$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa File: 140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa (raw, json) Hash identifier: te8YAP3Fh1VBgCE6QDL381Kfjn/ArU1yxIvoh9PBxFg= Subject key identifier: A1:BA:ED:73:B6:E9:BC:18:8C:9F:07:E9:1F:86:AF:CF:FB:A8:5D:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D773A842070F190E21AA12700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 104.22.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:84:20:70:f1:90:e2:1a:a1:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=3ce93a74-d167-4b30-a894-da6f26673014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:c5:27:37:7e:c5:ac:79:19:35:3c:96:78: bd:eb:28:32:6b:dc:7b:7d:05:19:e5:ba:a3:b4:2a: 41:9b:c5:14:d7:42:3d:34:2a:24:fa:3f:f5:fc:69: 26:47:63:8c:ab:74:37:68:57:e7:16:a5:c0:63:6c: 6c:f2:fd:03:a6:8b:4a:2c:90:c5:8c:36:c5:69:6d: 50:05:d4:7f:3c:79:a3:ed:19:fa:a3:27:63:29:e2: e1:98:76:f0:fd:2a:a2:20:65:e0:33:58:33:38:40: 82:20:87:43:61:c2:0d:fb:82:07:dd:53:d6:74:1a: 97:72:38:fc:49:55:94:87:47:dd:6f:d4:44:3b:11: 6a:2f:8f:a9:ca:61:1c:91:6f:eb:c1:55:06:05:a0: 67:87:aa:a7:82:7e:32:f6:c5:0a:9a:8a:51:c8:9d: fc:38:32:2d:00:83:9a:59:56:10:33:38:cd:1d:5c: 87:d1:a3:c2:2e:31:e2:f9:7f:c4:de:b5:31:3f:fb: 78:f6:f8:1a:70:46:46:67:f8:75:13:73:82:2e:30: 89:c2:b1:af:8f:24:11:eb:61:48:4d:ec:7c:c3:cf: 1f:17:c3:f0:bc:ae:ba:e6:2c:4c:e3:7f:f1:c1:ce: 70:b7:6d:8a:bf:50:d9:90:ed:70:78:e0:e5:d4:4c: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BA:ED:73:B6:E9:BC:18:8C:9F:07:E9:1F:86:AF:CF:FB:A8:5D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/140d3e2b-64ad-3c57-8e93-e49d482e20d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6d:be:9c:e2:08:0a:c2:6c:cc:51:df:6e:8c:5f:42:93:b9: 47:68:1e:35:2f:f2:a1:be:1b:eb:4b:d1:56:7f:95:13:1a:cd: dd:02:70:d4:d1:84:50:dd:98:c3:1a:dc:13:0d:40:d0:3a:59: 48:b7:d5:51:f4:3f:7f:7d:74:47:49:4a:0f:42:73:d8:b7:41: ae:e1:ea:5b:55:41:90:79:b1:8e:63:df:54:cb:42:cd:4f:02: 62:b4:88:c5:c4:5c:f6:50:77:58:b9:15:a1:ff:b7:50:37:02: 89:ba:f8:27:25:9c:22:dd:e2:98:6e:18:86:ce:ff:38:65:44: 29:d8:1d:78:c3:7d:8d:10:1b:14:a9:54:a4:24:a2:d0:c0:7e: 50:a3:4d:9f:57:4f:c2:74:34:06:2f:07:fd:c0:be:5d:51:48: 44:5c:22:39:37:1a:aa:7a:c6:9b:99:ef:d2:62:c3:56:6d:34: b6:d6:37:a7:5e:d3:f9:ec:56:c0:7f:9d:ab:17:55:11:d9:3b: 6d:ec:a0:b4:66:7c:a1:c7:f0:93:1b:8e:bf:14:ee:47:6c:f1: a3:5d:28:d4:27:82:dc:2d:8f:5d:7e:b1:f2:db:a9:36:1a:be: 38:5a:83:66:0f:c4:27:79:70:b2:5c:46:93:6c:24:80:4e:ff: 32:25:c2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoQgcPGQ4hqhJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk M2NlOTNhNzQtZDE2Ny00YjMwLWE4OTQtZGE2ZjI2NjczMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tjFJzd+xax5GTU8lni96ygya9x7fQUZ5bqj tCpBm8UU10I9NCok+j/1/GkmR2OMq3Q3aFfnFqXAY2xs8v0DpotKLJDFjDbFaW1Q BdR/PHmj7Rn6oydjKeLhmHbw/SqiIGXgM1gzOECCIIdDYcIN+4IH3VPWdBqXcjj8 SVWUh0fdb9REOxFqL4+pymEckW/rwVUGBaBnh6qngn4y9sUKmopRyJ38ODItAIOa WVYQMzjNHVyH0aPCLjHi+X/E3rUxP/t49vgacEZGZ/h1E3OCLjCJwrGvjyQR62FI Tex8w88fF8PwvK665ixM43/xwc5wt22Kv1DZkO1weODl1EywgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG67XO26bwYjJ8H6R+Gr8/7qF3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQwZDNlMmItNjRhZC0z YzU3LThlOTMtZTQ5ZDQ4MmUyMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZtvpziCArCbMxR326MX0KTuUdoHjUv8qG+G+tL0VZ/lRMazd0CcNTR hFDdmMMa3BMNQNA6WUi31VH0P399dEdJSg9Cc9i3Qa7h6ltVQZB5sY5j31TLQs1P AmK0iMXEXPZQd1i5FaH/t1A3Aom6+CclnCLd4phuGIbO/zhlRCnYHXjDfY0QGxSp VKQkotDAflCjTZ9XT8J0NAYvB/3Avl1RSERcIjk3Gqp6xpuZ79Jiw1ZtNLbWN6de 0/nsVsB/nasXVRHZO23soLRmfKHH8JMbjr8U7kds8aNdKNQngtwtj11+sfLbqTYa vjhag2YPxCd5cLJcRpNsJIBO/zIlwi4= -----END CERTIFICATE-----Generated at Fri Apr 17 10:46:52 2026 by rpki-client