$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1d85f8f-62f7-3035-a2f9-e18a27337ca4.roa File: b1d85f8f-62f7-3035-a2f9-e18a27337ca4.roa (raw, json) Hash identifier: y2NIXRpMfPp6TfDbEpXk87LBO+LVFqO5KCKsBDyVpT4= Subject key identifier: D6:1F:FF:EF:5E:F0:18:D6:10:BE:BE:EB:9F:7E:AD:7C:3E:75:32:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D55BCBC224DD36D7B34D08A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1d85f8f-62f7-3035-a2f9-e18a27337ca4.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:bc:22:4d:d3:6d:7b:34:d0:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=213f9b34-1f6b-4223-94a8-8ec6e6746012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e5:b5:cb:9d:ea:f0:b2:68:b8:24:e2:7a:b8: 41:e1:02:d5:0f:c8:37:31:ad:c8:7f:2a:5f:08:fc: 60:03:2d:b6:ff:d4:da:12:7d:fa:5b:f5:05:db:58: b3:ab:e0:0a:7d:d9:56:fc:79:32:73:97:e0:f8:30: 7d:04:eb:95:79:ad:29:31:33:6c:f0:6b:68:aa:e1: b1:e7:a7:3b:60:54:69:2b:16:93:c6:01:85:8e:a1: 18:06:ab:c5:d2:81:95:34:58:9f:0c:d0:08:4f:ce: 6d:83:fe:a7:92:51:b9:9d:4e:80:d9:88:87:af:05: bd:4d:2e:0e:69:b2:09:9a:63:1c:25:e7:e0:de:10: 03:bd:a2:d0:10:b2:9c:e8:d2:4b:52:d0:bc:e8:58: 0e:d9:22:f9:ff:9e:b1:a5:d8:b3:8d:56:e4:6e:91: 41:18:65:cf:ca:35:50:41:2b:bf:9d:27:3a:b5:e6: 51:40:14:2e:4a:d4:6d:9a:99:66:ee:ac:4b:43:10: 23:fc:5c:6b:b4:cd:77:1c:66:8f:a3:f3:dd:fd:45: e7:f5:6f:f1:02:e0:bc:13:83:70:d7:0b:91:f7:93: bf:ea:46:87:ea:4d:77:78:a9:2d:cd:75:ba:d8:19: f5:54:c5:ae:54:71:71:3e:02:55:41:76:6d:92:48: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1F:FF:EF:5E:F0:18:D6:10:BE:BE:EB:9F:7E:AD:7C:3E:75:32:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1d85f8f-62f7-3035-a2f9-e18a27337ca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e5:0e:0d:91:96:be:d1:69:d3:0d:f1:aa:35:4b:16:d0:1c: 9f:07:44:95:7b:43:05:2b:fb:af:c4:d2:18:24:71:8e:d1:7e: 6f:f0:90:38:92:16:78:4c:b4:e7:16:df:8b:3a:88:37:e1:cf: 2b:e2:5d:d2:4a:39:b7:e5:7b:86:9c:0c:56:c5:08:c2:1b:2d: 5b:f7:c2:31:9d:51:b4:74:a9:ca:98:68:0e:d3:37:45:ec:59: b5:60:45:f7:3b:05:12:c5:a0:bb:86:59:6c:e9:e4:27:42:ea: 39:f9:49:f0:98:0f:15:86:70:93:69:7d:55:ed:77:fe:cb:91: 33:52:a9:56:9d:5d:18:71:88:29:0d:fc:d5:f9:aa:4b:1d:7a: 92:67:70:40:46:e2:6e:84:fd:3f:79:62:d1:70:eb:96:ed:4a: f9:ab:ba:12:48:72:07:29:5d:0e:1e:43:5b:21:a4:0c:f4:7e: 31:ce:f2:b3:b0:ee:43:6e:fb:9f:90:67:76:8f:18:58:42:be: 47:71:f1:63:86:d6:65:6c:56:d6:bc:4e:aa:d8:a0:12:b6:55: 0d:94:d3:e0:a9:fe:a3:0f:cf:c5:e6:56:f7:e2:1a:39:35:e8: b6:d3:4a:80:0f:92:bf:1a:53:dc:16:bb:43:85:e4:24:3e:b1: c3:99:e9:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLwiTdNtezTQigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjEzZjliMzQtMWY2Yi00MjIzLTk0YTgtOGVjNmU2NzQ2MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+W1y53q8LJouCTierhB4QLVD8g3Ma3Ifypf CPxgAy22/9TaEn36W/UF21izq+AKfdlW/Hkyc5fg+DB9BOuVea0pMTNs8GtoquGx 56c7YFRpKxaTxgGFjqEYBqvF0oGVNFifDNAIT85tg/6nklG5nU6A2YiHrwW9TS4O abIJmmMcJefg3hADvaLQELKc6NJLUtC86FgO2SL5/56xpdizjVbkbpFBGGXPyjVQ QSu/nSc6teZRQBQuStRtmplm7qxLQxAj/FxrtM13HGaPo/Pd/UXn9W/xAuC8E4Nw 1wuR95O/6kaH6k13eKktzXW62Bn1VMWuVHFxPgJVQXZtkkjjBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYf/+9e8BjWEL6+659+rXw+dTL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjFkODVmOGYtNjJmNy0z MDM1LWEyZjktZTE4YTI3MzM3Y2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzlDg2Rlr7RadMN8ao1SxbQHJ8HRJV7QwUr+6/E0hgkcY7Rfm/wkDiS FnhMtOcW34s6iDfhzyviXdJKObfle4acDFbFCMIbLVv3wjGdUbR0qcqYaA7TN0Xs WbVgRfc7BRLFoLuGWWzp5CdC6jn5SfCYDxWGcJNpfVXtd/7LkTNSqVadXRhxiCkN /NX5qksdepJncEBG4m6E/T95YtFw65btSvmruhJIcgcpXQ4eQ1shpAz0fjHO8rOw 7kNu+5+QZ3aPGFhCvkdx8WOG1mVsVta8TqrYoBK2VQ2U0+Cp/qMPz8XmVvfiGjk1 6LbTSoAPkr8aU9wWu0OF5CQ+scOZ6fE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:21:43 2026 by rpki-client