$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa File: 519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa (raw, json) Hash identifier: 8+CFbDYSbwG9v4HWHSvSnkr6nNbIon33BFhXJyzX6/Y= Subject key identifier: 60:8F:7A:4C:AD:A4:02:AB:7F:B8:DC:50:BA:CE:F1:D7:3A:AC:73:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824A7819282A17A171B01E8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.17.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:a7:81:92:82:a1:7a:17:1b:01:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=c24aeb74-4dc4-444e-96a7-a1cdfc09f666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:c0:b6:22:88:47:af:e1:23:ed:bb:b8:bf: 2b:b2:49:b7:15:7d:b1:ba:83:d1:a8:ed:89:34:12: 4d:b4:09:a7:a7:61:03:c7:0c:74:57:41:cb:50:d0: 20:61:0f:f1:3a:3e:f0:6d:5d:d0:46:8c:bc:4f:d3: cc:c1:dc:22:ac:0c:9c:93:00:54:61:73:af:81:76: 99:a1:2f:c1:28:4e:cc:cd:b5:a5:f1:f6:2f:97:cf: 91:08:c1:26:5f:1e:c1:32:f2:94:51:05:b1:32:1a: 50:80:22:60:76:78:ca:93:d5:3a:27:e3:a8:5f:79: ca:e4:d6:04:96:02:4b:e7:08:6e:e2:be:1f:9c:0a: 0f:75:b7:be:7d:54:1b:f8:9a:7a:71:09:b7:2b:7c: c8:19:34:7d:8c:d3:64:7a:e8:08:42:69:4a:c8:d3: d6:32:b3:c3:32:79:73:5b:f5:7f:32:fa:28:a2:5d: 45:f6:02:a3:20:91:50:8a:b5:b7:f3:d1:8d:c9:1f: 9a:41:df:03:8d:58:f1:a4:e1:ca:03:b7:02:ff:ea: a4:90:80:44:1a:25:38:ee:d9:ce:56:c7:f2:0e:ce: dc:8f:dc:ee:80:48:19:bf:a1:5c:11:13:bd:74:e8: 1b:bb:ab:45:20:f5:75:d2:0f:1e:a4:f9:ec:94:d4: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8F:7A:4C:AD:A4:02:AB:7F:B8:DC:50:BA:CE:F1:D7:3A:AC:73:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:18:69:15:6f:61:ce:7f:ea:2a:f6:24:e5:18:9c:35:10:dc: c6:01:db:40:bc:1c:c0:be:23:a5:36:26:3a:46:f8:34:19:8d: 46:8e:59:0c:a9:95:29:60:e9:a3:44:af:5d:e7:68:73:ea:c7: c8:e2:a5:01:4c:d6:d1:7e:90:9c:f5:b6:ff:ef:ca:a7:d0:59: ad:e0:25:96:4d:3a:49:18:a4:41:f1:ff:bb:97:61:7b:55:72: 87:4d:ba:6c:ff:d7:5e:32:c7:7f:05:2e:c7:86:11:6c:53:33: a8:e1:b9:fd:4d:6f:f0:ac:8d:e6:48:18:8c:56:ff:f3:1c:e7: cb:72:8d:1d:56:46:19:a7:3d:87:a6:79:b3:f4:aa:0e:58:ee: de:b8:ff:1f:25:a2:cc:eb:d6:6a:23:b4:f8:55:c8:d3:3c:75: 91:54:ed:88:a7:45:61:9d:26:38:9e:bb:15:fa:ec:b9:ee:23: 26:08:f0:cd:98:7c:91:a0:83:88:34:55:e4:1b:59:25:7c:be: 88:60:aa:f9:07:31:1f:b2:a0:a3:c3:70:cc:68:2c:39:75:0b: 0a:df:55:90:ff:de:56:a0:10:94:34:18:cf:e8:dc:c0:23:7e: a6:4d:e7:1e:52:de:65:21:da:f5:5c:8e:b0:2f:98:8d:1b:13: e0:3d:ae:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJKeBkoKhehcbAegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YzI0YWViNzQtNGRjNC00NDRlLTk2YTctYTFjZGZjMDlmNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV/AtiKIR6/hI+27uL8rskm3FX2xuoPRqO2J NBJNtAmnp2EDxwx0V0HLUNAgYQ/xOj7wbV3QRoy8T9PMwdwirAyckwBUYXOvgXaZ oS/BKE7MzbWl8fYvl8+RCMEmXx7BMvKUUQWxMhpQgCJgdnjKk9U6J+OoX3nK5NYE lgJL5whu4r4fnAoPdbe+fVQb+Jp6cQm3K3zIGTR9jNNkeugIQmlKyNPWMrPDMnlz W/V/Mvoool1F9gKjIJFQirW389GNyR+aQd8DjVjxpOHKA7cC/+qkkIBEGiU47tnO VsfyDs7cj9zugEgZv6FcERO9dOgbu6tFIPV10g8epPnslNTMFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCPekytpAKrf7jcULrO8dc6rHN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTE5ZGE3YTEtZTFlNC0z ZjA1LTlkZjEtOWVlNThiZmFhNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgYaRVvYc5/6ir2JOUYnDUQ3MYB20C8HMC+I6U2JjpG+DQZjUaOWQyp lSlg6aNEr13naHPqx8jipQFM1tF+kJz1tv/vyqfQWa3gJZZNOkkYpEHx/7uXYXtV codNumz/114yx38FLseGEWxTM6jhuf1Nb/CsjeZIGIxW//Mc58tyjR1WRhmnPYem ebP0qg5Y7t64/x8loszr1mojtPhVyNM8dZFU7YinRWGdJjieuxX67LnuIyYI8M2Y fJGgg4g0VeQbWSV8vohgqvkHMR+yoKPDcMxoLDl1CwrfVZD/3lagEJQ0GM/o3MAj fqZN5x5S3mUh2vVcjrAvmI0bE+A9rtI= -----END CERTIFICATE-----Generated at Sat Jul 18 00:46:28 2026 by rpki-client