$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa File: 806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa (raw, json) Hash identifier: 2nPztT3EIxojeQJE6AOe3T/GwlsIqhYtvJfklX6pv08= Subject key identifier: AA:A5:90:E6:74:FC:88:82:8A:29:CA:D1:A3:6F:F4:84:D7:E2:73:43 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D83CAA0C409B5165716E58F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 104.23.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:a0:c4:09:b5:16:57:16:e5:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=3cfa5330-25e7-4f01-9a77-cb88c2c8c3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:a4:3a:d9:fb:27:46:b0:8c:3b:10:c7:b8: 3c:84:37:9b:eb:b6:09:ab:60:64:f6:da:bc:bf:07: f8:93:ac:26:75:ec:ab:f7:58:4b:34:51:1c:d0:7c: 39:bc:fc:64:d3:83:76:1b:df:fe:b6:6e:95:a3:47: 4d:84:22:ee:40:b0:4f:57:03:4a:28:be:3e:44:6b: 8f:83:5e:15:6d:b2:31:09:95:c1:b1:00:48:47:9c: e9:ca:59:a3:14:5a:63:2a:09:e1:97:d0:c5:22:e7: 45:ca:78:df:4f:6a:db:d6:1a:5c:36:fd:f1:98:6f: c1:42:2f:40:4b:83:ee:62:0c:58:b0:de:6e:97:29: ee:8f:64:54:36:17:43:bd:05:e1:b8:23:08:cc:12: 82:38:bc:0c:31:5d:b6:5b:7f:82:d9:37:96:a9:d4: 6e:63:9f:bf:a2:e8:10:8c:2f:9d:7e:6a:0a:94:39: 3e:8e:32:63:cc:c1:d2:8e:19:7f:2c:f1:69:7a:62: 18:0b:af:49:11:e9:b2:54:f4:94:67:25:0e:54:63: b5:94:55:19:f2:70:b5:f1:31:23:02:8f:a2:a7:bd: e2:05:35:d0:d2:bd:e4:7e:24:d4:2e:4d:ef:d0:07: d0:7f:57:ea:f5:f4:7e:76:d6:11:54:52:22:44:db: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A5:90:E6:74:FC:88:82:8A:29:CA:D1:A3:6F:F4:84:D7:E2:73:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:6d:9d:03:11:d4:a8:68:c9:19:66:89:e1:5c:41:75:83:78: ec:8f:b3:a5:63:cf:a6:0f:ca:20:a0:a0:f2:49:b1:8b:7e:3a: fa:c0:dd:3e:39:f1:30:42:40:c9:af:3e:63:ee:22:89:bb:f5: 73:9f:7f:00:c1:ed:16:c5:ba:7a:4f:ea:19:40:34:e4:bb:77: 5c:f7:66:14:93:ca:eb:96:5b:d1:aa:fc:82:04:33:7b:e2:8f: 78:ac:e9:9b:d9:8a:e6:27:cd:b4:f8:70:4e:0e:77:e2:57:34: f2:bb:a1:d9:07:39:b3:f8:46:87:5c:28:a2:64:6c:8d:3b:93: ef:01:4d:56:65:5c:be:ee:0f:45:81:04:f5:ff:85:a0:8c:33: f9:79:2b:40:e4:c0:8d:99:02:77:03:aa:05:89:f9:5c:ed:66: 5b:49:95:b8:f3:f7:ac:f1:a4:4d:05:d3:6d:94:00:e9:c6:85: 27:d8:97:af:06:5b:e1:a2:66:77:9c:22:40:86:9d:0d:c3:28: bd:0f:c3:a8:6e:20:18:74:2b:7d:51:4b:e0:ea:81:7f:58:db: c2:d2:79:f6:90:4f:4a:93:15:ae:ff:f2:72:96:89:79:59:52: 1e:c4:64:b6:cf:ca:33:14:90:48:d2:3f:4d:5b:85:b9:86:de: f2:c3:26:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyqDECbUWVxblj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk M2NmYTUzMzAtMjVlNy00ZjAxLTlhNzctY2I4OGMyYzhjM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7WkOtn7J0awjDsQx7g8hDeb67YJq2Bk9tq8 vwf4k6wmdeyr91hLNFEc0Hw5vPxk04N2G9/+tm6Vo0dNhCLuQLBPVwNKKL4+RGuP g14VbbIxCZXBsQBIR5zpylmjFFpjKgnhl9DFIudFynjfT2rb1hpcNv3xmG/BQi9A S4PuYgxYsN5ulynuj2RUNhdDvQXhuCMIzBKCOLwMMV22W3+C2TeWqdRuY5+/ougQ jC+dfmoKlDk+jjJjzMHSjhl/LPFpemIYC69JEemyVPSUZyUOVGO1lFUZ8nC18TEj Ao+ip73iBTXQ0r3kfiTULk3v0AfQf1fq9fR+dtYRVFIiRNtHqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqlkOZ0/IiCiinK0aNv9ITX4nNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODA2YTNiOWYtMjQ2ZS0z ZWIyLWE1YzctYjcxNTlmNDZkY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNtnQMR1KhoyRlmieFcQXWDeOyPs6Vjz6YPyiCgoPJJsYt+OvrA3T45 8TBCQMmvPmPuIom79XOffwDB7RbFunpP6hlANOS7d1z3ZhSTyuuWW9Gq/IIEM3vi j3is6ZvZiuYnzbT4cE4Od+JXNPK7odkHObP4RodcKKJkbI07k+8BTVZlXL7uD0WB BPX/haCMM/l5K0DkwI2ZAncDqgWJ+VztZltJlbjz96zxpE0F022UAOnGhSfYl68G W+GiZnecIkCGnQ3DKL0Pw6huIBh0K31RS+DqgX9Y28LSefaQT0qTFa7/8nKWiXlZ Uh7EZLbPyjMUkEjSP01bhbmG3vLDJtk= -----END CERTIFICATE-----Generated at Fri Apr 17 14:41:56 2026 by rpki-client