$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c134e8-8fa4-3616-961b-f43323c5c0e4.roa File: 61c134e8-8fa4-3616-961b-f43323c5c0e4.roa (raw, json) Hash identifier: HRF71ImaMnet+na27rudFlRQ03/URqTmBBPKpqRWFPY= Subject key identifier: E1:44:50:44:EB:06:63:9C:83:AE:98:70:2D:EF:E2:76:35:B9:9C:EA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CD6D21ABD84629F7CB230F600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c134e8-8fa4-3616-961b-f43323c5c0e4.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 13335 IP address blocks: 104.23.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:1a:bd:84:62:9f:7c:b2:30:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=d3035b23-d11a-41b9-b1d2-ebbf5b286b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:23:40:e0:2a:5c:67:a0:a6:1b:db:01:be: 90:ce:09:8d:e7:1c:16:af:a3:ab:31:a9:71:c6:e1: f7:db:da:4f:fc:c7:f8:2e:1d:0f:7b:2e:1b:dc:ff: d3:0f:d2:66:91:51:3c:7c:da:9b:33:5e:66:85:81: 78:30:77:ce:27:ef:c8:99:75:51:43:73:fa:a6:71: 8c:dd:18:52:d2:a5:b2:2a:be:c2:7b:28:69:1e:7d: 58:a3:28:ba:8f:a7:c2:df:db:32:57:92:da:1e:d0: bb:c7:07:47:70:7c:03:f4:2e:ee:57:cc:42:f5:81: d3:d1:fd:2a:a3:22:e6:66:b1:f7:ee:1d:4f:3e:11: 80:63:78:5b:fe:8f:b9:92:e7:4f:6e:d9:95:41:08: a9:e1:30:af:d5:4c:36:08:49:82:f1:47:86:df:35: 6d:f3:df:17:c8:ba:18:28:44:13:6e:5a:a7:19:9a: 40:44:55:ab:db:83:cb:ea:86:28:4e:79:6e:7e:d7: 07:59:64:07:09:24:97:12:44:30:06:57:5e:76:bd: ee:4f:86:de:a6:dd:5c:14:f1:c5:0c:20:d1:c0:3b: b1:cd:49:8b:40:66:ee:fb:cf:b3:bc:78:b2:1d:7b: 78:53:c9:5f:d9:2b:30:44:e0:a7:1e:d3:14:be:8a: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:44:50:44:EB:06:63:9C:83:AE:98:70:2D:EF:E2:76:35:B9:9C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61c134e8-8fa4-3616-961b-f43323c5c0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:59:97:71:22:76:bb:7d:0f:f4:41:28:3d:56:81:4c:48:a8: 7d:15:22:9f:67:3f:4f:e3:f7:3a:b2:0d:3c:71:c0:de:b0:3d: 71:a9:90:c1:24:7d:57:27:a4:f7:38:d5:c0:81:99:2c:f2:fc: 9b:29:e1:7e:d9:b1:a7:5a:4c:1a:3d:c1:05:7b:b1:1f:89:c1: c0:0f:59:e4:bb:4d:e3:10:7f:b9:9d:77:eb:5e:65:4a:7c:e7: 79:11:ca:1b:45:3e:c5:cf:bf:4e:2d:cb:ef:56:f5:e8:4c:20: 20:a2:a3:d2:e9:e5:9f:5e:cb:5b:ba:68:13:95:f0:90:74:b6: d5:26:d7:ee:d8:a0:79:d6:f1:9a:53:a5:03:7e:9f:ff:d3:17: de:37:58:90:80:f4:a7:ad:ee:6c:32:78:c6:d3:4d:1a:b9:7a: 10:a2:21:0a:1b:80:73:4c:85:57:c9:36:51:24:71:41:6c:d9: 15:8c:9b:36:3f:88:09:14:e5:d5:fb:07:f4:2d:a6:64:9d:d5: 9e:13:fc:b6:f9:bb:a1:b8:96:03:86:64:c4:1f:d1:c1:de:49: 29:28:c2:cf:9f:ec:c0:cf:bc:a6:94:92:ec:54:ce:83:41:57: ba:ee:13:22:a3:9a:77:00:49:90:29:35:02:fe:4c:9f:43:1b: e5:45:8f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hq9hGKffLIw9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk ZDMwMzViMjMtZDExYS00MWI5LWIxZDItZWJiZjViMjg2YjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDMjQOAqXGegphvbAb6QzgmN5xwWr6OrMalx xuH329pP/Mf4Lh0Pey4b3P/TD9JmkVE8fNqbM15mhYF4MHfOJ+/ImXVRQ3P6pnGM 3RhS0qWyKr7CeyhpHn1Yoyi6j6fC39syV5LaHtC7xwdHcHwD9C7uV8xC9YHT0f0q oyLmZrH37h1PPhGAY3hb/o+5kudPbtmVQQip4TCv1Uw2CEmC8UeG3zVt898XyLoY KEQTblqnGZpARFWr24PL6oYoTnluftcHWWQHCSSXEkQwBldedr3uT4bept1cFPHF DCDRwDuxzUmLQGbu+8+zvHiyHXt4U8lf2SswROCnHtMUvor+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFEUETrBmOcg66YcC3v4nY1uZzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjFjMTM0ZTgtOGZhNC0z NjE2LTk2MWItZjQzMzIzYzVjMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZZl3Eidrt9D/RBKD1WgUxIqH0VIp9nP0/j9zqyDTxxwN6wPXGpkMEk fVcnpPc41cCBmSzy/Jsp4X7ZsadaTBo9wQV7sR+JwcAPWeS7TeMQf7mdd+teZUp8 53kRyhtFPsXPv04ty+9W9ehMICCio9Lp5Z9ey1u6aBOV8JB0ttUm1+7YoHnW8ZpT pQN+n//TF943WJCA9Ket7mwyeMbTTRq5ehCiIQobgHNMhVfJNlEkcUFs2RWMmzY/ iAkU5dX7B/QtpmSd1Z4T/Lb5u6G4lgOGZMQf0cHeSSkows+f7MDPvKaUkuxUzoNB V7ruEyKjmncASZApNQL+TJ9DG+VFj84= -----END CERTIFICATE-----Generated at Mon Mar 2 20:19:16 2026 by rpki-client