$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa File: 2b3279f2-fad4-3ca8-b7db-21db2208a819.roa (raw, json) Hash identifier: XPBCiD200AiQp19n7DQ4jnzvS9uZcOZCkhLHvE+BUHg= Subject key identifier: E3:F4:88:20:9E:80:2C:58:0B:ED:00:B6:46:27:24:70:F5:58:F0:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876984D9435B09A1755200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.20.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:69:84:d9:43:5b:09:a1:75:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=864f6314-19cb-45d7-8b40-1e905b755dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:c9:4c:85:dc:9c:7e:b5:6b:df:4f:c5:6c: 52:f4:7a:af:38:bb:cd:90:74:38:03:5c:a9:f1:29: 87:8e:08:c2:a3:d0:32:20:f0:f6:62:4e:1f:78:e6: 5a:ac:91:d6:ed:c7:f6:8f:d0:63:b8:e5:08:f8:62: d0:0f:de:76:49:06:77:09:a7:eb:3c:37:6c:58:a7: 6e:7f:f5:52:78:8d:08:20:7e:f6:73:63:3d:81:0a: 70:ed:be:d5:d5:a9:7f:b7:f6:36:69:9a:dd:47:7a: a7:0a:c9:0d:b6:3d:8d:80:12:4d:82:e1:43:01:68: a7:d8:c6:c1:83:9b:08:2f:7d:60:e2:c4:66:4d:09: 50:bf:5b:61:89:cf:a3:40:3d:e9:47:15:25:7c:16: ca:fc:04:b6:dc:7e:1d:ea:1c:da:ce:64:31:46:fd: df:a4:80:17:8d:4f:0b:c8:54:62:0b:b5:5c:07:95: ae:2e:cb:e6:d7:d1:d2:b4:80:1c:70:7d:00:3a:74: 66:b7:f0:74:2f:94:25:63:cc:9f:b6:35:10:de:67: e7:02:47:7b:5f:a1:d9:57:45:f9:86:09:c9:12:34: 16:13:be:5c:ca:c6:be:2a:49:28:8e:c1:6b:f3:8f: bd:aa:eb:5c:4f:5f:00:45:58:a4:de:82:49:d9:64: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F4:88:20:9E:80:2C:58:0B:ED:00:B6:46:27:24:70:F5:58:F0:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:f5:89:49:3d:df:15:c0:d3:7a:72:22:c2:c6:57:2c:25:7f: 5a:32:03:de:e4:fb:b4:21:53:84:89:f5:17:b2:a1:c7:68:1d: d4:44:c0:db:d2:1d:56:cb:7e:ad:bc:ae:84:8b:8a:4a:dd:eb: b6:bf:a2:fa:9a:b6:69:b7:35:8b:e8:ba:72:ff:9e:02:ab:ba: 1d:42:11:dd:0c:9b:4c:02:2d:1d:2f:e2:db:e0:df:75:b3:04: 2f:92:06:37:5d:98:86:c0:1d:b5:11:36:be:05:f5:a3:41:c8: ea:6b:34:07:60:2f:a6:9c:5c:d7:80:9e:0d:a2:37:dc:65:8e: 4f:d6:1e:08:07:12:36:e0:bd:da:d5:16:10:61:60:ca:a3:be: 59:6d:a2:31:95:9e:05:32:49:c4:84:a5:b9:f2:ad:87:fe:c9: ba:3c:21:98:25:55:b6:14:a6:34:91:1f:e9:67:b0:3f:6f:3d: 6d:80:bb:87:15:10:72:99:8a:58:cd:82:a7:dd:47:79:f5:4a: 13:60:3f:4b:c7:73:81:2b:99:b4:72:dd:3d:22:4d:c9:d5:ad: 0f:6e:5a:7b:76:04:48:f9:36:25:be:30:63:11:76:5d:21:5f: f5:d1:eb:a4:b3:65:f1:5a:9b:07:5b:b6:84:58:54:c6:51:04: 4a:ff:d4:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2mE2UNbCaF1UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODY0ZjYzMTQtMTljYi00NWQ3LThiNDAtMWU5MDViNzU1ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEPJTIXcnH61a99PxWxS9HqvOLvNkHQ4A1yp 8SmHjgjCo9AyIPD2Yk4feOZarJHW7cf2j9BjuOUI+GLQD952SQZ3CafrPDdsWKdu f/VSeI0IIH72c2M9gQpw7b7V1al/t/Y2aZrdR3qnCskNtj2NgBJNguFDAWin2MbB g5sIL31g4sRmTQlQv1thic+jQD3pRxUlfBbK/AS23H4d6hzazmQxRv3fpIAXjU8L yFRiC7VcB5WuLsvm19HStIAccH0AOnRmt/B0L5QlY8yftjUQ3mfnAkd7X6HZV0X5 hgnJEjQWE75cysa+KkkojsFr84+9qutcT18ARVik3oJJ2WQL9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP0iCCegCxYC+0AtkYnJHD1WPBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIzMjc5ZjItZmFkNC0z Y2E4LWI3ZGItMjFkYjIyMDhhODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL31iUk93xXA03pyIsLGVywlf1oyA97k+7QhU4SJ9ReyocdoHdREwNvS HVbLfq28roSLikrd67a/ovqatmm3NYvounL/ngKruh1CEd0Mm0wCLR0v4tvg33Wz BC+SBjddmIbAHbURNr4F9aNByOprNAdgL6acXNeAng2iN9xljk/WHggHEjbgvdrV FhBhYMqjvlltojGVngUyScSEpbnyrYf+ybo8IZglVbYUpjSRH+lnsD9vPW2Au4cV EHKZiljNgqfdR3n1ShNgP0vHc4ErmbRy3T0iTcnVrQ9uWnt2BEj5NiW+MGMRdl0h X/XR66SzZfFamwdbtoRYVMZRBEr/1PY= -----END CERTIFICATE-----Generated at Tue Sep 22 12:22:38 2026 by rpki-client