$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e36512f-1d6f-3360-a372-c30ebfb69fc9.roa File: 9e36512f-1d6f-3360-a372-c30ebfb69fc9.roa (raw, json) Hash identifier: WSl8P1Hyij7vF2mTFxfWquuyTjMlz9eyE2i7IUffpPc= Subject key identifier: CA:92:90:A0:40:3D:08:6C:3A:DC:24:AE:E3:DE:85:78:17:28:DF:AC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E9C1548E04CBE0B0092F58FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e36512f-1d6f-3360-a372-c30ebfb69fc9.roa Signing time: Fri 24 Jul 2026 22:37:30 +0000 ROA not before: Fri 24 Jul 2026 22:37:30 +0000 ROA not after: Thu 22 Oct 2026 22:37:30 +0000 asID: 14789 IP address blocks: 104.22.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9c:15:48:e0:4c:be:0b:00:92:f5:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 24 22:37:30 2026 GMT Not After : Oct 22 22:37:30 2026 GMT Subject: CN=5844b308-b645-4638-b93e-bfe03d474110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:51:4b:03:ec:42:b5:f7:37:9f:a9:69:0c:38: 22:ec:4e:15:09:6f:c1:06:9c:cd:0c:1e:f8:6d:90: df:04:ae:0f:22:b3:00:66:ef:4d:2d:60:51:68:18: 64:4a:cb:a9:3c:65:68:a4:43:02:01:9d:a9:54:82: 52:ff:07:e7:77:24:7f:6a:36:f4:23:e7:67:c1:42: 62:f3:41:8e:88:63:85:bc:d2:72:77:fe:47:41:cd: 46:75:51:ae:a6:00:d8:b7:15:4f:c0:4e:94:fb:08: ff:79:be:a5:48:ea:d4:fa:32:d8:1a:9f:07:ed:b6: a4:49:12:b2:a2:8d:1c:1d:d1:0d:fc:02:41:59:c9: d5:9f:68:1c:68:76:d6:b2:ed:23:0a:5e:1f:a7:78: ae:4b:bb:e2:af:9d:75:91:a3:e2:74:1e:91:53:c5: 8e:a0:6f:ba:48:6d:26:0a:cd:99:15:62:38:f2:e0: 2e:1c:c5:9e:58:82:7c:e6:18:f5:00:3d:d6:22:23: 0a:a9:f5:8e:59:d9:ee:44:e0:cd:9d:a3:3b:87:bd: c6:4c:6f:39:79:cd:d3:8b:23:09:82:13:26:0e:2f: ea:2c:51:ec:19:07:9f:54:ce:8b:da:40:1f:62:97: 19:80:ca:2e:07:ed:98:60:b8:aa:e2:0a:2e:cc:4d: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:92:90:A0:40:3D:08:6C:3A:DC:24:AE:E3:DE:85:78:17:28:DF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e36512f-1d6f-3360-a372-c30ebfb69fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c0:7e:bf:fc:47:24:b3:4c:df:72:e5:a2:50:1a:92:d8:b3: 72:9d:e5:00:72:a1:af:e7:84:19:26:92:26:08:b1:62:db:75: 11:78:11:84:90:d6:ef:9d:c1:af:9f:c2:03:0b:5a:bf:d0:45: d1:dd:29:89:0f:de:bd:52:37:a5:33:b8:20:0c:52:82:5a:6b: 0a:24:cb:4d:b4:72:3c:3e:af:2a:5f:d5:25:ee:79:67:a2:8c: 71:26:a4:b5:72:e6:90:cd:32:88:8c:25:40:c8:59:d6:48:f8: 7a:bb:e7:8a:36:93:cc:65:6a:f1:47:98:ac:92:15:e4:7e:d1: a0:be:2c:ad:c7:5b:00:23:7b:68:e2:5e:d9:51:da:3c:81:ff: c8:46:40:e9:a0:82:d8:6e:1f:fa:eb:e6:d1:28:df:a1:7e:79: 78:b1:f2:04:0a:02:82:50:3d:1d:a9:2e:c6:26:dd:2a:72:a5: e2:05:ed:f7:7a:0b:b0:77:72:de:53:29:bf:d7:f3:56:7a:f9: c1:d3:2d:3b:63:9a:a5:fe:57:9b:54:1d:f0:ef:1b:85:01:8a: 36:ae:78:fe:8e:16:75:2d:38:a7:3e:58:34:7c:6e:bc:47:e2: 86:f2:03:4d:9e:3e:d5:52:33:9e:b9:fa:cc:2c:39:50:af:d4: 40:2f:28:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6cFUjgTL4LAJL1j8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyNDIyMzczMFoXDTI2MTAyMjIyMzczMFowLzEtMCsGA1UEAxMk NTg0NGIzMDgtYjY0NS00NjM4LWI5M2UtYmZlMDNkNDc0MTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1FLA+xCtfc3n6lpDDgi7E4VCW/BBpzNDB74 bZDfBK4PIrMAZu9NLWBRaBhkSsupPGVopEMCAZ2pVIJS/wfndyR/ajb0I+dnwUJi 80GOiGOFvNJyd/5HQc1GdVGupgDYtxVPwE6U+wj/eb6lSOrU+jLYGp8H7bakSRKy oo0cHdEN/AJBWcnVn2gcaHbWsu0jCl4fp3iuS7vir511kaPidB6RU8WOoG+6SG0m Cs2ZFWI48uAuHMWeWIJ85hj1AD3WIiMKqfWOWdnuRODNnaM7h73GTG85ec3TiyMJ ghMmDi/qLFHsGQefVM6L2kAfYpcZgMouB+2YYLiq4gouzE0+XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqSkKBAPQhsOtwkruPehXgXKN+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWUzNjUxMmYtMWQ2Zi0z MzYwLWEzNzItYzMwZWJmYjY5ZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPAfr/8RySzTN9y5aJQGpLYs3Kd5QByoa/nhBkmkiYIsWLbdRF4EYSQ 1u+dwa+fwgMLWr/QRdHdKYkP3r1SN6UzuCAMUoJaawoky020cjw+rypf1SXueWei jHEmpLVy5pDNMoiMJUDIWdZI+Hq754o2k8xlavFHmKySFeR+0aC+LK3HWwAje2ji XtlR2jyB/8hGQOmggthuH/rr5tEo36F+eXix8gQKAoJQPR2pLsYm3SpypeIF7fd6 C7B3ct5TKb/X81Z6+cHTLTtjmqX+V5tUHfDvG4UBijaueP6OFnUtOKc+WDR8brxH 4obyA02ePtVSM565+swsOVCv1EAvKOA= -----END CERTIFICATE-----Generated at Tue Jul 28 15:53:43 2026 by rpki-client