$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eda4509-87d5-35b2-be76-6258c654160d.roa File: 8eda4509-87d5-35b2-be76-6258c654160d.roa (raw, json) Hash identifier: 2jlTRRhUsMx9bM+/aLQuD0kHvdvRL17jpC6tLQ73AF8= Subject key identifier: C6:8E:88:DF:98:5B:3B:46:7C:C6:FA:DF:1A:96:D9:48:68:70:87:84 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CFE4A14A42E957ADE34B57F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eda4509-87d5-35b2-be76-6258c654160d.roa Signing time: Thu 26 Feb 2026 17:19:13 +0000 ROA not before: Thu 26 Feb 2026 17:19:13 +0000 ROA not after: Wed 27 May 2026 16:19:13 +0000 asID: 13335 IP address blocks: 104.22.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:4a:14:a4:2e:95:7a:de:34:b5:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 26 17:19:13 2026 GMT Not After : May 27 16:19:13 2026 GMT Subject: CN=4d645937-883c-48eb-94e0-2fc972447f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:bc:30:8d:3b:b9:55:9d:17:12:bc:d8:52: 7e:d9:93:90:e3:56:42:c6:8d:91:a1:a5:86:10:11: b1:fa:c7:c2:f1:86:55:f0:84:c4:ee:21:53:8b:d0: fc:1d:0b:d2:b2:3c:77:d3:43:7e:b0:57:3b:a8:44: 96:4a:1e:83:97:85:68:05:1a:91:4e:7d:62:0b:a9: 6e:4b:a4:f6:32:27:f4:76:53:ea:66:75:d3:b9:0a: a3:c8:c6:ab:b3:01:74:36:db:0b:b0:6f:a0:70:70: ff:95:49:6e:fd:f1:38:25:01:1f:b7:a3:04:b6:0a: cc:fb:b3:29:32:8b:d3:f2:d8:4a:79:21:55:a2:9c: 5e:ef:5f:13:38:6a:66:21:d1:0d:02:db:68:98:23: 3c:37:97:41:b1:ba:8d:c0:49:9d:35:cb:4c:48:a1: 7a:45:5c:07:17:af:12:db:d1:f1:26:2f:e5:fa:d1: e5:a4:f5:0a:a2:85:4a:99:8a:30:c7:e5:49:cc:a5: c0:17:62:f5:65:4d:db:2f:b9:ae:47:f0:07:23:72: 31:eb:d5:a8:3a:8f:72:cf:a1:75:84:91:5d:07:3d: 3f:b2:b2:b4:6f:e4:07:f2:54:2f:19:68:dd:e7:57: 06:64:3a:aa:b1:42:be:bb:4a:80:e9:ef:be:32:80: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8E:88:DF:98:5B:3B:46:7C:C6:FA:DF:1A:96:D9:48:68:70:87:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eda4509-87d5-35b2-be76-6258c654160d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8c:61:20:55:3d:52:cb:5f:87:ca:60:b5:36:17:44:f2:0d: e5:a9:69:0e:68:b9:f0:5b:08:e5:13:5a:12:95:e2:e9:c1:86: eb:97:3b:82:07:60:de:db:6c:c0:0c:23:95:f2:ca:f1:9c:ef: 1d:59:77:aa:ff:b7:a1:f2:7a:ab:54:30:a5:e5:64:5d:42:fd: 79:c5:bf:71:4d:11:cf:00:28:ce:21:d4:6b:c8:0a:a1:f9:ba: 73:91:5c:2f:68:84:71:88:cf:ca:28:31:ff:75:b8:cf:f7:aa: fc:7a:fc:60:a6:9e:b5:89:e8:aa:4d:de:3c:57:27:5e:18:13: e6:82:8c:6e:3e:8e:5f:45:7e:5e:29:2d:af:85:b3:68:51:51: 72:f3:f7:06:3e:05:d3:3c:3f:a5:51:15:15:57:e7:ee:37:cf: 1d:21:99:55:bb:72:92:47:2a:41:44:30:1f:91:6c:ae:17:93: 9f:ec:22:f1:0b:8b:d5:f7:50:ec:cc:0e:23:1f:84:f9:3d:ae: 83:3f:19:fd:95:fa:6c:66:fb:ab:2d:7f:31:c1:30:c7:d7:f9: f5:1e:42:92:2b:3e:64:39:ca:58:95:9f:89:45:b2:68:34:62: 3a:8d:15:62:80:6c:3a:7a:9c:ae:ca:a6:36:43:31:1d:5c:a4: 46:be:ca:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz+ShSkLpV63jS1f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIyNjE3MTkxM1oXDTI2MDUyNzE2MTkxM1owLzEtMCsGA1UEAxMk NGQ2NDU5MzctODgzYy00OGViLTk0ZTAtMmZjOTcyNDQ3Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxO8MI07uVWdFxK82FJ+2ZOQ41ZCxo2RoaWG EBGx+sfC8YZV8ITE7iFTi9D8HQvSsjx300N+sFc7qESWSh6Dl4VoBRqRTn1iC6lu S6T2Mif0dlPqZnXTuQqjyMarswF0NtsLsG+gcHD/lUlu/fE4JQEft6MEtgrM+7Mp MovT8thKeSFVopxe718TOGpmIdENAttomCM8N5dBsbqNwEmdNctMSKF6RVwHF68S 29HxJi/l+tHlpPUKooVKmYowx+VJzKXAF2L1ZU3bL7muR/AHI3Ix69WoOo9yz6F1 hJFdBz0/srK0b+QH8lQvGWjd51cGZDqqsUK+u0qA6e++MoBPOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaOiN+YWztGfMb63xqW2UhocIeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGVkYTQ1MDktODdkNS0z NWIyLWJlNzYtNjI1OGM2NTQxNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGMYSBVPVLLX4fKYLU2F0TyDeWpaQ5oufBbCOUTWhKV4unBhuuXO4IH YN7bbMAMI5XyyvGc7x1Zd6r/t6HyeqtUMKXlZF1C/XnFv3FNEc8AKM4h1GvICqH5 unORXC9ohHGIz8ooMf91uM/3qvx6/GCmnrWJ6KpN3jxXJ14YE+aCjG4+jl9Ffl4p La+Fs2hRUXLz9wY+BdM8P6VRFRVX5+43zx0hmVW7cpJHKkFEMB+RbK4Xk5/sIvEL i9X3UOzMDiMfhPk9roM/Gf2V+mxm+6stfzHBMMfX+fUeQpIrPmQ5yliVn4lFsmg0 YjqNFWKAbDp6nK7KpjZDMR1cpEa+yt0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:07:26 2026 by rpki-client