$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aaf23d9b-6caa-3330-8968-33a5c0cb1c37.roa File: aaf23d9b-6caa-3330-8968-33a5c0cb1c37.roa (raw, json) Hash identifier: foxP4AilFi7BF6MgfKtu5bYVLkET073NvKMEqEVPv64= Subject key identifier: 12:E0:73:86:3A:0F:4C:FA:47:3C:5B:D4:5E:1C:5F:40:AC:B7:9C:AD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877A748C6F911F8E2503C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aaf23d9b-6caa-3330-8968-33a5c0cb1c37.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.18.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7a:74:8c:6f:91:1f:8e:25:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=e5bb4baa-2679-4f32-bff1-2d3aa9bae599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:29:7f:da:3c:bc:bc:9b:ab:d8:6a:cc:e7: 5e:da:f0:fb:4a:d5:53:31:a3:46:3a:b9:dd:5c:93: 73:1f:61:a8:7c:df:45:da:47:47:21:f3:30:30:3b: 93:4e:e7:12:5e:5d:00:cc:e7:21:f7:35:f1:4c:eb: ec:5b:44:14:da:cf:b3:52:8c:9c:dd:1e:bd:75:46: 44:ca:92:98:40:8c:3a:d1:a5:56:34:31:be:54:2e: 45:10:41:88:26:3c:28:5c:2a:81:65:f8:db:b4:01: e8:90:53:07:ac:81:56:ef:59:0c:84:90:a5:18:13: a1:58:4c:a9:0f:29:69:58:94:1b:e4:90:5e:18:6f: 50:cd:c5:0c:d2:57:02:14:f9:59:2b:e0:74:71:75: f6:c1:06:1d:df:1d:9a:19:bf:93:9c:92:88:bd:97: ac:a7:c6:69:93:30:cd:6f:08:cd:70:09:06:69:ff: ee:91:f2:32:de:74:bc:12:80:a4:ab:d1:e5:52:79: 31:54:73:9c:22:3e:be:ce:b6:5b:f0:47:ae:14:df: eb:db:b0:63:ed:5a:d4:7a:7d:d4:04:c6:ac:8b:2a: f7:20:79:cb:f6:25:1f:3a:8f:77:cb:f3:fc:c3:33: 0c:1e:cd:99:b3:9d:4d:d2:5d:df:e6:fc:f6:98:3c: 60:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:73:86:3A:0F:4C:FA:47:3C:5B:D4:5E:1C:5F:40:AC:B7:9C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aaf23d9b-6caa-3330-8968-33a5c0cb1c37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e1:b1:2c:74:52:9a:50:c3:15:38:57:e4:6a:36:27:10:e3: 86:ff:b2:5b:ce:b6:c2:a8:4b:c4:82:eb:0e:2d:4a:a8:bb:38: f6:4f:72:9e:c4:6e:7c:be:7d:21:7c:dd:5b:14:08:20:65:fa: 5b:23:40:78:85:95:55:d9:58:a6:02:e5:1e:47:88:d3:20:95: af:4e:e2:9d:08:87:aa:3f:5b:c7:95:67:3d:48:61:5a:96:3e: dd:30:fd:f5:5d:15:64:61:6d:6c:1c:5a:98:35:6f:12:c4:28: f9:bc:8a:d6:25:d5:03:65:c1:62:60:09:51:dd:31:bb:89:c7: e1:56:0c:c7:b2:43:eb:69:bf:26:cc:60:6b:ba:3e:90:7c:05: d7:c9:a8:92:8e:d7:1c:ce:d8:42:aa:1b:d8:f3:e5:a7:8a:73: 38:5c:89:81:fa:77:05:f3:77:e5:a3:0b:4b:e2:5b:9e:aa:69: 15:86:0c:2c:49:ec:f8:4a:02:c4:fe:b4:61:ab:09:89:16:ef: 05:17:a4:5e:ea:9a:e1:29:17:48:19:f0:47:c8:5f:39:5c:3a: ea:09:2b:98:69:67:10:0a:7e:b2:25:26:5c:1c:70:0c:70:e5: de:12:14:ae:62:a8:25:52:ee:96:ff:2a:6e:19:a5:15:9d:3a: c6:b7:18:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3p0jG+RH44lA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTViYjRiYWEtMjY3OS00ZjMyLWJmZjEtMmQzYWE5YmFlNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlgpf9o8vLybq9hqzOde2vD7StVTMaNGOrnd XJNzH2GofN9F2kdHIfMwMDuTTucSXl0AzOch9zXxTOvsW0QU2s+zUoyc3R69dUZE ypKYQIw60aVWNDG+VC5FEEGIJjwoXCqBZfjbtAHokFMHrIFW71kMhJClGBOhWEyp DylpWJQb5JBeGG9QzcUM0lcCFPlZK+B0cXX2wQYd3x2aGb+TnJKIvZesp8ZpkzDN bwjNcAkGaf/ukfIy3nS8EoCkq9HlUnkxVHOcIj6+zrZb8EeuFN/r27Bj7VrUen3U BMasiyr3IHnL9iUfOo93y/P8wzMMHs2Zs51N0l3f5vz2mDxgWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLgc4Y6D0z6Rzxb1F4cX0Cst5ytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFmMjNkOWItNmNhYS0z MzMwLTg5NjgtMzNhNWMwY2IxYzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHhsSx0UppQwxU4V+RqNicQ44b/slvOtsKoS8SC6w4tSqi7OPZPcp7E bny+fSF83VsUCCBl+lsjQHiFlVXZWKYC5R5HiNMgla9O4p0Ih6o/W8eVZz1IYVqW Pt0w/fVdFWRhbWwcWpg1bxLEKPm8itYl1QNlwWJgCVHdMbuJx+FWDMeyQ+tpvybM YGu6PpB8BdfJqJKO1xzO2EKqG9jz5aeKczhciYH6dwXzd+WjC0viW56qaRWGDCxJ 7PhKAsT+tGGrCYkW7wUXpF7qmuEpF0gZ8EfIXzlcOuoJK5hpZxAKfrIlJlwccAxw 5d4SFK5iqCVS7pb/Km4ZpRWdOsa3GLY= -----END CERTIFICATE-----Generated at Tue Sep 22 19:07:04 2026 by rpki-client