$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa File: 8689f776-5658-3cb8-aff0-a810a2806f8b.roa (raw, json) Hash identifier: Y0prXZeJ5WdnNnI/G+ngcBi9ip8zzW2DizzWT4LVGr4= Subject key identifier: 1C:70:09:A6:77:00:A9:A8:CC:FF:E4:82:48:4E:F0:31:B6:B2:83:CA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824AA928CD046483CED6080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:aa:92:8c:d0:46:48:3c:ed:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=356f0d5f-c0f5-47cf-ba1c-a8e8c213550d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:82:b6:d6:e4:cd:a8:9e:10:ce:6c:f3:6f: a4:93:df:5d:a8:73:b0:e7:3e:d3:0c:e2:6f:31:37: a8:42:03:f2:46:88:62:a6:ae:d9:c6:19:65:ae:8c: 60:5d:d3:36:0b:3a:76:7b:ad:9a:fe:5c:b0:c6:61: e3:cd:3f:0e:93:f8:5c:a9:d9:f3:82:11:38:55:cf: fd:5e:6d:98:6a:19:20:e4:1e:96:9d:be:59:0c:ec: e9:b9:1b:7d:44:c4:4f:08:30:f8:3b:8c:30:1e:72: be:be:da:5c:8b:3f:f6:8e:ff:6e:69:94:df:97:5e: d8:2d:21:aa:21:be:ff:3d:b9:28:21:a9:9b:22:bd: 33:5a:89:c8:f0:5f:0b:68:68:de:39:8e:3c:9f:b6: ca:bf:a2:a2:54:2a:27:c2:64:c7:a8:b2:21:21:13: f5:c1:a0:f6:46:c3:67:37:19:0c:ac:99:ec:c8:40: c3:a2:35:e0:97:a5:38:e2:79:e6:18:bb:99:45:5e: 98:db:56:12:2d:e5:d7:d8:fe:d9:14:37:07:f1:d1: 89:e0:7e:e5:ff:ed:60:d8:81:82:92:f0:76:55:b3: 65:3a:29:6c:3d:d0:03:13:49:60:6c:e1:77:1f:5f: 1a:87:e0:fe:bd:3c:c5:3c:25:7e:5e:e2:ed:73:94: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:70:09:A6:77:00:A9:A8:CC:FF:E4:82:48:4E:F0:31:B6:B2:83:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b7:bd:50:73:37:39:10:62:6d:dd:2a:05:e5:1d:66:33:d3: 0a:5e:68:d8:2f:17:d5:50:ef:6f:15:60:94:fd:53:84:d7:79: 91:46:00:e6:f7:8f:ee:8e:f0:59:98:50:62:2e:2f:b1:9e:cc: 35:a2:00:49:84:5d:e2:f3:ac:87:39:d4:16:fe:c6:c5:c1:8c: 36:e3:a8:66:de:b7:86:5b:a2:2d:27:16:75:c6:a6:60:4d:6e: 82:79:0f:a7:73:dd:a6:0e:fb:6d:0a:e2:12:dc:2d:ba:08:bf: d7:aa:53:93:5c:09:0b:9a:12:6c:e3:b8:28:b7:17:9a:64:89: 9c:ff:ce:ec:63:fe:44:d1:0f:c3:00:47:c5:f0:e3:bd:a3:1c: 32:be:5a:a0:e5:63:db:50:24:41:bb:73:78:36:05:f8:56:c1: 43:98:7c:42:9e:ae:58:e2:95:99:4b:92:77:a2:54:d3:66:8d: b9:8d:ed:b2:49:22:18:41:28:03:d5:15:24:28:53:79:44:db: 8d:96:f6:11:1e:61:cb:39:4a:83:a0:6b:95:b2:f5:2b:55:bd: f3:41:2f:cd:79:6b:2b:ce:9c:4c:33:4e:80:eb:53:cb:19:81: f4:8c:c5:f5:30:d4:cc:a9:30:a5:d7:11:66:9c:e7:5d:84:4f: 53:56:f7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJKqSjNBGSDztYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk MzU2ZjBkNWYtYzBmNS00N2NmLWJhMWMtYThlOGMyMTM1NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL2CttbkzaieEM5s82+kk99dqHOw5z7TDOJv MTeoQgPyRohipq7ZxhllroxgXdM2Czp2e62a/lywxmHjzT8Ok/hcqdnzghE4Vc/9 Xm2Yahkg5B6Wnb5ZDOzpuRt9RMRPCDD4O4wwHnK+vtpciz/2jv9uaZTfl17YLSGq Ib7/PbkoIambIr0zWonI8F8LaGjeOY48n7bKv6KiVConwmTHqLIhIRP1waD2RsNn NxkMrJnsyEDDojXgl6U44nnmGLuZRV6Y21YSLeXX2P7ZFDcH8dGJ4H7l/+1g2IGC kvB2VbNlOilsPdADE0lgbOF3H18ah+D+vTzFPCV+XuLtc5QMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxwCaZ3AKmozP/kgkhO8DG2soPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODY4OWY3NzYtNTY1OC0z Y2I4LWFmZjAtYTgxMGEyODA2ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS3vVBzNzkQYm3dKgXlHWYz0wpeaNgvF9VQ728VYJT9U4TXeZFGAOb3 j+6O8FmYUGIuL7GezDWiAEmEXeLzrIc51Bb+xsXBjDbjqGbet4Zboi0nFnXGpmBN boJ5D6dz3aYO+20K4hLcLboIv9eqU5NcCQuaEmzjuCi3F5pkiZz/zuxj/kTRD8MA R8Xw472jHDK+WqDlY9tQJEG7c3g2BfhWwUOYfEKerljilZlLkneiVNNmjbmN7bJJ IhhBKAPVFSQoU3lE242W9hEeYcs5SoOga5Wy9StVvfNBL815ayvOnEwzToDrU8sZ gfSMxfUw1MypMKXXEWac512ET1NW9/M= -----END CERTIFICATE-----Generated at Sat Jul 18 00:49:50 2026 by rpki-client