$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa File: a153db53-9524-3f9c-af42-4f159128d889.roa (raw, json) Hash identifier: So/uoGv9sJT9S0nD6FjGGLX1b7hmfce7WprsCLK5VO0= Subject key identifier: 42:D9:A8:D9:45:B4:64:66:9F:17:5C:55:A7:B8:9F:42:66:42:28:F4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA79A07EC54E46B03B530CA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 104.23.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:07:ec:54:e4:6b:03:b5:30:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7562ca8e-7f47-4702-9f8a-981fcab7f0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:26:84:18:9a:50:7f:75:49:ad:17:36:bf:7d: 39:d0:94:d3:70:4a:e9:57:01:e2:82:d7:7d:a5:a8: fa:19:94:1c:13:f3:ac:0c:b8:d3:26:c0:f4:50:b0: 5f:37:45:1d:0a:1a:fd:e0:10:98:8e:c0:e5:96:57: 3e:34:88:ba:09:39:a7:67:71:69:bd:cd:d9:a6:77: f0:76:38:12:02:d1:99:0b:8f:18:ab:1e:20:52:b9: f3:ad:36:6a:9b:57:8a:bb:71:7b:f6:16:ca:f8:6b: 25:c1:e9:62:5c:8e:ea:93:1b:56:51:30:7e:65:eb: 90:28:13:ed:02:df:fa:aa:2d:27:e8:b6:d1:09:c0: 01:22:5a:a4:69:f9:92:27:6b:67:f6:a9:cd:c0:ff: 20:f2:73:41:c1:d1:e4:a9:2a:1c:f8:8f:4e:fe:36: ea:83:f1:0e:a6:57:5b:88:87:ee:24:13:30:5c:12: 48:ed:23:44:d5:2d:0c:19:a1:6d:da:79:58:2d:47: 97:f0:a7:fe:65:ef:67:5e:47:61:2b:a9:11:5b:f4: b9:f0:44:54:1e:3e:6e:f3:fc:a5:90:6f:1f:73:ab: 79:67:aa:94:18:00:e8:e2:68:53:59:ea:24:0d:07: da:0d:e8:e1:3c:f2:1f:42:7f:d3:d4:71:ac:da:aa: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:A8:D9:45:B4:64:66:9F:17:5C:55:A7:B8:9F:42:66:42:28:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ae:b3:bd:93:d0:97:38:95:ad:88:7c:b7:f8:8a:87:f3:e0: 6e:68:25:6d:fc:93:4d:55:8e:97:da:bb:3d:bd:ea:c4:72:5c: 00:50:d8:7c:3e:18:10:b7:dd:b4:31:a9:ec:7f:72:0d:7f:7b: 4e:b0:be:6c:b0:a0:1a:f9:7b:81:f7:54:e3:a9:82:06:f6:cd: aa:b2:52:4d:b4:bb:c4:dc:a1:5d:a9:17:90:2b:65:0e:86:f1: eb:3d:fb:7e:fd:43:54:ac:18:6e:87:6b:45:af:73:84:cb:6a: d3:1d:6e:9d:48:a6:91:83:b9:a0:f1:5d:e9:e5:72:8b:dc:fd: 69:ab:2b:94:e9:c7:9e:2a:53:e6:0d:65:9c:a1:cf:12:5b:b5: 5a:35:6f:2a:77:f4:c5:28:84:30:76:84:10:fe:f6:b6:66:b0: 7d:7b:96:bf:b5:a0:a2:33:33:7a:ff:56:be:4d:ce:74:90:6d: 92:57:67:ba:a6:08:6a:fc:70:3f:80:fa:b3:f8:de:ba:e3:72: db:72:db:76:89:1d:db:54:a5:a0:28:08:0a:4b:b4:dc:3c:a4: ab:30:10:b9:a7:8e:ba:96:54:15:59:a6:3f:37:60:d3:5e:d6: 82:4c:45:89:b2:ff:81:d7:7b:5b:88:64:09:55:27:f4:57:3c: b9:ec:55:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmgfsVORrA7UwyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzU2MmNhOGUtN2Y0Ny00NzAyLTlmOGEtOTgxZmNhYjdmMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CaEGJpQf3VJrRc2v3050JTTcErpVwHigtd9 paj6GZQcE/OsDLjTJsD0ULBfN0UdChr94BCYjsDlllc+NIi6CTmnZ3Fpvc3Zpnfw djgSAtGZC48Yqx4gUrnzrTZqm1eKu3F79hbK+GslweliXI7qkxtWUTB+ZeuQKBPt At/6qi0n6LbRCcABIlqkafmSJ2tn9qnNwP8g8nNBwdHkqSoc+I9O/jbqg/EOpldb iIfuJBMwXBJI7SNE1S0MGaFt2nlYLUeX8Kf+Ze9nXkdhK6kRW/S58ERUHj5u8/yl kG8fc6t5Z6qUGADo4mhTWeokDQfaDejhPPIfQn/T1HGs2qre3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELZqNlFtGRmnxdcVae4n0JmQij0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE1M2RiNTMtOTUyNC0z ZjljLWFmNDItNGYxNTkxMjhkODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuus72T0Jc4la2IfLf4iofz4G5oJW38k01Vjpfauz296sRyXABQ2Hw+ GBC33bQxqex/cg1/e06wvmywoBr5e4H3VOOpggb2zaqyUk20u8TcoV2pF5ArZQ6G 8es9+379Q1SsGG6Ha0Wvc4TLatMdbp1IppGDuaDxXenlcovc/WmrK5Tpx54qU+YN ZZyhzxJbtVo1byp39MUohDB2hBD+9rZmsH17lr+1oKIzM3r/Vr5NznSQbZJXZ7qm CGr8cD+A+rP43rrjctty23aJHdtUpaAoCApLtNw8pKswELmnjrqWVBVZpj83YNNe 1oJMRYmy/4HXe1uIZAlVJ/RXPLnsVWg= -----END CERTIFICATE-----Generated at Wed Jul 29 03:43:46 2026 by rpki-client