$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e99f295-6a82-3b08-9d71-c172f4dc7e56.roa File: 0e99f295-6a82-3b08-9d71-c172f4dc7e56.roa (raw, json) Hash identifier: jUZRJMiCCs4Uz3/16vbKqVukdp4Mvgce2pdHf2BD/a4= Subject key identifier: B6:4E:C8:37:84:9B:9B:A5:3D:D4:37:E2:F9:1A:5C:4D:B0:0B:D3:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F3B7D2554409D143E0FF96400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e99f295-6a82-3b08-9d71-c172f4dc7e56.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 14789 IP address blocks: 104.22.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:25:54:40:9d:14:3e:0f:f9:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=73a87c31-d8de-4b5c-bb10-3fd9ca1a35b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:68:6e:2c:de:b1:07:b9:10:dc:b9:8c:06: 2b:ea:50:db:01:0f:ba:28:c8:ba:39:df:d8:4a:8e: 2c:a7:b4:61:8e:6c:79:ea:b0:26:de:96:96:58:69: 00:d7:47:7e:ce:e3:6e:b4:6c:0a:fe:41:ed:e3:e7: 3c:43:48:a1:1c:33:a7:76:2a:0d:79:ad:74:da:2f: 44:cf:02:b2:0f:3c:b7:66:76:13:ea:1c:8e:46:c4: 36:4d:22:e4:76:6b:ee:e2:1b:c9:8f:61:be:80:b4: b4:71:bd:ba:73:82:4f:dc:b1:f2:71:fa:b0:17:c2: 13:bf:cb:d4:0d:90:40:15:b0:bc:fa:80:8c:8f:e8: 67:a6:7b:39:7c:4b:24:55:01:27:9f:8a:b4:63:e8: 60:94:23:ab:dc:1c:4d:cc:25:54:60:91:fd:96:e3: 98:20:50:5d:53:c9:6d:1f:db:91:23:4a:8a:c1:bc: 64:b7:05:43:03:c2:c4:92:ad:18:4d:ee:d1:d4:53: cd:94:15:95:68:40:f0:7a:f7:be:47:a0:ec:13:8d: b7:3d:3c:94:27:9e:bb:c2:ed:ec:fb:27:f6:55:63: c0:4f:84:c3:8d:d3:b9:fe:a1:d7:59:87:f3:15:6f: fc:26:7a:c5:99:f3:7d:ab:0b:6b:50:d8:17:89:39: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4E:C8:37:84:9B:9B:A5:3D:D4:37:E2:F9:1A:5C:4D:B0:0B:D3:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e99f295-6a82-3b08-9d71-c172f4dc7e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:39:aa:f7:ff:50:07:ea:91:de:a2:4f:4a:8b:f3:1d:5f:85: 1d:07:d1:16:85:24:f7:cc:87:19:37:79:1b:3e:e3:24:99:ff: ed:b1:58:33:6d:86:ed:65:72:72:62:0d:f2:fc:14:d8:df:6c: f7:db:7c:2f:50:59:f1:e9:94:b4:67:29:9b:04:07:53:8f:ae: 88:ca:cb:4b:fb:af:e2:a0:30:65:eb:0d:34:cc:26:06:03:b0: 2e:d5:85:14:c7:d9:3a:28:35:81:dd:2b:3c:5b:4a:f4:e9:32: 89:98:09:5e:be:78:50:38:ad:38:52:f5:55:39:54:27:96:f5: 2c:36:12:bd:51:76:87:d3:72:7a:c3:7f:0d:27:04:14:db:53: 66:fe:e7:7e:17:49:52:dc:27:f0:a2:e9:9e:4e:e4:af:01:8c: 16:2d:0f:30:f3:29:6b:42:73:65:3b:78:3f:67:2d:3c:13:c9: bf:04:6d:f7:64:64:9f:f0:26:d7:dd:09:ee:34:65:bb:24:fd: a5:1b:91:cf:d9:5a:a4:5d:b7:c2:54:e2:66:ab:41:81:f3:27: 8e:dd:39:2a:a6:5c:3d:54:3a:8f:6b:48:e6:95:1f:44:e2:b1: 0f:8d:0c:b1:98:94:a8:1d:6a:1d:07:97:c7:d7:9a:6e:0e:bf: b8:4e:3d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSVUQJ0UPg/5ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk NzNhODdjMzEtZDhkZS00YjVjLWJiMTAtM2ZkOWNhMWEzNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki9obizesQe5ENy5jAYr6lDbAQ+6KMi6Od/Y So4sp7Rhjmx56rAm3paWWGkA10d+zuNutGwK/kHt4+c8Q0ihHDOndioNea102i9E zwKyDzy3ZnYT6hyORsQ2TSLkdmvu4hvJj2G+gLS0cb26c4JP3LHycfqwF8ITv8vU DZBAFbC8+oCMj+hnpns5fEskVQEnn4q0Y+hglCOr3BxNzCVUYJH9luOYIFBdU8lt H9uRI0qKwbxktwVDA8LEkq0YTe7R1FPNlBWVaEDweve+R6DsE423PTyUJ567wu3s +yf2VWPAT4TDjdO5/qHXWYfzFW/8JnrFmfN9qwtrUNgXiTnAdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZOyDeEm5ulPdQ34vkaXE2wC9OJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGU5OWYyOTUtNmE4Mi0z YjA4LTlkNzEtYzE3MmY0ZGM3ZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI5qvf/UAfqkd6iT0qL8x1fhR0H0RaFJPfMhxk3eRs+4ySZ/+2xWDNt hu1lcnJiDfL8FNjfbPfbfC9QWfHplLRnKZsEB1OProjKy0v7r+KgMGXrDTTMJgYD sC7VhRTH2TooNYHdKzxbSvTpMomYCV6+eFA4rThS9VU5VCeW9Sw2Er1RdofTcnrD fw0nBBTbU2b+534XSVLcJ/Ci6Z5O5K8BjBYtDzDzKWtCc2U7eD9nLTwTyb8Ebfdk ZJ/wJtfdCe40Zbsk/aUbkc/ZWqRdt8JU4marQYHzJ47dOSqmXD1UOo9rSOaVH0Ti sQ+NDLGYlKgdah0Hl8fXmm4Ov7hOPXA= -----END CERTIFICATE-----Generated at Sun Sep 20 13:55:56 2026 by rpki-client