$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa File: caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa (raw, json) Hash identifier: 0YQg3eIQCrpcFR4i2k5z8iEPG/vvesMMOmKvhuU4pEs= Subject key identifier: F5:71:93:B0:E9:88:40:AA:65:1D:AF:49:54:E9:93:88:40:35:29:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE0C2240D710A5546F16D6D20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 104.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:24:0d:71:0a:55:46:f1:6d:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=976cfddb-e1cd-44f4-b8c6-ca37335c55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:60:1a:e4:3c:1e:97:47:bc:40:37:7c:0e: 13:57:40:06:b5:b4:23:79:19:84:4f:09:83:0c:cc: 3b:25:e5:93:e8:a2:5d:52:69:8b:9f:57:8b:6b:cb: 5e:38:1f:64:9f:09:53:f1:98:65:8f:d2:3e:79:70: 44:b6:ab:7c:3e:cc:c7:8d:dd:56:97:93:2b:ba:9c: 03:11:4a:d2:f9:9d:25:89:aa:91:31:90:42:28:36: 8e:57:0c:bb:30:16:36:13:fd:1f:33:4d:80:3b:41: c2:24:55:60:93:81:be:bd:9e:d5:aa:c7:f2:32:06: 17:d8:d1:07:11:db:79:e2:a6:a3:6a:65:02:c2:ef: d7:b6:59:7f:29:42:6c:49:9a:fe:c0:2c:ce:ff:de: cf:64:1a:81:df:f1:81:10:4c:a3:4f:ef:a1:36:19: 25:f6:5f:ce:22:63:b5:26:91:b4:c5:a1:81:aa:b4: b3:b7:15:fc:0e:a2:96:49:2e:57:85:70:f7:30:3b: 3c:70:18:fb:e1:c6:b6:2b:76:2f:14:b6:3a:de:aa: 0a:a7:a5:d7:93:33:a3:0e:39:42:eb:55:7b:d5:f4: 10:bd:d9:58:1d:82:0f:56:c0:98:8c:09:94:30:9f: af:54:20:0d:44:5d:51:99:fc:db:6f:90:67:83:2c: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:93:B0:E9:88:40:AA:65:1D:AF:49:54:E9:93:88:40:35:29:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0f:eb:a2:e7:d6:09:c2:a4:45:83:72:ec:25:77:48:1a:e3: 40:c5:be:1c:ba:e4:03:a2:30:94:2d:09:a5:7f:8a:7e:28:8e: 02:c8:65:f6:33:da:bc:22:c0:f7:58:4d:15:30:59:d9:42:49: 5d:42:06:f5:87:2c:08:8e:57:40:69:06:eb:6e:1f:ca:f6:56: 1c:99:aa:81:d4:34:6f:a6:1b:5f:b1:16:5b:cf:b0:dc:a3:ea: 7d:a3:0f:c1:ad:9c:ef:5f:28:03:01:69:06:b1:f4:a8:c4:a5: 06:ab:3d:71:0b:f8:79:16:5b:e0:78:d7:9d:ac:28:fa:05:1b: 36:10:28:23:42:6f:e4:65:de:fe:43:7a:9c:fb:fd:89:ce:ea: 3b:eb:e8:e8:37:fb:04:60:6f:27:e0:40:fd:e1:ec:a7:2e:62: 5c:b3:cb:04:82:0e:59:31:5d:d5:df:41:39:36:52:e0:38:2e: eb:e5:fe:b7:59:60:12:07:95:ec:7e:9e:43:05:33:ad:58:bc: 0f:71:a2:30:0c:d7:5e:ac:1a:24:04:f3:06:ab:3c:03:9d:2a: b3:99:47:a4:ac:22:d8:1d:9f:7b:7c:33:10:80:8f:2b:51:06: 35:d5:c7:a7:6c:74:a1:05:1e:5d:81:e8:51:40:01:24:f0:f7: b2:d6:5a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwiQNcQpVRvFtbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk OTc2Y2ZkZGItZTFjZC00NGY0LWI4YzYtY2EzNzMzNWM1NWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0hgGuQ8HpdHvEA3fA4TV0AGtbQjeRmETwmD DMw7JeWT6KJdUmmLn1eLa8teOB9knwlT8Zhlj9I+eXBEtqt8PszHjd1Wl5MrupwD EUrS+Z0liaqRMZBCKDaOVwy7MBY2E/0fM02AO0HCJFVgk4G+vZ7VqsfyMgYX2NEH Edt54qajamUCwu/Xtll/KUJsSZr+wCzO/97PZBqB3/GBEEyjT++hNhkl9l/OImO1 JpG0xaGBqrSztxX8DqKWSS5XhXD3MDs8cBj74ca2K3YvFLY63qoKp6XXkzOjDjlC 61V71fQQvdlYHYIPVsCYjAmUMJ+vVCANRF1Rmfzbb5BngyyoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVxk7DpiECqZR2vSVTpk4hANSmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FhZGM5OGItMmE4OC0z YmRkLTlkYjAtNmQ5OGYyZjg0NWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQP66Ln1gnCpEWDcuwld0ga40DFvhy65AOiMJQtCaV/in4ojgLIZfYz 2rwiwPdYTRUwWdlCSV1CBvWHLAiOV0BpButuH8r2VhyZqoHUNG+mG1+xFlvPsNyj 6n2jD8GtnO9fKAMBaQax9KjEpQarPXEL+HkWW+B4152sKPoFGzYQKCNCb+Rl3v5D epz7/YnO6jvr6Og3+wRgbyfgQP3h7KcuYlyzywSCDlkxXdXfQTk2UuA4Luvl/rdZ YBIHlex+nkMFM61YvA9xojAM116sGiQE8warPAOdKrOZR6SsItgdn3t8MxCAjytR BjXVx6dsdKEFHl2B6FFAASTw97LWWvQ= -----END CERTIFICATE-----Generated at Tue Sep 22 11:57:39 2026 by rpki-client