$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f997e100-8ab5-3678-af97-ccf3e018969a.roa File: f997e100-8ab5-3678-af97-ccf3e018969a.roa (raw, json) Hash identifier: MNLA3nEjIFlBaOFhrZ1xB+EUAmuyDVm1216K5GXkliw= Subject key identifier: F1:A0:A4:D7:42:9A:0C:CD:A8:E4:FC:BB:77:ED:8E:55:BD:B0:33:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CBDB1EDA6A9037345DF81F500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f997e100-8ab5-3678-af97-ccf3e018969a.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 13335 IP address blocks: 104.23.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:ed:a6:a9:03:73:45:df:81:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=d487a943-87e6-4e78-a4e3-2a229f468196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:34:f2:2e:7b:a5:47:9e:2f:c0:18:ae:22: e0:c4:5c:bb:6f:d5:a2:e9:8f:a0:f5:cb:fc:da:c6: e2:c1:54:99:ed:02:5b:e2:89:8b:27:c0:77:0e:e9: 68:74:ac:54:a1:01:41:b9:f7:86:05:ea:99:ea:00: 0e:14:fa:e6:ea:93:a4:90:81:8c:74:d6:db:4a:77: 76:de:74:82:af:05:fa:93:5d:de:64:d7:87:48:e8: ac:30:a2:08:ef:b1:6f:3b:90:f5:0c:d4:fa:82:65: 8c:74:b8:09:84:38:69:ba:d8:35:46:17:ef:94:0a: d9:45:97:c4:76:ab:c2:12:06:f0:b3:49:70:0e:24: 27:da:07:bb:44:fa:71:d2:c3:d3:9e:07:65:93:31: 69:91:0f:3a:c2:78:8d:c5:0f:be:d7:1f:04:f6:cb: 24:d1:db:79:d9:8f:79:32:b7:b1:39:81:91:c3:49: 3a:80:b7:5b:65:a9:57:3b:bb:b8:92:2c:85:dd:33: 78:41:e5:8d:50:eb:1b:25:9c:2f:c0:5c:40:80:92: 3f:4c:dd:80:4a:78:34:ea:75:a3:3f:ba:44:a9:1b: ae:bc:1d:ca:04:bb:58:78:1f:b7:3c:45:11:6e:98: b6:03:8d:32:bc:6a:32:67:b9:91:c9:82:28:23:6a: 59:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A0:A4:D7:42:9A:0C:CD:A8:E4:FC:BB:77:ED:8E:55:BD:B0:33:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f997e100-8ab5-3678-af97-ccf3e018969a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:45:15:c9:f3:37:22:e3:42:ea:d0:3f:07:bf:94:c4:f8:35: d7:c9:dc:db:87:c5:2a:96:0d:32:dc:9c:e4:ee:b0:69:db:4f: 48:6d:25:8e:33:b6:99:3c:30:a0:53:62:1b:69:69:6f:cd:47: 0f:6a:f4:e7:4c:1d:fa:a9:11:14:47:ba:9a:01:a5:29:c4:bf: f2:27:ba:2b:14:c0:87:e4:64:2c:93:fa:33:31:33:1b:c8:6b: c7:c5:c0:c6:42:55:c1:b8:33:4e:75:35:81:ee:12:ad:b5:e3: cf:e2:a1:c0:a2:0a:ed:3d:45:64:02:98:bf:a5:40:6a:a0:31: 78:b9:b3:50:77:dd:e9:35:ba:c9:23:1e:c7:4c:18:e0:9e:c1: d6:1e:55:d6:30:9c:34:6f:06:5f:65:c5:16:71:66:6f:e2:36: 23:00:da:26:a7:40:f8:9b:38:a7:74:95:b3:cb:62:85:c3:8b: 02:3d:52:65:26:34:3b:21:8f:c9:77:ee:52:5c:87:9d:fe:00: 36:35:0a:1b:2c:fa:f1:18:93:bf:ea:72:c6:04:eb:43:8b:45: f3:c3:a9:10:55:bd:9c:0e:eb:6b:58:8a:c2:97:3e:f5:07:88: 55:ff:64:af:5a:7d:47:75:a0:84:a5:98:5a:d7:25:32:50:84: 93:ef:b3:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9se2mqQNzRd+B9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk ZDQ4N2E5NDMtODdlNi00ZTc4LWE0ZTMtMmEyMjlmNDY4MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6g08i57pUeeL8AYriLgxFy7b9Wi6Y+g9cv8 2sbiwVSZ7QJb4omLJ8B3DulodKxUoQFBufeGBeqZ6gAOFPrm6pOkkIGMdNbbSnd2 3nSCrwX6k13eZNeHSOisMKII77FvO5D1DNT6gmWMdLgJhDhputg1RhfvlArZRZfE dqvCEgbws0lwDiQn2ge7RPpx0sPTngdlkzFpkQ86wniNxQ++1x8E9ssk0dt52Y95 MrexOYGRw0k6gLdbZalXO7u4kiyF3TN4QeWNUOsbJZwvwFxAgJI/TN2ASng06nWj P7pEqRuuvB3KBLtYeB+3PEURbpi2A40yvGoyZ7mRyYIoI2pZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGgpNdCmgzNqOT8u3ftjlW9sDNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjk5N2UxMDAtOGFiNS0z Njc4LWFmOTctY2NmM2UwMTg5NjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9FFcnzNyLjQurQPwe/lMT4NdfJ3NuHxSqWDTLcnOTusGnbT0htJY4z tpk8MKBTYhtpaW/NRw9q9OdMHfqpERRHupoBpSnEv/InuisUwIfkZCyT+jMxMxvI a8fFwMZCVcG4M051NYHuEq2148/iocCiCu09RWQCmL+lQGqgMXi5s1B33ek1uskj HsdMGOCewdYeVdYwnDRvBl9lxRZxZm/iNiMA2ianQPibOKd0lbPLYoXDiwI9UmUm NDshj8l37lJch53+ADY1Chss+vEYk7/qcsYE60OLRfPDqRBVvZwO62tYisKXPvUH iFX/ZK9afUd1oISlmFrXJTJQhJPvswE= -----END CERTIFICATE-----Generated at Sun Mar 1 21:01:26 2026 by rpki-client