZJ7OQI9aDiotGqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlG6BNOM3z62dICLzyca49iPwExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDRiNTczYjktNGI3ZS0z YmMxLWFhNDktM2IyNjZkYTIzOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy+TIbBF91bHBcmUICQSjHys9UjI6r1doWv/lToux67+4gIHymZw9jd TdCibRdRs2ajIanZk4Wae0UqiPsvw2Pd9moicf4Eamda+TfSTyWrdZnXth0yaKf1 MYtt37jtsszE50+GtadiB+oQOv0+dzDGg8EeHDKeW2CRzumUDPvWVFti5jL6PZAl kQthZUPTKndMl7ropuOhsBOVkZMo/gg6INeLX5Ehnrgpqt9hJslQiRRmO+S+g2kw ARPpQjGlgD4A4qZz+z/hqs2ekD+cy08w7eks0VTSRsfl3hmTc+3zwZjl6AvWyNqS NtWVH5QKsC+tO/jxf18tVQNmvKcuKSk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:29:37 2026 by rpki-client