$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa File: ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa (raw, json) Hash identifier: Nwq+VImuZDB3FIj1Uxgr34iAunD/AluymOiDtvC2bVY= Subject key identifier: B8:21:3C:A5:C9:AB:54:41:C5:A6:CC:C3:72:3E:C9:CB:04:CA:08:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D75D52DF156C771933AE24100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.23.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2d:f1:56:c7:71:93:3a:e2:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=bf5feb24-f7cb-4c3b-8a80-283c94e2c154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:63:14:72:9f:cd:77:12:4c:a6:e0:9c:48: 5d:ac:d4:47:6f:4e:85:00:b9:84:fd:31:14:d6:14: 1d:e0:c1:77:da:6b:ed:46:83:03:ee:08:5a:f9:65: 6d:aa:0a:85:e2:0a:6d:e9:ba:db:8e:93:b9:04:f0: 31:cc:16:b8:8a:e9:46:f1:c0:49:e3:cc:8c:b5:0a: 3e:ec:b7:f2:6c:2a:92:b4:5d:11:01:b4:49:f9:5b: 37:9d:2c:bb:8d:fc:27:80:2b:ba:d4:23:fe:d2:9e: 61:56:84:c4:62:84:54:45:bc:41:ee:6f:bd:32:d5: 9b:42:51:7d:d4:18:b9:58:6c:9a:71:c6:e4:38:4a: db:44:47:d6:37:95:44:ed:79:63:bf:a8:64:9b:da: ba:d5:2f:37:2f:54:36:c4:9a:0b:2c:cd:19:b0:67: 0a:2c:1e:58:0b:b0:4a:01:dc:4c:5f:14:e9:3e:07: 2d:b7:7d:4e:96:1b:6c:61:09:39:75:57:08:4e:df: 9d:aa:3e:73:d5:62:09:fa:56:c7:19:57:5b:66:bb: 9d:98:b8:56:66:61:94:6f:3b:1f:84:c6:5a:05:eb: b0:8d:17:c1:4b:39:45:67:de:03:85:f7:a8:21:d3: c9:29:1b:0a:ab:35:1d:6d:73:4b:a3:6b:36:55:f2: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:21:3C:A5:C9:AB:54:41:C5:A6:CC:C3:72:3E:C9:CB:04:CA:08:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:10:2d:75:25:95:7f:87:c6:5c:90:2f:35:0d:20:e4:55:f7: bb:ed:df:ec:1c:58:c4:f9:a1:8a:c5:2c:ad:05:52:a7:7e:28: d0:e6:d7:d8:2b:5f:79:84:21:69:ae:1b:d1:ca:9b:d6:d4:94: cb:04:0c:18:fc:56:ba:7e:af:cc:1f:61:c3:89:76:24:18:7d: fa:f7:26:b0:5f:61:91:e5:e4:0a:e1:52:22:43:89:04:7d:8f: 8a:b5:ec:10:71:82:ee:ab:bf:f5:2a:0a:46:de:72:41:92:12: cc:ad:8a:e6:4d:c3:1f:23:45:fc:f6:a4:a5:28:a4:b1:ac:8a: fe:3b:c6:50:2b:59:69:2b:ed:16:4e:27:bf:9f:ec:fa:6c:47: bc:f3:5d:00:f8:22:cc:db:18:bf:52:9f:8c:5a:5a:dd:f3:c6: 72:a7:a0:3d:cd:67:86:1f:01:e2:08:48:95:60:cc:bd:49:39: 76:9f:ce:c3:b5:4d:3c:fc:b5:88:43:8a:eb:9f:95:64:91:bf: d2:bd:56:5f:41:7a:45:d3:49:34:d5:c8:35:37:64:fd:43:62: 34:a5:2f:86:7a:e2:21:04:1b:e9:57:77:fe:8f:91:6c:de:08: 2d:55:74:5e:72:2e:64:16:58:91:b2:16:9a:cd:df:08:2d:ef: 96:f8:4d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111S3xVsdxkzriQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk YmY1ZmViMjQtZjdjYi00YzNiLThhODAtMjgzYzk0ZTJjMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhypjFHKfzXcSTKbgnEhdrNRHb06FALmE/TEU 1hQd4MF32mvtRoMD7gha+WVtqgqF4gpt6brbjpO5BPAxzBa4iulG8cBJ48yMtQo+ 7LfybCqStF0RAbRJ+Vs3nSy7jfwngCu61CP+0p5hVoTEYoRURbxB7m+9MtWbQlF9 1Bi5WGyaccbkOErbREfWN5VE7Xljv6hkm9q61S83L1Q2xJoLLM0ZsGcKLB5YC7BK AdxMXxTpPgctt31OlhtsYQk5dVcITt+dqj5z1WIJ+lbHGVdbZrudmLhWZmGUbzsf hMZaBeuwjRfBSzlFZ94DhfeoIdPJKRsKqzUdbXNLo2s2VfINewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLghPKXJq1RBxabMw3I+ycsEygh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWQ1ZGQ0MWQtYmE4MC0z MGYyLTgwNTUtODkyYmRjMGQ0NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBevMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIQLXUllX+HxlyQLzUNIORV97vt3+wcWMT5oYrFLK0FUqd+KNDm19gr X3mEIWmuG9HKm9bUlMsEDBj8Vrp+r8wfYcOJdiQYffr3JrBfYZHl5ArhUiJDiQR9 j4q17BBxgu6rv/UqCkbeckGSEsytiuZNwx8jRfz2pKUopLGsiv47xlArWWkr7RZO J7+f7PpsR7zzXQD4IszbGL9Sn4xaWt3zxnKnoD3NZ4YfAeIISJVgzL1JOXafzsO1 TTz8tYhDiuuflWSRv9K9Vl9BekXTSTTVyDU3ZP1DYjSlL4Z64iEEG+lXd/6PkWze CC1VdF5yLmQWWJGyFprN3wgt75b4TQY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:26:08 2026 by rpki-client