$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/413a9778-b487-30f9-b589-6a36933bd069.roa File: 413a9778-b487-30f9-b589-6a36933bd069.roa (raw, json) Hash identifier: yX2UmaJ42PfKE03k6EV/9XoCp9SW4VQnoRl1bwePMZ0= Subject key identifier: 4D:D7:A8:D6:39:CF:02:D0:21:5D:7A:B5:DD:08:53:6B:F1:01:21:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4972EDF10D35512005611300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/413a9778-b487-30f9-b589-6a36933bd069.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.23.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ed:f1:0d:35:51:20:05:61:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8953127b-f25d-4668-8a8a-a97fc4c75b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:ae:51:c1:6d:c9:4c:c7:b5:12:85:fd:22: dd:be:84:13:e4:f0:b4:92:0a:4e:c7:b9:e7:52:7e: cf:44:c7:eb:58:54:02:46:b9:7b:b5:9d:09:2d:7d: 32:f3:9c:0e:e7:a3:a8:0e:95:44:9f:1e:07:7e:9f: e9:ce:09:61:58:5f:9d:b1:43:6a:db:f6:f2:0a:dd: 19:8b:c8:f8:d8:ae:16:de:97:85:c8:d0:9d:21:38: 8a:2f:09:5d:f0:f5:18:b5:e5:41:5e:cf:59:c3:f1: e7:51:f4:f3:73:9f:25:4e:3b:dd:e0:ab:03:0c:b5: dc:c6:17:c3:9c:7b:b6:db:01:71:7b:bb:4d:8c:3e: 31:61:58:ac:89:35:46:ce:d3:7c:61:95:65:b4:4a: 94:aa:d9:a8:cf:35:dc:6e:0b:5d:ee:20:68:79:83: be:4d:8f:96:54:0e:29:6e:49:5b:61:99:24:76:93: 22:70:40:75:49:68:f0:da:9d:39:b2:26:56:bc:d0: 41:af:64:fb:15:ed:49:05:08:92:18:42:75:6a:5b: a8:5e:98:1f:93:0a:bf:0a:2a:95:e0:85:ef:cc:3f: a8:54:60:66:6c:9b:ff:56:7f:6f:e9:50:76:3b:cd: 04:29:02:33:28:f0:17:c3:cc:cb:4b:c1:f8:73:81: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D7:A8:D6:39:CF:02:D0:21:5D:7A:B5:DD:08:53:6B:F1:01:21:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/413a9778-b487-30f9-b589-6a36933bd069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:05:57:ed:08:bd:40:cc:3c:87:a8:f7:78:4d:83:6b:39:42: d2:08:0e:96:5e:12:ac:56:b9:dc:3d:cc:ee:38:b3:30:b2:7a: 56:0a:5b:9c:6e:1f:fd:4c:f9:93:02:77:3b:86:d3:24:f1:06: 93:2f:c5:ec:30:18:41:a4:fd:b3:1e:6e:aa:c2:a6:7b:c4:d9: 1c:f6:aa:e4:10:cd:51:3b:fa:e3:5e:62:7c:8e:08:f2:fb:ec: ad:bc:d0:bb:b6:35:cb:5d:9f:fa:45:2f:9f:da:c0:b0:66:29: d1:c7:87:0b:da:e6:f8:1b:d4:96:65:9e:e2:84:84:f2:26:38: 73:10:3b:6f:f0:8a:e8:49:3d:b5:b7:87:4d:2e:a7:58:38:7c: ce:94:c5:76:2b:64:f1:16:9a:bc:a6:db:35:ae:fa:bd:c2:87: 8a:ed:31:16:29:22:2b:f0:d6:b0:8b:bf:2d:c1:db:bc:66:17: b2:5e:cf:5e:00:f5:45:41:c8:ce:b1:25:dd:56:e2:c1:2c:5c: 18:16:63:c9:9a:76:0f:97:65:fc:64:1a:d5:99:42:37:97:bf: 7d:15:e4:37:c7:03:6f:72:46:16:9d:6c:56:f1:32:fe:0a:cc: 43:14:b2:88:43:c9:c3:ba:6e:05:68:12:35:89:45:c8:89:33: a8:6f:ea:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcu3xDTVRIAVhEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODk1MzEyN2ItZjI1ZC00NjY4LThhOGEtYTk3ZmM0Yzc1YjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQmuUcFtyUzHtRKF/SLdvoQT5PC0kgpOx7nn Un7PRMfrWFQCRrl7tZ0JLX0y85wO56OoDpVEnx4Hfp/pzglhWF+dsUNq2/byCt0Z i8j42K4W3peFyNCdITiKLwld8PUYteVBXs9Zw/HnUfTzc58lTjvd4KsDDLXcxhfD nHu22wFxe7tNjD4xYVisiTVGztN8YZVltEqUqtmozzXcbgtd7iBoeYO+TY+WVA4p bklbYZkkdpMicEB1SWjw2p05siZWvNBBr2T7Fe1JBQiSGEJ1aluoXpgfkwq/CiqV 4IXvzD+oVGBmbJv/Vn9v6VB2O80EKQIzKPAXw8zLS8H4c4HANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3XqNY5zwLQIV16td0IU2vxASGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDEzYTk3NzgtYjQ4Ny0z MGY5LWI1ODktNmEzNjkzM2JkMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBelMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQFV+0IvUDMPIeo93hNg2s5QtIIDpZeEqxWudw9zO44szCyelYKW5xu H/1M+ZMCdzuG0yTxBpMvxewwGEGk/bMebqrCpnvE2Rz2quQQzVE7+uNeYnyOCPL7 7K280Lu2Nctdn/pFL5/awLBmKdHHhwva5vgb1JZlnuKEhPImOHMQO2/wiuhJPbW3 h00up1g4fM6UxXYrZPEWmrym2zWu+r3Ch4rtMRYpIivw1rCLvy3B27xmF7Jez14A 9UVByM6xJd1W4sEsXBgWY8madg+XZfxkGtWZQjeXv30V5DfHA29yRhadbFbxMv4K zEMUsohDycO6bgVoEjWJRciJM6hv6vA= -----END CERTIFICATE-----Generated at Sun Oct 11 09:22:28 2026 by rpki-client