$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dff95e31-c987-3dc4-8df4-8faa54bc45da.roa File: dff95e31-c987-3dc4-8df4-8faa54bc45da.roa (raw, json) Hash identifier: lGZFIyx950z2g3rPde4oEPY82dR7SiaLNHVGhlPbcQw= Subject key identifier: A3:DB:A6:67:3B:B2:E7:F2:64:B9:F2:32:1D:E7:88:31:3A:7C:CD:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D3B34D964EB0605BAA7518B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dff95e31-c987-3dc4-8df4-8faa54bc45da.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 104.23.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d9:64:eb:06:05:ba:a7:51:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=63eabe0e-fa37-407f-863a-d44e05ef7232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:30:f1:a2:82:ed:e2:50:56:25:14:fa:ea: 7f:52:29:c2:a3:60:b1:43:c8:64:20:04:d8:bf:fe: 50:cb:0c:5b:00:b9:52:fc:27:f3:8b:2c:55:2b:ca: 4c:f4:d3:8c:c2:28:d8:de:d2:ba:21:f1:23:07:df: f8:58:a0:cf:92:82:60:ba:8c:70:6a:b9:dd:09:f8: 4a:2d:07:cc:7b:48:f4:a0:de:be:ad:6f:d6:b0:0a: 98:13:f6:d4:53:16:14:bc:41:0a:44:52:4a:42:e6: 97:4c:6d:c4:0a:fe:f3:b6:2f:11:2d:e5:b3:73:6a: cc:54:4f:5a:45:e3:dd:4f:c3:44:ab:55:de:6a:c8: de:51:10:3a:82:b2:97:6b:62:3b:62:cc:30:b4:0f: 7b:50:e1:67:db:48:a6:80:c7:b2:11:10:f8:c5:f3: 0b:26:d4:24:c0:b2:ed:d3:c5:f6:83:45:34:fe:46: 43:18:07:c4:5d:81:71:22:ae:99:b7:44:b5:19:a9: cc:65:c6:ce:51:6c:b0:82:85:ef:16:aa:41:2b:9f: ef:56:0e:e6:84:d0:83:81:9d:70:ac:69:95:92:0a: 57:e1:28:cc:69:4f:9b:1c:07:ce:e7:fd:52:13:c7: 8a:87:8a:97:92:6c:ca:39:20:ae:e7:97:66:67:2e: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DB:A6:67:3B:B2:E7:F2:64:B9:F2:32:1D:E7:88:31:3A:7C:CD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dff95e31-c987-3dc4-8df4-8faa54bc45da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:35:7e:86:67:0e:a8:02:e4:7b:8c:7c:9d:61:4b:39:d7:c3: 1b:cd:d3:58:76:85:f5:c5:5c:69:64:34:ef:a4:b6:50:4a:47: b0:eb:7e:cd:3d:26:f4:dc:83:45:4f:0a:db:38:e2:fe:5a:85: 5b:a3:4e:2c:c2:bc:fa:5f:60:de:53:96:59:52:77:d2:35:e3: b8:30:4d:96:fd:7b:32:14:73:53:d5:93:65:5d:f8:17:59:dd: d1:11:b0:30:5e:8e:5d:ea:ab:c1:ee:80:34:95:84:02:e8:42: 13:30:ae:d1:cb:fa:57:74:2c:64:e4:94:ad:53:a7:cb:36:ed: b0:90:de:55:17:5d:cb:87:ab:27:08:eb:fb:9b:77:df:97:93: 48:ea:cd:0f:65:d1:ec:15:a6:b5:c9:34:76:6c:a4:aa:89:30: e1:cc:42:02:ce:8f:2d:4e:01:8f:94:46:5e:44:46:f9:b9:42: 7e:c7:bd:2b:a0:0f:48:f7:ef:6f:75:ba:4f:7f:8d:12:a1:05: 94:68:4c:7e:f5:53:e5:13:c2:a1:28:03:d1:88:4c:cf:b8:25: 1c:e8:c3:63:8b:7a:cb:f3:32:35:20:f4:8f:fd:1d:91:11:7e: c5:16:d7:1e:ba:34:b0:20:e9:89:13:82:9b:aa:82:e4:9a:c1: 28:b8:28:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNlk6wYFuqdRiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk NjNlYWJlMGUtZmEzNy00MDdmLTg2M2EtZDQ0ZTA1ZWY3MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryQw8aKC7eJQViUU+up/UinCo2CxQ8hkIATY v/5QywxbALlS/CfziyxVK8pM9NOMwijY3tK6IfEjB9/4WKDPkoJguoxwarndCfhK LQfMe0j0oN6+rW/WsAqYE/bUUxYUvEEKRFJKQuaXTG3ECv7zti8RLeWzc2rMVE9a RePdT8NEq1XeasjeURA6grKXa2I7YswwtA97UOFn20imgMeyERD4xfMLJtQkwLLt 08X2g0U0/kZDGAfEXYFxIq6Zt0S1GanMZcbOUWywgoXvFqpBK5/vVg7mhNCDgZ1w rGmVkgpX4SjMaU+bHAfO5/1SE8eKh4qXkmzKOSCu55dmZy7PPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPbpmc7sufyZLnyMh3niDE6fM0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGZmOTVlMzEtYzk4Ny0z ZGM0LThkZjQtOGZhYTU0YmM0NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU1foZnDqgC5HuMfJ1hSznXwxvN01h2hfXFXGlkNO+ktlBKR7Drfs09 JvTcg0VPCts44v5ahVujTizCvPpfYN5TlllSd9I147gwTZb9ezIUc1PVk2Vd+BdZ 3dERsDBejl3qq8HugDSVhALoQhMwrtHL+ld0LGTklK1Tp8s27bCQ3lUXXcuHqycI 6/ubd9+Xk0jqzQ9l0ewVprXJNHZspKqJMOHMQgLOjy1OAY+URl5ERvm5Qn7HvSug D0j37291uk9/jRKhBZRoTH71U+UTwqEoA9GITM+4JRzow2OLesvzMjUg9I/9HZER fsUW1x66NLAg6YkTgpuqguSawSi4KII= -----END CERTIFICATE-----Generated at Thu Mar 26 13:13:03 2026 by rpki-client