$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71bf82a3-d0d0-326a-8e0f-a58467690501.roa File: 71bf82a3-d0d0-326a-8e0f-a58467690501.roa (raw, json) Hash identifier: udG5tlxL7ZtW+p52wvO0dHQ08fHbCZJTt12zvKLzx6Q= Subject key identifier: 33:7F:88:4C:EA:8D:E4:00:6B:BC:AA:7F:66:E4:9D:F8:DA:C4:D2:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A503DD217E897ECE3D1C40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71bf82a3-d0d0-326a-8e0f-a58467690501.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.22.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:03:dd:21:7e:89:7e:ce:3d:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=744bb8b7-3382-4586-95d9-e421c29c1f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:0c:89:c8:11:34:b2:2a:4a:2a:dc:97:f9: df:aa:76:24:88:23:87:6e:19:8c:a3:a6:22:12:9f: 22:ea:e7:7d:1d:72:31:e7:77:56:82:e7:5d:db:49: 35:ae:d0:8c:81:45:a2:ef:61:12:9c:ef:ac:89:ca: 52:92:b8:cc:17:53:35:c6:85:d0:4e:b0:e3:52:0a: ad:01:b0:2c:3e:a9:d6:fe:23:88:94:bf:8f:ee:24: c6:ac:6c:24:31:4c:dd:16:95:77:0e:26:94:b1:af: 96:30:3c:af:bc:e6:d1:29:1f:81:b6:5c:dc:50:d0: 0a:ef:66:7f:a8:71:54:eb:81:8a:07:81:ce:db:88: aa:f8:85:e4:d9:62:5c:9e:92:e7:39:27:cf:ec:a3: 41:9f:ad:26:bf:df:56:94:9e:28:88:c8:95:70:6b: 34:bb:1d:70:08:9b:83:55:e6:b1:a1:10:68:c1:f3: f1:03:26:c5:1a:51:c4:38:bc:6d:00:60:1a:fa:81: 1a:1a:72:7a:be:2f:a4:ff:53:e2:c7:7b:f8:0b:b2: 99:62:8e:db:0d:9d:62:1a:e9:55:9f:34:c9:15:93: 47:ab:b5:06:ea:28:f7:cb:ec:a1:0b:ed:b3:5c:bc: 67:80:d7:5b:76:30:8d:7b:a9:f0:da:3b:19:f3:47: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:88:4C:EA:8D:E4:00:6B:BC:AA:7F:66:E4:9D:F8:DA:C4:D2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71bf82a3-d0d0-326a-8e0f-a58467690501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:04:67:34:eb:c0:8d:8d:c8:df:b8:e0:0d:74:32:89:34:f1: a0:a9:19:04:de:99:ce:88:15:f3:62:2a:29:be:b4:40:9f:65: b1:44:94:6d:e5:c3:6c:eb:74:c1:05:a3:4b:36:34:fd:4c:04: 2c:1c:4e:16:27:12:b7:9d:d1:a7:e4:7e:5f:42:52:64:a7:a6: 6f:68:47:35:aa:8a:86:7b:12:43:9a:a6:70:f4:d5:ba:67:56: f1:6c:3e:ae:05:20:c0:5f:b8:73:b7:d8:2a:53:db:fb:fa:b5: c0:7e:47:59:cd:02:06:97:44:df:e6:41:3f:3a:89:aa:77:92: 59:21:fd:cc:a6:a1:b7:5f:cc:ee:b6:a1:4a:bc:14:58:b9:61: 19:d8:77:4c:e6:bf:f5:00:9f:47:be:b1:d3:23:94:f1:c9:36: 4d:30:ed:77:ef:1a:52:2e:ee:e3:f6:e6:1a:18:76:75:e0:96: 4e:33:54:94:d3:6c:e0:35:44:18:50:03:dc:3c:01:06:1d:bb: 88:38:9a:79:eb:92:d2:43:77:0d:9f:93:a3:b9:24:87:92:c1: bc:c9:14:91:f7:ed:c3:b6:eb:cd:bb:c6:b3:b7:cb:74:99:00: 74:21:c1:d2:16:fa:96:85:7c:e0:7e:36:39:97:82:d6:8d:b5: 8f:c5:56:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQPdIX6Jfs49HEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NzQ0YmI4YjctMzM4Mi00NTg2LTk1ZDktZTQyMWMyOWMxZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk30MicgRNLIqSircl/nfqnYkiCOHbhmMo6Yi Ep8i6ud9HXIx53dWgudd20k1rtCMgUWi72ESnO+sicpSkrjMF1M1xoXQTrDjUgqt AbAsPqnW/iOIlL+P7iTGrGwkMUzdFpV3DiaUsa+WMDyvvObRKR+BtlzcUNAK72Z/ qHFU64GKB4HO24iq+IXk2WJcnpLnOSfP7KNBn60mv99WlJ4oiMiVcGs0ux1wCJuD VeaxoRBowfPxAybFGlHEOLxtAGAa+oEaGnJ6vi+k/1Pix3v4C7KZYo7bDZ1iGulV nzTJFZNHq7UG6ij3y+yhC+2zXLxngNdbdjCNe6nw2jsZ80dAkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN/iEzqjeQAa7yqf2bknfjaxNIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzFiZjgyYTMtZDBkMC0z MjZhLThlMGYtYTU4NDY3NjkwNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEEZzTrwI2NyN+44A10Mok08aCpGQTemc6IFfNiKim+tECfZbFElG3l w2zrdMEFo0s2NP1MBCwcThYnEred0afkfl9CUmSnpm9oRzWqioZ7EkOapnD01bpn VvFsPq4FIMBfuHO32CpT2/v6tcB+R1nNAgaXRN/mQT86iap3klkh/cymobdfzO62 oUq8FFi5YRnYd0zmv/UAn0e+sdMjlPHJNk0w7XfvGlIu7uP25hoYdnXglk4zVJTT bOA1RBhQA9w8AQYdu4g4mnnrktJDdw2fk6O5JIeSwbzJFJH37cO26827xrO3y3SZ AHQhwdIW+paFfOB+NjmXgtaNtY/FVlc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:46 2026 by rpki-client