$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa File: 7aa385db-0ce4-3f6e-889e-18919de224f6.roa (raw, json) Hash identifier: AJWaf0TkVFn+7qL5+0GZ/C+2eXAd5lkV3Q+0WnV3tL8= Subject key identifier: 5E:BB:6D:D2:77:CC:42:70:BD:DA:60:9F:84:2A:D7:13:CE:33:F2:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8DD87EE5C4A303886E622880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 104.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:7e:e5:c4:a3:03:88:6e:62:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=55c34a34-78f9-4d7e-b9e2-532c615ca3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:a5:28:3b:cd:44:68:66:d0:51:84:92:4d: e4:9f:0c:a7:13:2e:04:08:c3:f6:8e:a8:65:9f:a8: 42:0e:8d:28:f3:b5:23:f0:23:f8:8e:df:da:5f:5a: 1b:4b:88:b7:e0:fe:fa:0c:3f:b1:72:ff:3d:b4:77: 56:62:cf:dd:76:de:45:a6:f3:17:c3:60:6d:8b:27: e1:c6:89:74:2f:83:fe:c4:a1:3a:dc:6c:39:f4:98: 36:21:54:9d:58:1b:ce:94:d2:86:3a:75:5b:a2:f0: 86:ff:b2:cc:6f:41:d4:15:15:c4:4c:f2:fa:d8:fe: f3:f7:d2:4f:bf:7c:66:b1:3e:f8:3b:ed:14:a4:c0: 49:4c:e9:e6:57:b3:4e:2d:90:fa:a7:13:b4:c6:60: 56:ed:a3:a4:76:7b:b7:53:0b:39:2c:c3:3f:f1:1a: d6:3b:67:f9:a8:79:0b:96:a5:c1:f3:87:b8:4b:c3: 98:16:2a:83:f6:0a:fc:b3:f1:71:43:d4:fe:6d:d3: 71:4f:b9:df:f0:ad:b4:88:30:4b:40:c4:50:55:b7: dd:2a:6f:c7:69:1c:74:ca:7a:f9:4f:8c:c9:ca:cc: 17:22:27:2b:cc:d7:13:39:38:e5:e9:35:32:54:9f: 0c:09:fb:93:7a:84:8d:bb:c8:0c:29:28:da:3c:1c: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BB:6D:D2:77:CC:42:70:BD:DA:60:9F:84:2A:D7:13:CE:33:F2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ab:c2:04:b2:7e:00:89:0c:76:b1:e2:62:2d:99:c4:13:7a: b8:14:f2:28:f2:f2:ba:1e:47:f0:ce:cd:09:04:da:29:77:14: 7d:46:92:f1:69:53:35:4c:b8:c7:7c:05:0d:f1:e2:d4:0b:a8: 56:56:ed:a5:1f:82:22:1d:95:76:33:ac:80:36:a1:4b:e4:35: 36:11:d3:14:92:b3:af:5b:d5:20:f0:f8:e7:99:97:2b:02:48: 81:c2:bb:ce:61:81:8b:35:ca:12:ce:49:95:95:8b:55:35:91: 63:ed:b6:a1:ff:98:bc:79:f5:f4:53:d5:10:ca:da:f6:f3:68: 2c:f8:3b:69:6e:72:71:76:e5:b1:0e:ed:f5:a8:59:8d:d6:ac: 21:04:7a:cb:aa:67:5c:36:dc:f2:d6:b8:23:d2:ec:49:94:a9: 9d:bf:b8:e0:5c:f4:71:64:01:c3:8c:29:a5:c1:d0:29:a0:6d: 34:4b:38:1d:d5:d3:19:be:8f:1b:37:a9:f7:be:24:aa:d5:16: 3c:0e:8e:18:42:ca:94:6c:b2:aa:c8:59:35:b1:6c:27:9e:b1: 6b:da:ef:26:23:f8:8a:1e:7e:3c:6e:55:b7:f6:b6:b8:c5:f6: ca:4d:ac:fe:eb:17:b1:2f:00:40:c0:c6:18:21:ae:3a:32:a5: 27:97:2a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2H7lxKMDiG5iKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NTVjMzRhMzQtNzhmOS00ZDdlLWI5ZTItNTMyYzYxNWNhM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhValKDvNRGhm0FGEkk3knwynEy4ECMP2jqhl n6hCDo0o87Uj8CP4jt/aX1obS4i34P76DD+xcv89tHdWYs/ddt5FpvMXw2Btiyfh xol0L4P+xKE63Gw59Jg2IVSdWBvOlNKGOnVbovCG/7LMb0HUFRXETPL62P7z99JP v3xmsT74O+0UpMBJTOnmV7NOLZD6pxO0xmBW7aOkdnu3Uws5LMM/8RrWO2f5qHkL lqXB84e4S8OYFiqD9gr8s/FxQ9T+bdNxT7nf8K20iDBLQMRQVbfdKm/HaRx0ynr5 T4zJyswXIicrzNcTOTjl6TUyVJ8MCfuTeoSNu8gMKSjaPBybpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF67bdJ3zEJwvdpgn4Qq1xPOM/JQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2FhMzg1ZGItMGNlNC0z ZjZlLTg4OWUtMTg5MTlkZTIyNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOrwgSyfgCJDHax4mItmcQTergU8ijy8roeR/DOzQkE2il3FH1GkvFp UzVMuMd8BQ3x4tQLqFZW7aUfgiIdlXYzrIA2oUvkNTYR0xSSs69b1SDw+OeZlysC SIHCu85hgYs1yhLOSZWVi1U1kWPttqH/mLx59fRT1RDK2vbzaCz4O2lucnF25bEO 7fWoWY3WrCEEesuqZ1w23PLWuCPS7EmUqZ2/uOBc9HFkAcOMKaXB0CmgbTRLOB3V 0xm+jxs3qfe+JKrVFjwOjhhCypRssqrIWTWxbCeesWva7yYj+IoefjxuVbf2trjF 9spNrP7rF7EvAEDAxhghrjoypSeXKn4= -----END CERTIFICATE-----Generated at Tue Oct 20 00:39:47 2026 by rpki-client