$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa File: c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa (raw, json) Hash identifier: Xj33tk4eFeGWIJYV5ojLhifCAmmNxzF3Xjg23flaJS4= Subject key identifier: F8:98:50:F7:52:42:32:1D:C6:71:07:02:4C:47:6E:B8:59:DB:2B:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877ABA78E9FA841E41EB40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.20.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7a:ba:78:e9:fa:84:1e:41:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=1fede868-a246-4a21-98c6-087010e43ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:64:ba:25:60:b6:16:83:17:56:d5:b9:1f: d6:cd:da:3b:07:3b:c0:20:38:bf:40:04:3d:dc:55: 80:9f:87:16:44:51:f3:60:5c:31:a6:6a:ce:44:f1: 4d:7c:4c:2a:af:9c:4b:19:f4:e5:00:39:91:75:9a: f9:01:87:d2:da:18:15:77:c9:be:df:7f:01:ce:30: 37:c9:56:5d:11:a3:fd:70:2e:6c:67:f0:2b:38:d8: 33:3e:78:3b:c0:64:ca:e3:98:4a:87:4c:2b:32:61: 03:ef:6a:0f:00:5e:58:7e:02:df:73:54:ec:a6:55: 42:14:6c:86:a3:d4:fa:1f:6e:cd:54:49:93:ee:ea: 2c:f9:ce:d1:7c:70:fc:d3:72:6c:af:08:ab:36:e8: c9:f4:fc:e5:a8:8f:c4:7a:a8:0e:c2:e0:1f:7f:e5: f7:52:82:96:65:63:45:cb:fe:4a:0b:96:a4:c3:4c: 59:55:04:b5:10:9c:0f:2e:ad:60:b6:1a:25:a4:35: 20:ea:c5:65:03:a2:e5:94:54:cf:17:1c:66:5d:13: 3b:51:2e:21:5a:6d:36:f2:72:ea:a1:19:7b:4c:6a: 20:c4:a4:a8:c2:34:f8:a5:01:ed:6d:3c:57:a8:77: 1a:87:06:f5:1a:48:7e:21:ae:da:6d:83:f5:0d:81: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:98:50:F7:52:42:32:1D:C6:71:07:02:4C:47:6E:B8:59:DB:2B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:9c:39:24:85:ef:a1:36:db:4a:6e:7c:bb:36:1a:24:9d:58: e8:d6:e0:a7:f5:96:32:4c:03:ed:bb:14:6b:ba:78:36:5f:bd: 42:cd:66:ac:dc:75:fe:7f:a3:dc:4b:50:8e:88:7f:8e:94:a4: e8:84:d3:73:a5:e0:ad:f3:26:6d:5d:b5:4d:d4:27:61:5b:bc: e8:68:2f:2a:61:75:8e:4f:02:27:1b:1a:99:6e:72:bf:7b:92: c7:25:5a:93:70:25:b0:c0:e0:5a:36:52:b2:ac:e2:0f:e9:0d: b8:05:83:6c:96:aa:4e:1e:07:8a:45:85:d4:d2:d8:68:ed:aa: 68:c8:18:43:a9:db:62:a2:53:39:f8:98:36:06:d3:41:bc:03: 33:d0:d7:69:93:9f:b7:8b:b6:34:dc:c6:da:1d:d2:e5:08:a8: 79:3c:a9:56:aa:44:3c:4e:70:a1:4a:31:85:a0:07:54:16:77: da:71:b9:58:20:f1:b1:a4:76:e8:b1:fc:a8:67:07:4b:ae:f7: 7d:2f:ae:f5:a3:23:e6:26:6e:51:1b:b6:60:2a:c5:56:13:2c: 26:70:f1:5b:c6:59:5f:79:b9:de:3d:76:c7:48:54:60:61:a6: 52:af:b4:83:89:11:7d:3c:6f:a5:06:02:9b:b9:45:0f:21:ad: 4a:a8:7b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3q6eOn6hB5B60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MWZlZGU4NjgtYTI0Ni00YTIxLTk4YzYtMDg3MDEwZTQzYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+9kuiVgthaDF1bVuR/Wzdo7BzvAIDi/QAQ9 3FWAn4cWRFHzYFwxpmrORPFNfEwqr5xLGfTlADmRdZr5AYfS2hgVd8m+338BzjA3 yVZdEaP9cC5sZ/ArONgzPng7wGTK45hKh0wrMmED72oPAF5YfgLfc1TsplVCFGyG o9T6H27NVEmT7uos+c7RfHD803JsrwirNujJ9PzlqI/EeqgOwuAff+X3UoKWZWNF y/5KC5akw0xZVQS1EJwPLq1gtholpDUg6sVlA6LllFTPFxxmXRM7US4hWm028nLq oRl7TGogxKSowjT4pQHtbTxXqHcahwb1Gkh+Ia7abYP1DYGBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiYUPdSQjIdxnEHAkxHbrhZ2ysaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzI0Y2Y4OTctMzIyMS0z NTgzLWE2ZjgtOTdkNmEyYTZlYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJycOSSF76E220pufLs2GiSdWOjW4Kf1ljJMA+27FGu6eDZfvULNZqzc df5/o9xLUI6If46UpOiE03Ol4K3zJm1dtU3UJ2FbvOhoLyphdY5PAicbGplucr97 ksclWpNwJbDA4Fo2UrKs4g/pDbgFg2yWqk4eB4pFhdTS2GjtqmjIGEOp22KiUzn4 mDYG00G8AzPQ12mTn7eLtjTcxtod0uUIqHk8qVaqRDxOcKFKMYWgB1QWd9pxuVgg 8bGkduix/KhnB0uu930vrvWjI+YmblEbtmAqxVYTLCZw8VvGWV95ud49dsdIVGBh plKvtIOJEX08b6UGApu5RQ8hrUqoe2A= -----END CERTIFICATE-----Generated at Tue Sep 22 12:59:01 2026 by rpki-client