$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa File: a967e86a-5d5a-3f72-8e57-9298211b0802.roa (raw, json) Hash identifier: nWQx4dLN2UtVhIB3kghq0bkOVbyMax7KH4PtWIEL4Bs= Subject key identifier: 42:C9:0D:07:FD:64:A3:A0:A1:25:59:90:BE:0B:4B:0D:18:62:86:4B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E48249A0FC7B96471EFB35E40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.27.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:9a:0f:c7:b9:64:71:ef:b3:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=ff29b373-bdac-4127-bec0-1f93b7f9bcc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:1c:54:e1:b0:c5:bf:98:7b:35:64:0f:39: 9d:d8:f2:ea:4a:f1:47:7f:92:0e:31:a9:be:ff:8f: b0:42:ec:46:c3:cb:e1:9c:e8:f5:4e:62:eb:0b:3f: 78:76:3d:69:8e:bf:ff:b4:37:db:c5:69:fd:a3:34: 17:e1:66:68:a2:da:c6:18:12:e3:ae:04:61:3b:17: 16:ce:e5:5d:4d:74:8d:31:60:78:9c:89:ee:16:48: fc:c8:11:2d:8e:bb:cf:69:e7:f5:ed:60:ca:54:43: 94:51:62:0c:8d:e9:f2:52:bf:9f:a5:22:7c:5a:e4: 10:51:f2:45:3e:61:96:3e:ab:ac:77:d2:3a:f9:51: fe:11:e1:32:78:52:63:ca:4c:ce:e3:61:73:ce:32: 60:85:1f:32:b7:3e:06:6d:0d:94:e7:c9:bf:18:51: 29:e5:13:21:67:d5:6c:7b:13:e6:1c:3f:5c:e0:22: 00:eb:2b:4b:bc:ad:78:2f:59:c2:c0:74:5c:b4:0e: 55:75:3b:22:a3:48:ad:45:c2:1f:6f:ec:88:dd:75: b4:56:81:da:48:37:f8:02:5f:77:98:aa:51:86:ea: 4b:37:2f:b5:f2:f8:cc:63:66:de:f3:ba:cc:4d:e6: 41:8f:7a:1d:9b:8c:4f:e7:67:9c:6e:c0:ab:29:0a: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C9:0D:07:FD:64:A3:A0:A1:25:59:90:BE:0B:4B:0D:18:62:86:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:81:f7:af:8e:72:a0:4c:5e:a4:87:4b:1b:cf:31:d3:ef:76: af:0d:fc:b0:5f:d0:15:ac:20:ab:d8:15:bf:1d:68:fa:a8:43: e9:56:7f:1f:57:57:91:10:3c:e0:dd:aa:ae:84:46:c2:3f:bd: fc:27:f4:70:9c:22:32:b6:80:22:39:36:85:f7:47:1a:bb:a8: 91:b5:f6:62:0f:9d:ad:d9:0f:c7:fc:58:a3:5e:c2:7a:67:c2: 64:61:08:9f:cf:3c:39:48:8c:c3:7c:73:b0:a3:d5:3a:98:ee: f5:4c:f0:09:74:8d:86:ed:78:41:30:c9:1a:5a:e8:3c:be:fd: 1c:86:f5:ff:52:f7:9e:ab:88:d6:37:dc:c7:cf:25:b1:88:03: 40:9e:07:12:04:0c:aa:d7:85:5f:3e:3b:61:18:60:0b:ee:99: c2:fc:51:a2:1c:c5:8f:48:a7:7b:0a:c3:75:5c:60:87:ac:7b: 69:90:bc:a4:b5:18:0c:02:f4:4d:05:27:9d:49:71:e0:99:57: 8f:b1:73:4d:f0:ef:ef:44:27:f1:9a:bc:cb:6c:60:8c:a2:06: 2a:45:f1:43:01:dd:78:b8:7d:9a:de:1f:3a:5c:49:b0:2a:4a: 18:02:31:ce:6d:15:ec:d3:91:d8:2a:4d:2e:c3:d7:70:24:e9: f3:95:3f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJoPx7lkce+zXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZmYyOWIzNzMtYmRhYy00MTI3LWJlYzAtMWY5M2I3ZjliY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8ccVOGwxb+YezVkDzmd2PLqSvFHf5IOMam+ /4+wQuxGw8vhnOj1TmLrCz94dj1pjr//tDfbxWn9ozQX4WZootrGGBLjrgRhOxcW zuVdTXSNMWB4nInuFkj8yBEtjrvPaef17WDKVEOUUWIMjenyUr+fpSJ8WuQQUfJF PmGWPqusd9I6+VH+EeEyeFJjykzO42FzzjJghR8ytz4GbQ2U58m/GFEp5RMhZ9Vs exPmHD9c4CIA6ytLvK14L1nCwHRctA5VdTsio0itRcIfb+yI3XW0VoHaSDf4Al93 mKpRhupLNy+18vjMY2be87rMTeZBj3odm4xP52ecbsCrKQo2XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELJDQf9ZKOgoSVZkL4LSw0YYoZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTk2N2U4NmEtNWQ1YS0z ZjcyLThlNTctOTI5ODIxMWIwODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiB96+OcqBMXqSHSxvPMdPvdq8N/LBf0BWsIKvYFb8daPqoQ+lWfx9X V5EQPODdqq6ERsI/vfwn9HCcIjK2gCI5NoX3Rxq7qJG19mIPna3ZD8f8WKNewnpn wmRhCJ/PPDlIjMN8c7Cj1TqY7vVM8Al0jYbteEEwyRpa6Dy+/RyG9f9S956riNY3 3MfPJbGIA0CeBxIEDKrXhV8+O2EYYAvumcL8UaIcxY9Ip3sKw3VcYIese2mQvKS1 GAwC9E0FJ51JceCZV4+xc03w7+9EJ/GavMtsYIyiBipF8UMB3Xi4fZreHzpcSbAq ShgCMc5tFezTkdgqTS7D13Ak6fOVP6Q= -----END CERTIFICATE-----Generated at Sat Jul 18 00:48:27 2026 by rpki-client