$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa File: fd0ad239-50b5-3adc-a9f2-317315ec4039.roa (raw, json) Hash identifier: VIyOWzLAn/hftSr0IBqy7AjERW6kfQkCtARc5/VLV+U= Subject key identifier: A8:C0:90:95:EA:83:4A:23:D2:93:F1:C5:F8:F1:D9:50:AF:13:D0:B9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D5243C56B9D3A8C092ACB5D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13335 IP address blocks: 104.23.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c5:6b:9d:3a:8c:09:2a:cb:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=bb03cc79-8c89-4c8c-a6d2-47bd5d4aa8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:86:00:5d:e5:bf:81:5c:31:25:d7:fa:6f: d7:bf:91:11:1c:be:1f:d9:80:e6:58:d5:73:10:ee: ef:8b:19:e3:60:d5:fc:a4:12:12:2b:8e:e1:9e:fa: d4:c8:24:15:4d:35:89:41:41:f4:13:d0:b4:e6:f1: 1f:d5:ea:a2:56:2b:e4:86:51:0b:67:4c:c8:d7:57: 7b:4f:ab:2b:0d:35:0a:0f:77:7a:39:50:93:6a:06: 11:88:5d:e0:ee:de:2f:6c:93:a8:e1:de:4e:8f:83: a3:e1:3b:ec:70:07:85:a8:fa:c9:f9:2a:cb:96:57: 1b:28:c2:13:43:d4:b2:37:21:76:fa:65:e7:cf:4d: 12:3d:f5:4a:73:2e:ae:8d:7e:cc:92:84:b8:3f:92: ad:c1:43:70:66:c2:cf:f4:de:fe:9b:d9:9c:e0:f4: c5:d0:54:b6:b3:e1:52:36:f0:37:a4:1a:b9:8a:e9: dc:32:cb:b8:f9:d3:a7:47:62:33:9b:70:31:e2:49: d3:90:62:57:b9:21:31:02:7c:48:1c:ec:77:55:59: 28:05:c2:a1:ce:99:ea:2e:c4:de:ed:87:42:37:8b: 86:55:80:e6:9c:82:fb:4b:ff:e8:50:d7:ba:5c:62: ed:91:e4:b3:17:94:d5:d8:65:97:d1:0f:b9:22:e0: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C0:90:95:EA:83:4A:23:D2:93:F1:C5:F8:F1:D9:50:AF:13:D0:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd0ad239-50b5-3adc-a9f2-317315ec4039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6b:3b:2f:0a:3d:a8:94:fe:a7:80:5e:46:62:92:45:a7:06: 92:e6:82:8d:4e:78:85:98:2f:70:fe:2a:72:f6:6e:8b:78:73: 68:c8:88:48:64:1f:2d:b6:11:ab:cf:c5:d1:ed:dc:fa:32:ff: d7:e2:d7:f4:56:85:27:df:29:28:d7:60:90:52:32:c7:20:32: 34:f5:72:75:ca:e5:60:1d:91:34:a8:dd:f2:db:d7:45:19:c7: f9:28:52:ed:0c:19:d4:86:b2:ae:4f:99:da:05:2e:79:6f:41: a0:55:95:61:50:da:6d:40:4d:89:35:35:36:b9:47:ae:3d:b8: 9b:d4:8e:06:75:5c:f0:31:28:a5:25:b6:33:dd:0f:63:dc:f8: e8:46:69:26:a9:15:2e:15:59:0a:80:5f:b2:0a:2c:b1:39:f5: 54:79:9e:26:c8:bb:e9:17:dd:dc:53:49:ce:cd:55:95:30:ed: f0:fe:70:85:9e:91:d5:56:54:51:77:1c:11:62:69:41:eb:f5: 56:ee:f4:be:9b:66:90:28:22:55:95:1e:12:08:47:5d:24:49: a0:89:72:cf:0a:88:21:be:ff:c0:ee:61:49:68:e0:f3:16:7a: a3:f8:71:ff:68:2c:ce:bb:58:03:c5:e3:47:4c:5a:12:3c:31: 68:11:b4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8VrnTqMCSrLXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YmIwM2NjNzktOGM4OS00YzhjLWE2ZDItNDdiZDVkNGFhOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgaGAF3lv4FcMSXX+m/Xv5ERHL4f2YDmWNVz EO7vixnjYNX8pBISK47hnvrUyCQVTTWJQUH0E9C05vEf1eqiVivkhlELZ0zI11d7 T6srDTUKD3d6OVCTagYRiF3g7t4vbJOo4d5Oj4Oj4TvscAeFqPrJ+SrLllcbKMIT Q9SyNyF2+mXnz00SPfVKcy6ujX7MkoS4P5KtwUNwZsLP9N7+m9mc4PTF0FS2s+FS NvA3pBq5iuncMsu4+dOnR2Izm3Ax4knTkGJXuSExAnxIHOx3VVkoBcKhzpnqLsTe 7YdCN4uGVYDmnIL7S//oUNe6XGLtkeSzF5TV2GWX0Q+5IuCTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjAkJXqg0oj0pPxxfjx2VCvE9C5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmQwYWQyMzktNTBiNS0z YWRjLWE5ZjItMzE3MzE1ZWM0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFrOy8KPaiU/qeAXkZikkWnBpLmgo1OeIWYL3D+KnL2bot4c2jIiEhk Hy22EavPxdHt3Poy/9fi1/RWhSffKSjXYJBSMscgMjT1cnXK5WAdkTSo3fLb10UZ x/koUu0MGdSGsq5PmdoFLnlvQaBVlWFQ2m1ATYk1NTa5R649uJvUjgZ1XPAxKKUl tjPdD2Pc+OhGaSapFS4VWQqAX7IKLLE59VR5nibIu+kX3dxTSc7NVZUw7fD+cIWe kdVWVFF3HBFiaUHr9Vbu9L6bZpAoIlWVHhIIR10kSaCJcs8KiCG+/8DuYUlo4PMW eqP4cf9oLM67WAPF40dMWhI8MWgRtO0= -----END CERTIFICATE-----Generated at Fri Apr 17 01:59:33 2026 by rpki-client