$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa File: f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa (raw, json) Hash identifier: YU5rvRhPClE33sPXAVyDTtu1oj7YojHL+x2u4kgWtrA= Subject key identifier: 58:70:D4:6E:43:0D:EF:36:96:77:58:CE:01:96:90:6E:41:3F:B3:67 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D47C4DF50D1FA918F307B4D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 13335 IP address blocks: 104.23.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:df:50:d1:fa:91:8f:30:7b:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=1fafd89c-8efd-4bf7-9864-a4ddd1baedfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6c:84:ff:35:d6:12:5a:3c:09:0d:32:73:3b: e9:8d:f6:6a:b8:81:35:09:09:93:fc:98:8e:25:25: ac:1a:01:9d:52:15:29:fe:de:43:2d:b5:df:c0:62: e8:c4:0b:e8:77:a7:4b:7c:8d:f1:10:93:cf:9f:22: 99:0e:4f:ee:8f:8d:e9:7f:8d:fd:4d:90:f6:81:64: 35:0d:c3:35:ba:ad:ca:51:76:e3:0d:4f:1b:0d:9b: 8f:75:5d:f9:ef:97:1b:22:1c:e1:e5:86:22:f9:4f: 28:06:79:ee:8f:44:65:35:c6:39:65:41:f5:d9:b5: cc:5f:f6:e8:ef:73:c9:db:36:d5:cb:38:b5:ab:f1: 07:bc:2c:13:5e:c3:f7:07:de:45:a5:bc:50:f3:b7: 11:67:f4:02:bd:21:e6:e6:2a:e4:aa:74:b9:71:e7: 58:e4:37:ba:09:09:89:19:fd:7c:bc:6b:fc:b3:9d: df:ac:ce:3f:50:6e:36:d2:27:84:4a:1b:ec:33:78: 12:28:ac:fb:13:36:a8:8f:4a:79:dc:71:84:0e:05: 35:56:d1:2c:c4:44:83:b6:f6:83:b2:e2:96:9b:3b: 8d:f5:fb:dc:a3:cc:c7:9f:61:15:c9:f7:8e:9d:0f: 8d:5b:3d:8b:93:8f:48:83:58:4e:f1:5f:23:8d:9b: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:D4:6E:43:0D:EF:36:96:77:58:CE:01:96:90:6E:41:3F:B3:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8e57c85-9f27-3712-81ef-eec74e3e3f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:38:b4:a4:8a:de:46:99:74:44:4b:c3:90:87:e8:fe:a6:35: 52:c3:91:3c:08:fc:06:b0:24:3f:ca:46:c7:2c:b9:39:45:c3: a0:64:01:84:39:b6:d9:8e:00:eb:52:dc:ec:10:09:4f:bd:c9: f7:c1:10:d9:60:64:8a:dd:a4:dc:b8:35:d7:7d:62:30:49:05: 40:ae:8a:1b:71:1f:15:d8:79:99:67:3c:a1:e2:dc:e0:2f:60: 84:88:2f:ec:80:ab:03:06:80:16:c6:26:24:18:63:4c:ea:98: 93:4d:48:64:4d:2e:95:fc:d6:d1:71:57:2c:8b:54:a5:ae:0d: 40:bc:02:11:58:d7:fb:ac:e8:62:35:01:c8:25:52:c2:52:53: cb:02:fd:7f:f8:ac:dc:85:d8:23:68:aa:79:b2:c7:1b:80:16: 78:b2:bf:98:43:82:10:dd:42:f2:c2:91:5d:c9:21:64:de:05: 99:96:39:77:3a:da:da:c2:12:38:c3:a0:8d:bf:05:4d:93:8b: 29:1f:a9:a2:13:81:5d:80:23:50:45:be:cd:c4:08:7c:bd:be: f7:5a:a6:6c:74:05:58:74:73:a0:18:f3:ca:e8:e9:9a:e1:b0: 2f:ba:2b:ff:07:3b:fc:bc:ab:b3:f8:05:25:c3:50:9c:8c:22: 6b:48:70:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN9Q0fqRjzB7TUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MWZhZmQ4OWMtOGVmZC00YmY3LTk4NjQtYTRkZGQxYmFlZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimyE/zXWElo8CQ0yczvpjfZquIE1CQmT/JiO JSWsGgGdUhUp/t5DLbXfwGLoxAvod6dLfI3xEJPPnyKZDk/uj43pf439TZD2gWQ1 DcM1uq3KUXbjDU8bDZuPdV3575cbIhzh5YYi+U8oBnnuj0RlNcY5ZUH12bXMX/bo 73PJ2zbVyzi1q/EHvCwTXsP3B95FpbxQ87cRZ/QCvSHm5irkqnS5cedY5De6CQmJ Gf18vGv8s53frM4/UG420ieEShvsM3gSKKz7Ezaoj0p53HGEDgU1VtEsxESDtvaD suKWmzuN9fvco8zHn2EVyfeOnQ+NWz2Lk49Ig1hO8V8jjZsbtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhw1G5DDe82lndYzgGWkG5BP7NnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjhlNTdjODUtOWYyNy0z NzEyLTgxZWYtZWVjNzRlM2UzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg4tKSK3kaZdERLw5CH6P6mNVLDkTwI/AawJD/KRscsuTlFw6BkAYQ5 ttmOAOtS3OwQCU+9yffBENlgZIrdpNy4Ndd9YjBJBUCuihtxHxXYeZlnPKHi3OAv YISIL+yAqwMGgBbGJiQYY0zqmJNNSGRNLpX81tFxVyyLVKWuDUC8AhFY1/us6GI1 AcglUsJSU8sC/X/4rNyF2CNoqnmyxxuAFniyv5hDghDdQvLCkV3JIWTeBZmWOXc6 2trCEjjDoI2/BU2TiykfqaITgV2AI1BFvs3ECHy9vvdapmx0BVh0c6AY88ro6Zrh sC+6K/8HO/y8q7P4BSXDUJyMImtIcP4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:12 2026 by rpki-client