$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4ba3b4d-1ca1-360e-a996-587898e88c19.roa File: a4ba3b4d-1ca1-360e-a996-587898e88c19.roa (raw, json) Hash identifier: UWAcHuOW3ZTHAkv9Vl/8OWnACynPgsnP/9OKSKUsfyE= Subject key identifier: 3E:3A:DC:88:2B:26:60:D8:84:84:DA:F1:2A:69:6C:B1:DA:CB:67:99 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F19FCFBF6C2B9D43595411680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4ba3b4d-1ca1-360e-a996-587898e88c19.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.22.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fb:f6:c2:b9:d4:35:95:41:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=177361cc-58d9-4792-b02f-e54d962e902a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:cc:6a:54:9b:29:aa:09:02:f1:3c:20:93: ab:71:44:41:9f:41:4d:1c:32:15:08:58:6a:a4:9b: 3e:ff:66:04:7f:49:73:64:bb:b5:7b:42:f1:25:57: 51:30:9a:64:69:e3:44:2b:5a:42:fa:48:76:c9:82: bc:c6:60:2d:df:49:9a:44:41:77:ab:26:c2:73:dc: a1:8a:af:cc:91:99:49:de:4e:10:3d:9f:c0:91:79: 35:29:d5:f1:47:9b:94:d7:e8:d7:08:18:2e:2c:c2: 4e:5b:04:de:ee:de:4d:34:15:0a:35:18:c0:1b:0a: a1:af:37:7a:5e:1f:62:09:86:e8:64:c6:f0:62:35: 5c:2c:6c:1c:67:26:ab:d9:92:74:1b:e8:b2:14:fa: 96:85:1f:da:17:d4:96:9d:b2:b8:f5:bb:e1:e2:bf: 91:b8:32:80:99:7b:22:9c:fa:57:90:05:0e:17:e5: 84:fc:73:6f:51:44:14:15:f1:b7:c3:d6:bd:94:21: a8:bf:2f:71:63:ff:d2:07:c5:16:d4:27:11:ce:ce: 08:21:cf:e1:a5:7b:d7:23:4f:c5:ba:58:7b:07:e5: 00:8c:50:0f:f6:64:bf:a8:07:85:f0:1b:5b:57:1e: 80:ff:de:c1:e7:5e:f4:45:0c:de:a8:dc:c6:a4:25: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3A:DC:88:2B:26:60:D8:84:84:DA:F1:2A:69:6C:B1:DA:CB:67:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4ba3b4d-1ca1-360e-a996-587898e88c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:10:6f:8b:00:0e:e0:b9:92:35:ad:92:af:55:af:f5:31:f7: 8b:ab:0a:ca:13:cf:0c:2c:87:99:ac:f6:e9:f2:c9:23:ae:d2: fb:31:58:10:7a:9b:36:d6:47:30:0a:61:ee:ec:b6:a1:14:03: 70:04:f4:48:0c:ed:0e:81:2a:b6:c7:d4:ec:93:98:8a:7a:c4: 98:86:1e:a8:a7:0f:83:20:12:2a:c1:51:d2:81:ff:f1:b6:62: 4d:ee:a2:84:10:4d:58:af:5c:79:dd:ca:f6:bd:0f:ab:9e:91: f5:e1:b7:fe:ce:bf:00:ae:7d:c3:cd:71:49:da:dd:2e:39:a1: 38:aa:99:7f:91:79:6d:2d:e5:f8:15:30:a9:b4:fb:a0:fa:d1: b5:94:89:b9:62:69:0e:85:a3:8f:82:54:6d:41:0c:8f:55:60: bb:1a:40:7e:4a:2f:67:92:95:70:2f:2b:0e:76:35:53:9b:e2: fc:6d:00:ee:f9:9f:37:d5:0c:e7:7e:6a:b2:58:f2:60:0d:45: 8d:d6:d9:64:56:5f:87:1a:9e:91:aa:d5:a1:16:a2:7b:5e:5b: f7:62:45:80:8e:a6:e5:5e:d3:9f:64:d6:55:2b:dd:35:c2:36: d6:ee:16:30:ff:ca:a8:20:a5:f6:75:5f:54:28:9b:2c:e8:78: 67:1f:62:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/Pv2wrnUNZVBFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MTc3MzYxY2MtNThkOS00NzkyLWIwMmYtZTU0ZDk2MmU5MDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud3MalSbKaoJAvE8IJOrcURBn0FNHDIVCFhq pJs+/2YEf0lzZLu1e0LxJVdRMJpkaeNEK1pC+kh2yYK8xmAt30maREF3qybCc9yh iq/MkZlJ3k4QPZ/AkXk1KdXxR5uU1+jXCBguLMJOWwTe7t5NNBUKNRjAGwqhrzd6 Xh9iCYboZMbwYjVcLGwcZyar2ZJ0G+iyFPqWhR/aF9SWnbK49bvh4r+RuDKAmXsi nPpXkAUOF+WE/HNvUUQUFfG3w9a9lCGovy9xY//SB8UW1CcRzs4IIc/hpXvXI0/F ulh7B+UAjFAP9mS/qAeF8BtbVx6A/97B5170RQzeqNzGpCWt9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD463IgrJmDYhITa8SppbLHay2eZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTRiYTNiNGQtMWNhMS0z NjBlLWE5OTYtNTg3ODk4ZTg4YzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8Qb4sADuC5kjWtkq9Vr/Ux94urCsoTzwwsh5ms9unyySOu0vsxWBB6 mzbWRzAKYe7stqEUA3AE9EgM7Q6BKrbH1OyTmIp6xJiGHqinD4MgEirBUdKB//G2 Yk3uooQQTVivXHndyva9D6uekfXht/7OvwCufcPNcUna3S45oTiqmX+ReW0t5fgV MKm0+6D60bWUibliaQ6Fo4+CVG1BDI9VYLsaQH5KL2eSlXAvKw52NVOb4vxtAO75 nzfVDOd+arJY8mANRY3W2WRWX4canpGq1aEWonteW/diRYCOpuVe059k1lUr3TXC NtbuFjD/yqggpfZ1X1QomyzoeGcfYmc= -----END CERTIFICATE-----Generated at Tue Sep 22 22:47:48 2026 by rpki-client