$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8ec80bf-7644-3386-bfd2-ccd683719cd7.roa File: a8ec80bf-7644-3386-bfd2-ccd683719cd7.roa (raw, json) Hash identifier: yKbBRootiAKuIt9vxGwTpyU+tGhmBgXf7GUT+MU8Xgs= Subject key identifier: C8:FE:54:94:7A:B6:AD:1F:5E:60:D2:DF:1C:4D:47:44:E5:BE:04:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CBF172B03C16598108B259460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8ec80bf-7644-3386-bfd2-ccd683719cd7.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.23.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:2b:03:c1:65:98:10:8b:25:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=c2953ee0-b5df-44df-8a7a-46d6a09eb931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:c3:b3:89:46:15:91:a3:41:32:c3:72:9c: 94:c7:25:01:22:23:4c:13:86:ff:a3:47:0e:9c:32: 45:4b:b7:cf:65:63:e6:de:74:99:0e:a9:ca:fc:0c: a4:f7:86:de:56:17:9c:b1:11:70:98:ca:e0:0d:43: 2b:27:b5:48:e6:07:03:f1:40:68:2c:f8:cb:39:36: c1:36:43:81:73:bf:f4:b7:f5:99:b7:4e:60:0f:1a: f1:f4:bc:a5:9d:e7:37:c6:a2:6e:5c:28:96:f5:96: d2:3c:97:c5:56:39:03:d9:39:10:0b:08:6e:54:5f: d1:b3:2c:37:39:a8:aa:3d:09:8f:df:56:03:fe:4c: 85:cf:61:e9:db:f3:48:2e:0b:51:83:e3:10:69:31: f4:52:76:58:8c:f3:7e:66:a7:d1:a3:dd:1b:72:9b: 56:32:e7:39:0b:a1:07:53:93:d1:ea:b9:49:3e:bb: d1:f1:8e:9d:57:25:ee:fd:22:45:67:08:08:47:3d: 2c:a5:fb:71:be:9d:9a:69:18:cc:1b:e0:4b:62:1f: 1d:85:c4:fe:01:91:25:5c:99:0d:0d:c7:cf:04:ec: ef:7c:aa:c4:bc:75:db:5f:3c:1a:60:27:6d:28:5e: 91:67:4f:9e:41:9a:b6:fe:94:03:e1:c4:ab:2b:61: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FE:54:94:7A:B6:AD:1F:5E:60:D2:DF:1C:4D:47:44:E5:BE:04:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8ec80bf-7644-3386-bfd2-ccd683719cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:64:5b:71:2e:a5:ff:ac:1d:a1:18:27:f7:40:91:23:b7:ff: 8f:48:20:e2:76:90:1e:3f:15:90:9c:94:de:89:2d:bf:a9:cd: 64:fb:03:30:fb:1b:01:7b:55:8e:24:c3:92:c6:c1:37:81:d8: 27:54:36:b1:fd:08:bd:6f:26:b3:e0:65:8a:6b:40:f8:ea:f3: d4:b9:fb:4f:45:fa:d3:d1:5d:45:db:d9:04:01:a4:6a:9c:96: 8e:9c:8b:2c:89:40:d6:3e:c5:fc:f6:59:7d:85:73:29:e7:1a: 60:be:b5:f1:dd:3a:50:2f:62:e8:a6:f5:c9:b8:f0:ca:bf:99: 5c:00:a6:3a:c1:60:06:ab:f5:41:75:73:8c:5e:36:93:4d:27: 27:3a:9b:ed:14:52:f1:48:f3:d0:d4:2f:c6:f9:84:13:12:25: 35:0d:32:e9:0b:90:01:95:0a:18:11:d6:04:17:84:3c:1e:90: 1a:44:76:b2:38:11:8e:1e:02:e3:37:e9:e2:39:e2:a3:76:79: 59:04:c1:98:97:b8:ce:72:c8:8b:46:10:d2:ee:a0:f3:b1:b1: ee:f7:bd:e0:59:7e:82:18:32:c6:84:01:d8:5a:31:5a:8a:2e: c9:27:56:28:28:b9:9e:88:0b:42:3c:b5:51:29:f5:b5:bc:26: 73:78:81:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/FysDwWWYEIsllGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk YzI5NTNlZTAtYjVkZi00NGRmLThhN2EtNDZkNmEwOWViOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7TDs4lGFZGjQTLDcpyUxyUBIiNME4b/o0cO nDJFS7fPZWPm3nSZDqnK/Ayk94beVhecsRFwmMrgDUMrJ7VI5gcD8UBoLPjLOTbB NkOBc7/0t/WZt05gDxrx9Lylnec3xqJuXCiW9ZbSPJfFVjkD2TkQCwhuVF/Rsyw3 OaiqPQmP31YD/kyFz2Hp2/NILgtRg+MQaTH0UnZYjPN+ZqfRo90bcptWMuc5C6EH U5PR6rlJPrvR8Y6dVyXu/SJFZwgIRz0spftxvp2aaRjMG+BLYh8dhcT+AZElXJkN DcfPBOzvfKrEvHXbXzwaYCdtKF6RZ0+eQZq2/pQD4cSrK2Hq6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj+VJR6tq0fXmDS3xxNR0TlvgT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYThlYzgwYmYtNzY0NC0z Mzg2LWJmZDItY2NkNjgzNzE5Y2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNkW3Eupf+sHaEYJ/dAkSO3/49IIOJ2kB4/FZCclN6JLb+pzWT7AzD7 GwF7VY4kw5LGwTeB2CdUNrH9CL1vJrPgZYprQPjq89S5+09F+tPRXUXb2QQBpGqc lo6ciyyJQNY+xfz2WX2FcynnGmC+tfHdOlAvYuim9cm48Mq/mVwApjrBYAar9UF1 c4xeNpNNJyc6m+0UUvFI89DUL8b5hBMSJTUNMukLkAGVChgR1gQXhDwekBpEdrI4 EY4eAuM36eI54qN2eVkEwZiXuM5yyItGENLuoPOxse73veBZfoIYMsaEAdhaMVqK LsknVigouZ6IC0I8tVEp9bW8JnN4gfk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:57 2026 by rpki-client