$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa File: 3db74c7f-b12e-365d-bcb7-4530665d4a02.roa (raw, json) Hash identifier: gI0jS4XoJvlyeYNCdx9oM6DORKVR5BqXJ8zq8gRoJr4= Subject key identifier: 82:3C:CC:00:C6:FF:EB:90:DA:FB:73:05:2A:E5:1D:F6:96:A0:5C:BA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824B3212A4D2748C96E3670 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.31.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:b3:21:2a:4d:27:48:c9:6e:36:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=bbf220bc-550b-464e-9057-d7bc6306658b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0c:db:82:77:0e:9e:d2:63:e9:ae:fb:85:65: 3d:4b:4c:44:85:00:5f:02:4b:dd:77:f1:1d:b8:97: 38:f9:b8:73:b1:24:d2:ce:d4:a1:c8:30:aa:06:98: 40:19:95:73:c5:ed:98:fc:3f:36:e4:37:06:12:a1: d5:41:11:bb:b6:86:53:ac:e3:89:16:8d:58:59:f3: bb:87:f0:e0:2e:34:e1:85:e7:1e:e3:46:7e:f2:20: 3a:b6:28:1c:e8:ca:88:94:bd:b9:6f:57:1f:d3:27: c6:19:4d:4a:c8:19:35:98:74:fb:2b:7b:18:31:91: b9:b8:74:bd:3e:1c:a9:9f:8f:40:14:28:83:c2:85: 92:3c:27:f8:85:0b:a5:56:e2:bb:93:d5:e8:97:80: 6d:7d:c3:88:96:41:3e:0e:29:87:7a:06:86:bb:58: 27:ec:51:96:0e:f4:50:c1:fa:07:fb:e5:af:8f:0c: 61:e6:4f:d7:60:15:17:4b:75:dc:a6:f2:0a:45:73: f1:ce:c9:7b:4d:39:52:f0:0b:dd:2b:d6:0b:b5:76: 2a:7b:e7:ff:41:82:0a:bf:34:e4:8d:2e:16:3a:69: 06:73:6f:6d:f5:6b:5e:df:8c:28:38:27:7c:c5:27: 7b:fc:fc:41:3a:81:3a:e3:9b:58:78:a0:1b:25:4a: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:CC:00:C6:FF:EB:90:DA:FB:73:05:2A:E5:1D:F6:96:A0:5C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:47:52:31:14:71:92:d7:49:05:24:d1:5d:1f:a0:b6:de:6b: 11:3f:ec:b2:a1:dd:30:f5:90:a1:c0:b9:3b:86:3e:aa:65:18: 04:0a:17:22:f4:5f:4f:47:05:e8:64:d6:04:3b:a4:5c:8f:da: 36:31:de:31:ad:f2:c5:ac:06:63:ff:d0:27:a2:d7:65:69:56: 44:bd:86:77:e4:6e:af:6f:7b:d9:e5:e9:b1:f5:94:8f:af:94: 44:7b:68:34:79:46:b5:ab:48:6f:c6:cd:da:fc:d7:64:08:77: b4:a2:02:50:d0:08:51:48:f9:e7:14:76:68:39:2c:17:85:b1: 35:c1:f7:93:ef:2e:3d:43:c1:08:24:f1:0d:5d:90:32:e0:1d: 6b:a0:e2:a1:c3:f0:17:98:f3:ba:3e:94:36:0d:89:c7:5d:2a: 98:cc:7a:aa:a5:e4:08:13:72:e6:58:74:1c:42:02:f4:25:d8: 2c:c8:27:b9:43:57:df:d2:3e:61:cb:cf:d9:2a:8e:22:0d:1c: 5e:0f:5e:af:9d:a1:94:80:30:47:ba:bd:f7:5b:e6:0a:d0:76: 45:6b:e7:27:a7:0d:f4:27:39:cb:91:6e:aa:b0:a8:20:5a:4d: e5:01:d1:50:4f:a2:04:f8:14:69:d1:bd:5a:e8:e7:f6:67:7b: 9e:c5:3f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLMhKk0nSMluNnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YmJmMjIwYmMtNTUwYi00NjRlLTkwNTctZDdiYzYzMDY2NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQzbgncOntJj6a77hWU9S0xEhQBfAkvdd/Ed uJc4+bhzsSTSztShyDCqBphAGZVzxe2Y/D825DcGEqHVQRG7toZTrOOJFo1YWfO7 h/DgLjThhece40Z+8iA6tigc6MqIlL25b1cf0yfGGU1KyBk1mHT7K3sYMZG5uHS9 Phypn49AFCiDwoWSPCf4hQulVuK7k9Xol4BtfcOIlkE+DimHegaGu1gn7FGWDvRQ wfoH++Wvjwxh5k/XYBUXS3XcpvIKRXPxzsl7TTlS8AvdK9YLtXYqe+f/QYIKvzTk jS4WOmkGc29t9Wte34woOCd8xSd7/PxBOoE645tYeKAbJUp5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII8zADG/+uQ2vtzBSrlHfaWoFy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RiNzRjN2YtYjEyZS0z NjVkLWJjYjctNDUzMDY2NWQ0YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJHUjEUcZLXSQUk0V0foLbeaxE/7LKh3TD1kKHAuTuGPqplGAQKFyL0 X09HBehk1gQ7pFyP2jYx3jGt8sWsBmP/0Cei12VpVkS9hnfkbq9ve9nl6bH1lI+v lER7aDR5RrWrSG/Gzdr812QId7SiAlDQCFFI+ecUdmg5LBeFsTXB95PvLj1DwQgk 8Q1dkDLgHWug4qHD8BeY87o+lDYNicddKpjMeqql5AgTcuZYdBxCAvQl2CzIJ7lD V9/SPmHLz9kqjiINHF4PXq+doZSAMEe6vfdb5grQdkVr5yenDfQnOcuRbqqwqCBa TeUB0VBPogT4FGnRvVro5/Zne57FP8Q= -----END CERTIFICATE-----Generated at Sat Jul 18 00:47:59 2026 by rpki-client