$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa File: d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa (raw, json) Hash identifier: 30Exop0g+ChNaDaMbWXVuv3vRPl9RWqKDTRE93XvZG8= Subject key identifier: ED:ED:D6:6D:A0:8C:61:91:71:62:9B:F8:B6:BB:FF:C0:52:00:E5:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877B97AC1B745587CDEC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.21.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7b:97:ac:1b:74:55:87:cd:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=903265fb-0041-4257-a3d7-01855f621a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:37:5b:c5:5b:63:d4:72:9c:c6:60:1d:b7: 3e:f0:6b:13:50:f9:78:4b:f9:64:cc:0a:ba:80:c2: 9d:18:24:ad:c3:39:76:68:d1:de:c4:3b:ff:1e:92: fa:0d:a7:b2:86:97:01:01:98:a6:bf:0e:2f:19:ec: 58:3e:49:98:09:a5:68:39:7e:4a:38:ed:3a:2c:a2: 2a:3a:85:3c:5f:69:07:b8:ec:a8:3d:ca:00:c6:8e: 03:96:92:af:d1:32:7e:1d:33:22:b4:04:12:52:7b: 53:10:3a:8d:4c:8b:40:86:4b:65:c6:50:ed:aa:d9: 1a:bf:88:f1:53:41:a7:3e:96:e5:32:b1:ba:03:3b: 5c:f4:6a:3d:14:7f:29:9f:01:d8:e2:23:e2:e3:6a: 95:ee:fe:28:66:56:55:24:84:85:06:33:7b:50:fe: 0c:dd:33:f2:aa:29:95:4f:c3:83:02:31:3a:84:56: b5:ad:0e:93:9c:4c:c1:41:13:a8:c1:cd:43:f6:b5: 4a:2b:53:3d:40:12:92:8b:ed:63:00:9a:a8:65:4b: d0:06:d9:ec:38:01:2b:7f:a1:de:43:aa:d6:bc:bc: ed:f6:cd:5d:27:37:45:d2:33:ca:cc:c0:2c:32:9d: e7:4f:78:97:46:61:88:1e:84:cd:5d:c6:6e:a7:bc: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:ED:D6:6D:A0:8C:61:91:71:62:9B:F8:B6:BB:FF:C0:52:00:E5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:05:55:9f:7d:b8:f4:98:e6:5d:74:e5:88:a0:5f:f1:01:41: 27:ce:df:03:cc:da:02:63:19:1c:c3:85:ce:10:5b:77:fb:26: dd:2b:51:34:7b:9d:63:81:34:f9:91:2b:4e:5f:97:4d:c8:c4: 7c:39:59:9f:19:05:b9:12:50:fa:ed:39:02:8b:5c:88:6a:1b: 75:27:2d:25:88:cf:7c:81:2b:84:9e:c4:1f:fa:88:e8:61:53: c4:49:9a:39:a9:0a:60:b3:88:5b:65:77:85:f7:4d:4a:27:66: a0:b7:6a:6d:f0:97:26:e7:e8:59:04:d9:75:ca:72:7e:a8:cc: a3:64:d2:c0:cc:33:dd:e7:26:48:c1:04:65:c9:34:ce:63:3e: d6:18:48:58:5a:6d:fb:34:aa:de:50:4b:c3:4f:2e:7b:90:9c: 0c:aa:36:ca:8a:5a:be:a5:dd:7b:09:03:33:13:83:3d:90:9b: 9a:c4:b2:8f:6f:50:fb:08:b9:49:dc:ef:24:29:cd:01:0b:79: ad:0e:34:a7:23:0d:e7:2a:e2:cf:f7:31:3e:62:9a:01:d5:7c: f7:1c:d6:e5:11:19:8e:71:91:f2:f3:9b:32:91:e2:96:67:57: 13:3f:71:ba:ca:77:16:31:18:a1:04:d4:f9:c0:3e:b5:cd:8c: bb:43:9f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3uXrBt0VYfN7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OTAzMjY1ZmItMDA0MS00MjU3LWEzZDctMDE4NTVmNjIxYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTk3W8VbY9RynMZgHbc+8GsTUPl4S/lkzAq6 gMKdGCStwzl2aNHexDv/HpL6DaeyhpcBAZimvw4vGexYPkmYCaVoOX5KOO06LKIq OoU8X2kHuOyoPcoAxo4DlpKv0TJ+HTMitAQSUntTEDqNTItAhktlxlDtqtkav4jx U0GnPpblMrG6Aztc9Go9FH8pnwHY4iPi42qV7v4oZlZVJISFBjN7UP4M3TPyqimV T8ODAjE6hFa1rQ6TnEzBQROowc1D9rVKK1M9QBKSi+1jAJqoZUvQBtnsOAErf6He Q6rWvLzt9s1dJzdF0jPKzMAsMp3nT3iXRmGIHoTNXcZup7xnhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3t1m2gjGGRcWKb+La7/8BSAOUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDIyOGFlNmUtNjZkOC0z MjMwLWFkMzAtMTJkNmJmYTU0NGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUFVZ99uPSY5l105YigX/EBQSfO3wPM2gJjGRzDhc4QW3f7Jt0rUTR7 nWOBNPmRK05fl03IxHw5WZ8ZBbkSUPrtOQKLXIhqG3UnLSWIz3yBK4SexB/6iOhh U8RJmjmpCmCziFtld4X3TUonZqC3am3wlybn6FkE2XXKcn6ozKNk0sDMM93nJkjB BGXJNM5jPtYYSFhabfs0qt5QS8NPLnuQnAyqNsqKWr6l3XsJAzMTgz2Qm5rEso9v UPsIuUnc7yQpzQELea0ONKcjDecq4s/3MT5imgHVfPcc1uURGY5xkfLzmzKR4pZn VxM/cbrKdxYxGKEE1PnAPrXNjLtDn7g= -----END CERTIFICATE-----Generated at Tue Sep 22 09:37:35 2026 by rpki-client