$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa File: afde6ea1-89e2-3302-863c-c2ece761e905.roa (raw, json) Hash identifier: ywrsLRgNFmsm4T7Doicklkdt8s3yOmPW9qMZ6EKr+r0= Subject key identifier: 3E:5F:26:53:E6:4C:39:56:15:5A:24:BE:44:92:19:C5:00:24:82:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F1897C0B24AF6CB6F9EB1AB98 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.22.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:c0:b2:4a:f6:cb:6f:9e:b1:ab:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=62f8ee2d-e62f-4045-bd62-ba8f914d5cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:81:1f:99:f5:72:b3:ab:15:84:c0:7e:2a: 3a:d1:04:27:c0:bf:e6:7f:2d:30:7e:c6:61:cb:55: 69:24:2d:1b:6b:7c:c7:97:b4:93:57:43:18:f7:04: ee:61:3c:e7:11:a9:7e:63:80:4b:f3:67:2e:45:58: c0:9b:34:e1:73:0a:5e:34:fb:d3:c1:6d:0c:eb:33: 33:7c:c0:45:7a:15:21:41:21:4a:fe:e7:95:49:79: 13:eb:96:85:af:5f:e3:fb:a8:d6:b3:51:25:33:0d: b0:53:a7:fd:32:b3:c1:f2:79:39:d2:cb:7e:c6:c4: c8:89:80:14:bb:3b:0a:84:0f:3c:0c:17:90:71:fd: 01:db:ad:69:1e:f1:c8:02:36:ad:0c:d2:40:79:69: 54:ea:b3:e4:c9:66:f8:1e:8a:95:f9:dd:fc:70:4e: b1:f3:b6:f7:61:13:47:0f:2b:1f:97:09:95:f4:aa: 5c:a9:53:79:d3:14:c4:79:26:3b:5b:e6:ca:e5:6c: 39:0d:bb:4f:7f:2d:f1:2b:bf:b8:fc:8a:33:82:ce: 40:87:0c:99:fb:95:7c:bc:27:7b:61:77:ed:fb:e9: a8:82:f0:ad:e5:76:2c:65:5b:eb:47:fc:ba:32:b4: d0:b7:2b:37:c2:d1:95:86:36:88:2e:5c:df:05:8f: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5F:26:53:E6:4C:39:56:15:5A:24:BE:44:92:19:C5:00:24:82:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e9:22:f4:fc:3f:df:45:ec:24:e8:f1:bb:41:98:0d:52:d7: cc:75:a2:96:62:28:9f:8c:7a:58:7d:e0:ae:4c:8f:ae:34:a6: ae:e6:3f:7d:4e:7a:e6:8c:32:37:93:0a:26:ce:bc:3b:62:2f: 43:56:16:5f:ee:be:76:24:0c:c8:26:27:74:2c:57:7e:4b:5c: a5:7c:81:f7:52:59:c2:6a:a3:f6:1a:e0:38:bd:ec:71:07:93: ba:b3:fd:ca:39:9c:f3:0c:a4:af:41:43:af:92:a4:fa:62:58: 8a:7b:83:d5:f2:cb:5a:7b:49:fd:9c:7e:76:a1:88:c0:cb:c1: 91:10:c8:4d:49:19:f8:7f:e1:56:17:30:00:2a:74:ee:89:12: 70:0d:03:30:1e:a0:a0:e2:76:3f:58:c8:8d:40:f2:51:10:93: bf:e3:7a:da:92:6f:cd:71:0a:cc:ca:a1:43:ca:13:72:1e:87: e4:a9:2b:3b:46:90:70:f1:05:2d:ac:8f:1f:ae:ec:59:45:58: 57:d3:33:c2:86:27:ee:2e:8b:98:81:19:9d:ea:18:fb:dd:d3: d5:ad:06:70:fe:fa:67:fe:68:c1:5c:12:f6:e3:82:7b:d2:05: 0c:6a:bc:8c:28:15:53:54:c8:17:79:df:95:09:82:e1:02:d6: 5d:46:df:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl8CySvbLb56xq5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjJmOGVlMmQtZTYyZi00MDQ1LWJkNjItYmE4ZjkxNGQ1Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPqBH5n1crOrFYTAfio60QQnwL/mfy0wfsZh y1VpJC0ba3zHl7STV0MY9wTuYTznEal+Y4BL82cuRVjAmzThcwpeNPvTwW0M6zMz fMBFehUhQSFK/ueVSXkT65aFr1/j+6jWs1ElMw2wU6f9MrPB8nk50st+xsTIiYAU uzsKhA88DBeQcf0B261pHvHIAjatDNJAeWlU6rPkyWb4HoqV+d38cE6x87b3YRNH DysflwmV9KpcqVN50xTEeSY7W+bK5Ww5DbtPfy3xK7+4/Iozgs5AhwyZ+5V8vCd7 YXft++mogvCt5XYsZVvrR/y6MrTQtys3wtGVhjaILlzfBY/9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5fJlPmTDlWFVokvkSSGcUAJIIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZkZTZlYTEtODllMi0z MzAyLTg2M2MtYzJlY2U3NjFlOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvpIvT8P99F7CTo8btBmA1S18x1opZiKJ+Melh94K5Mj640pq7mP31O euaMMjeTCibOvDtiL0NWFl/uvnYkDMgmJ3QsV35LXKV8gfdSWcJqo/Ya4Di97HEH k7qz/co5nPMMpK9BQ6+SpPpiWIp7g9Xyy1p7Sf2cfnahiMDLwZEQyE1JGfh/4VYX MAAqdO6JEnANAzAeoKDidj9YyI1A8lEQk7/jetqSb81xCszKoUPKE3Ieh+SpKztG kHDxBS2sjx+u7FlFWFfTM8KGJ+4ui5iBGZ3qGPvd09WtBnD++mf+aMFcEvbjgnvS BQxqvIwoFVNUyBd535UJguEC1l1G3x0= -----END CERTIFICATE-----Generated at Sat Sep 26 16:26:55 2026 by rpki-client