$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65bf598a-165f-317f-9785-fa6740e180a7.roa File: 65bf598a-165f-317f-9785-fa6740e180a7.roa (raw, json) Hash identifier: 1RIPdHYe7EibyizYpIq4FXJCGom57EnNPwCsPP5oivM= Subject key identifier: 24:44:05:DA:FE:00:4B:7C:48:65:D9:55:C8:68:55:52:2E:D8:FD:29 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D52434040888B807F3B079480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65bf598a-165f-317f-9785-fa6740e180a7.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13335 IP address blocks: 104.23.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:40:40:88:8b:80:7f:3b:07:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=1f6573e1-ad36-46ae-aaad-9c7743592b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:83:b0:85:7a:93:9c:e1:b3:01:7b:e6:7d: 51:9a:a9:64:0a:ae:8b:e7:a8:b1:b7:09:d5:a9:94: 92:9c:e8:56:43:b8:5e:0b:a0:2c:ad:8e:a2:ef:79: c2:75:b9:5d:55:fe:f6:73:9d:18:2a:c3:87:a1:b5: 7b:1b:cb:47:22:a0:d2:2e:5f:b2:8e:3f:70:f5:84: 1c:39:97:2a:89:e3:e7:60:f6:37:dd:68:b4:56:68: 3e:c7:1f:bd:a3:45:04:90:79:f6:12:ee:c7:5a:56: a6:63:31:4c:96:f8:ce:fc:02:02:93:01:e8:93:2a: 12:b3:b7:a3:4e:32:0f:19:92:2a:34:ad:bc:7d:0b: 31:61:03:76:f1:60:b6:7b:60:5e:c9:ea:e6:71:d9: 41:16:cc:f7:3d:22:0b:53:93:b3:d6:5e:6c:7c:13: fb:4d:f5:1d:a4:c7:b9:b4:f3:49:3d:ea:39:15:71: 07:6f:0c:a1:a2:40:4f:8c:bd:5d:37:fd:1b:0c:b6: 25:2c:e0:85:24:b9:c4:75:34:53:61:0b:85:fc:c4: c6:df:3b:2c:8e:17:3c:c3:cc:02:70:ca:08:4a:39: fd:a0:cc:a7:76:04:c5:ad:f4:43:66:a2:dc:a6:06: a4:46:77:8b:1c:b5:a9:c1:df:2b:89:d0:d8:b2:a7: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:44:05:DA:FE:00:4B:7C:48:65:D9:55:C8:68:55:52:2E:D8:FD:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65bf598a-165f-317f-9785-fa6740e180a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e9:99:56:2e:5d:15:7f:e3:83:f8:96:e1:b2:46:29:ad:a0: 4c:6b:88:a6:62:72:0d:04:27:7b:27:e3:7c:10:d5:0b:d5:9a: 7b:c1:67:db:1f:94:09:80:b0:bf:2f:1c:8c:89:43:f8:97:e0: 80:d7:c1:2d:84:ee:12:8b:d6:7e:19:a1:62:04:7e:f6:b0:03: f0:01:13:08:ed:75:2c:b6:1f:7c:98:f1:0a:4b:88:72:38:ca: 64:fb:32:8a:91:f5:98:f8:86:70:8f:59:17:ab:79:33:ab:95: 63:24:b8:39:70:e7:02:c2:28:ad:76:64:f5:6a:a6:55:03:88: c6:52:64:7c:75:0c:a6:2f:87:85:b1:93:42:b6:2f:13:c3:a6: c7:29:ef:69:2a:ff:29:06:fe:07:6b:ae:ae:52:17:99:d4:e7: 49:00:b0:c1:38:22:b6:3b:38:9b:10:00:3b:64:12:72:2c:41: 71:0e:0b:7d:36:cb:7b:2e:f5:13:db:2b:5e:d1:b1:3f:54:4b: 91:7b:5f:80:8d:8e:ee:2f:ba:ab:e7:42:99:f7:11:91:b8:04: ed:5a:9d:a9:9f:6c:95:c7:25:ca:47:e4:b7:87:77:13:9e:a5: bc:05:d7:bd:ec:b7:55:c6:c7:e4:4e:3a:91:e6:77:5c:38:90: 20:52:02:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0BAiIuAfzsHlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MWY2NTczZTEtYWQzNi00NmFlLWFhYWQtOWM3NzQzNTkyYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3+DsIV6k5zhswF75n1RmqlkCq6L56ixtwnV qZSSnOhWQ7heC6AsrY6i73nCdbldVf72c50YKsOHobV7G8tHIqDSLl+yjj9w9YQc OZcqiePnYPY33Wi0Vmg+xx+9o0UEkHn2Eu7HWlamYzFMlvjO/AICkwHokyoSs7ej TjIPGZIqNK28fQsxYQN28WC2e2BeyermcdlBFsz3PSILU5Oz1l5sfBP7TfUdpMe5 tPNJPeo5FXEHbwyhokBPjL1dN/0bDLYlLOCFJLnEdTRTYQuF/MTG3zssjhc8w8wC cMoISjn9oMyndgTFrfRDZqLcpgakRneLHLWpwd8ridDYsqf3mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCREBdr+AEt8SGXZVchoVVIu2P0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjViZjU5OGEtMTY1Zi0z MTdmLTk3ODUtZmE2NzQwZTE4MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTpmVYuXRV/44P4luGyRimtoExriKZicg0EJ3sn43wQ1QvVmnvBZ9sf lAmAsL8vHIyJQ/iX4IDXwS2E7hKL1n4ZoWIEfvawA/ABEwjtdSy2H3yY8QpLiHI4 ymT7MoqR9Zj4hnCPWRereTOrlWMkuDlw5wLCKK12ZPVqplUDiMZSZHx1DKYvh4Wx k0K2LxPDpscp72kq/ykG/gdrrq5SF5nU50kAsME4IrY7OJsQADtkEnIsQXEOC302 y3su9RPbK17RsT9US5F7X4CNju4vuqvnQpn3EZG4BO1anamfbJXHJcpH5LeHdxOe pbwF173st1XGx+ROOpHmd1w4kCBSAqk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:01 2026 by rpki-client