$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b908d31-e328-3244-b531-039fc0b0a57d.roa File: 9b908d31-e328-3244-b531-039fc0b0a57d.roa (raw, json) Hash identifier: PluG5FHsntrejeFIlWuqQI1yCsP9rQCNpbx67PLeEgI= Subject key identifier: 76:4B:AE:89:3F:43:D0:4A:7B:16:ED:86:35:0A:36:81:E3:9F:4E:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CD6D2068836C61109D2CA2F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b908d31-e328-3244-b531-039fc0b0a57d.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 13335 IP address blocks: 104.23.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:06:88:36:c6:11:09:d2:ca:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=c1f7de98-4d21-445a-9cf9-1e0e770a067e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:3c:dc:96:a0:b5:ab:49:b9:27:05:cf:c3: bd:31:f4:2e:dd:7d:d0:8b:8c:80:57:70:48:a0:e8: 04:a1:d8:bd:51:33:3d:3a:2c:14:ef:af:b4:5e:52: 65:3e:a6:9d:23:ab:c4:0c:25:cc:33:c1:75:c4:64: c7:79:96:05:ca:67:96:99:32:6d:80:2f:6b:cf:ad: dc:c0:7a:e7:8c:a0:ac:55:38:5b:34:fd:86:49:74: 53:99:a7:07:4b:d2:45:78:24:a4:7e:2b:38:ab:7b: a7:95:8c:82:37:63:77:b7:ea:18:52:bc:43:64:c6: 11:1f:95:07:d1:2c:96:37:70:83:f0:8c:13:ac:dd: 9b:0d:49:fc:cb:d8:38:c4:65:65:ee:38:4e:53:b7: de:e5:2c:62:d9:da:3a:46:c2:02:91:0e:15:7e:4a: d8:04:40:ef:fa:74:05:e0:8b:25:7b:88:0f:d1:4d: 79:2d:17:f8:7f:29:99:d9:5f:5f:dc:33:e3:fd:37: 4e:86:07:d0:51:d1:43:bb:5d:cc:da:45:21:02:05: 49:b4:d9:a2:93:9c:dd:f9:7f:7e:77:20:e3:21:09: 21:fd:9a:4b:8b:96:fd:3f:e7:9c:c1:02:13:11:ea: af:ac:b2:e3:84:ab:bb:02:7a:a7:8f:a6:1b:d3:3b: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4B:AE:89:3F:43:D0:4A:7B:16:ED:86:35:0A:36:81:E3:9F:4E:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b908d31-e328-3244-b531-039fc0b0a57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:48:7e:64:e5:b4:32:6f:a5:72:01:ae:1b:4b:02:bc:a6:01: 5a:2c:81:18:2e:28:0d:86:29:bf:32:9c:56:14:d6:00:be:30: e7:05:51:7b:5b:63:57:26:16:d3:e2:c8:4f:87:7a:b8:dd:f0: 2e:2d:74:46:29:dc:da:65:19:d2:fd:4d:7e:09:f4:5a:9c:a9: 3b:df:f5:1e:a2:bd:3e:27:58:82:94:d0:2f:8f:9b:5c:5e:1b: e8:c0:d2:f1:ee:7f:61:d5:96:25:df:8f:50:e4:a2:be:46:d2: e8:fd:c5:8e:76:11:8f:d3:56:77:bd:de:ea:79:fc:d2:ff:78: 87:1c:a4:f9:de:04:c7:29:45:6b:d6:20:c9:8e:7e:ed:af:25: b9:71:6a:1a:dc:10:fd:da:69:86:23:82:c9:29:19:37:85:6a: d8:c6:d2:58:ea:16:2c:d8:2f:c2:bf:eb:aa:0e:12:2f:55:30: 50:07:18:53:48:4f:87:cc:41:62:2d:80:47:38:e5:ec:d3:ab: 16:e0:4b:f7:19:d3:8a:cf:be:62:a1:91:53:ac:b0:f1:e5:d0: 66:ef:09:7e:eb:47:08:06:8f:53:45:04:63:aa:d6:d2:83:f0: e9:74:14:1f:7c:42:3b:f5:29:62:9e:f8:26:46:a9:39:e0:43: b1:f6:4c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gaINsYRCdLKL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk YzFmN2RlOTgtNGQyMS00NDVhLTljZjktMWUwZTc3MGEwNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ck83JagtatJuScFz8O9MfQu3X3Qi4yAV3BI oOgEodi9UTM9OiwU76+0XlJlPqadI6vEDCXMM8F1xGTHeZYFymeWmTJtgC9rz63c wHrnjKCsVThbNP2GSXRTmacHS9JFeCSkfis4q3unlYyCN2N3t+oYUrxDZMYRH5UH 0SyWN3CD8IwTrN2bDUn8y9g4xGVl7jhOU7fe5Sxi2do6RsICkQ4VfkrYBEDv+nQF 4Isle4gP0U15LRf4fymZ2V9f3DPj/TdOhgfQUdFDu13M2kUhAgVJtNmik5zd+X9+ dyDjIQkh/ZpLi5b9P+ecwQITEeqvrLLjhKu7Anqnj6Yb0zt8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZLrok/Q9BKexbthjUKNoHjn069MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI5MDhkMzEtZTMyOC0z MjQ0LWI1MzEtMDM5ZmMwYjBhNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxIfmTltDJvpXIBrhtLArymAVosgRguKA2GKb8ynFYU1gC+MOcFUXtb Y1cmFtPiyE+Herjd8C4tdEYp3NplGdL9TX4J9FqcqTvf9R6ivT4nWIKU0C+Pm1xe G+jA0vHuf2HVliXfj1Dkor5G0uj9xY52EY/TVne93up5/NL/eIccpPneBMcpRWvW IMmOfu2vJblxahrcEP3aaYYjgskpGTeFatjG0ljqFizYL8K/66oOEi9VMFAHGFNI T4fMQWItgEc45ezTqxbgS/cZ04rPvmKhkVOssPHl0GbvCX7rRwgGj1NFBGOq1tKD 8Ol0FB98Qjv1KWKe+CZGqTngQ7H2TDQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:50:07 2026 by rpki-client