$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3b0bac5-efe9-3d99-bfcb-675ff2a3fcc7.roa File: d3b0bac5-efe9-3d99-bfcb-675ff2a3fcc7.roa (raw, json) Hash identifier: /ARocbTGWj1vvNYW7otuHF+mS4ms4fznvinXqYT7ZRI= Subject key identifier: 80:C2:99:48:DC:8B:AF:5E:91:68:4D:44:D0:6F:99:EE:82:D6:D3:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EA7987C3220B8EF1DA3A33F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3b0bac5-efe9-3d99-bfcb-675ff2a3fcc7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13335 IP address blocks: 104.22.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:7c:32:20:b8:ef:1d:a3:a3:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=09666340-105f-4ae2-bf0b-c596a99b2898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:30:29:19:e6:4d:66:48:a8:d5:a7:20:cc: c7:19:35:21:f0:b8:dc:ad:ff:46:2d:4b:83:23:c9: 1f:fb:e0:9d:0f:01:fa:57:20:f2:86:ed:75:02:7e: 06:c2:87:ae:9b:6a:b5:ae:1c:7c:4d:50:08:ce:8b: 47:35:71:7c:4b:bf:27:73:73:02:c6:ba:18:7e:02: 24:08:2e:ad:3a:1a:87:73:f3:b1:48:54:e0:48:50: ae:c7:39:f3:dc:12:89:d5:ad:6f:2e:b0:46:73:63: de:8e:14:50:b4:31:11:53:01:fa:ea:a6:25:4b:8f: d6:7e:35:fc:32:2a:a8:d8:97:d6:83:70:62:a3:93: 11:4e:85:b8:0d:42:8a:b6:cf:a7:97:c2:bd:8d:f2: db:4f:d0:e0:eb:ff:f8:11:fd:2d:c9:d3:cc:f8:53: cf:40:08:7b:de:6a:49:76:32:58:23:9f:79:fe:ea: d6:2b:50:d9:12:a7:36:fc:43:df:d6:ab:e9:42:56: f0:cc:86:dd:54:a3:19:58:43:94:cc:76:37:21:e1: b0:ba:fc:e0:70:5a:60:f8:06:34:db:da:87:e5:77: e6:32:27:b1:45:6e:ee:67:10:50:3e:5d:91:13:0d: 42:20:c0:9e:d6:67:28:9c:3e:c3:a4:bc:e0:28:57: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C2:99:48:DC:8B:AF:5E:91:68:4D:44:D0:6F:99:EE:82:D6:D3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3b0bac5-efe9-3d99-bfcb-675ff2a3fcc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:96:da:62:90:a7:50:95:f6:89:a1:d1:67:2e:07:b6:30:b5: 6e:ab:12:8f:30:5d:4e:d5:e5:59:67:68:3e:65:f9:fc:55:17: c4:cc:f5:f3:a3:30:12:cf:b4:f4:1f:d1:8d:1d:7f:90:84:02: fc:26:b5:49:2c:74:df:dd:46:d5:17:15:41:33:1c:bc:61:d6: fd:06:83:ea:e5:7f:50:1d:c8:75:3a:8e:56:f6:1d:f9:8e:d9: d6:83:f1:7a:6a:38:b4:6e:6d:83:45:4d:2d:03:54:6e:92:e2: 4e:a9:5e:9e:ef:38:55:3a:63:0e:a4:0a:33:aa:73:46:42:6a: 91:62:40:07:74:a5:8b:ea:ce:b8:3d:48:07:36:e7:9b:c5:2d: 00:8f:d0:d0:f1:79:bb:aa:bb:5d:49:86:5f:a7:7b:fa:93:95: 11:8b:fd:26:fd:5e:d8:81:35:5d:48:22:c9:64:98:ea:55:61: 7d:3b:4d:f7:4d:9a:b3:ce:ca:d8:72:34:46:d3:8a:01:76:ea: 72:63:1a:b6:9c:16:3a:0a:e6:ab:09:78:35:19:38:2f:23:2b: f0:86:5f:71:70:7e:9b:14:cc:eb:2e:b1:53:89:ae:9e:e8:32: a7:c3:b4:8b:29:1b:c5:fc:f4:9b:c4:97:06:77:b0:67:fc:f9: 1f:00:13:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHwyILjvHaOjPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDk2NjYzNDAtMTA1Zi00YWUyLWJmMGItYzU5NmE5OWIyODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPAwKRnmTWZIqNWnIMzHGTUh8Ljcrf9GLUuD I8kf++CdDwH6VyDyhu11An4Gwoeum2q1rhx8TVAIzotHNXF8S78nc3MCxroYfgIk CC6tOhqHc/OxSFTgSFCuxznz3BKJ1a1vLrBGc2PejhRQtDERUwH66qYlS4/WfjX8 Miqo2JfWg3Bio5MRToW4DUKKts+nl8K9jfLbT9Dg6//4Ef0tydPM+FPPQAh73mpJ djJYI595/urWK1DZEqc2/EPf1qvpQlbwzIbdVKMZWEOUzHY3IeGwuvzgcFpg+AY0 29qH5XfmMiexRW7uZxBQPl2REw1CIMCe1mconD7DpLzgKFcMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDCmUjci69ekWhNRNBvme6C1tOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDNiMGJhYzUtZWZlOS0z ZDk5LWJmY2ItNjc1ZmYyYTNmY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWW2mKQp1CV9omh0WcuB7YwtW6rEo8wXU7V5VlnaD5l+fxVF8TM9fOj MBLPtPQf0Y0df5CEAvwmtUksdN/dRtUXFUEzHLxh1v0Gg+rlf1AdyHU6jlb2HfmO 2daD8XpqOLRubYNFTS0DVG6S4k6pXp7vOFU6Yw6kCjOqc0ZCapFiQAd0pYvqzrg9 SAc255vFLQCP0NDxebuqu11Jhl+ne/qTlRGL/Sb9XtiBNV1IIslkmOpVYX07TfdN mrPOythyNEbTigF26nJjGracFjoK5qsJeDUZOC8jK/CGX3FwfpsUzOsusVOJrp7o MqfDtIspG8X89JvElwZ3sGf8+R8AE9s= -----END CERTIFICATE-----Generated at Mon Sep 21 23:00:43 2026 by rpki-client