$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa File: d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa (raw, json) Hash identifier: xU6Q4vOKPlDDYPawvIasKTlBxAzDgGWWdBUQULNJ9DQ= Subject key identifier: A3:AE:D2:16:85:7C:8B:54:19:00:FE:07:A6:72:54:8B:52:58:E3:02 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F8DD87EF1293BAC892E2D5580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 104.21.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:7e:f1:29:3b:ac:89:2e:2d:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=98a0eb6b-2d24-4bdd-8009-3770b43764b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:9f:af:24:fc:f6:03:3c:0a:f6:7c:29:64: 0b:a5:97:91:da:d3:8b:12:32:db:7a:bc:04:ed:c9: cc:06:c3:ac:0d:cb:96:b7:d6:ff:3a:a2:99:21:d9: 17:4d:2f:78:bf:37:6e:71:06:c3:5f:a4:fe:ef:e1: 57:ac:4f:6d:12:10:d9:3a:0b:49:73:29:35:97:49: 52:d7:30:b6:17:5b:cd:d4:66:be:d7:28:44:5d:ac: a1:57:7c:6a:63:dd:54:9a:6c:12:82:e3:2d:bd:85: c0:9a:7e:5d:cd:f4:a6:1f:58:83:dc:4f:97:52:ef: 18:ca:ac:f1:62:77:c5:28:a8:7f:89:89:7d:68:74: 4a:53:52:c9:a2:17:74:ec:8b:7f:a2:97:ad:ed:0c: 7f:cb:16:67:65:5b:56:4a:46:f3:18:64:89:68:c3: a7:df:bb:be:5e:d5:82:0b:b9:ce:bd:24:a0:05:8d: a8:63:23:f5:08:f1:e1:62:24:26:95:ee:f7:e6:d4: 4a:2d:08:7d:90:f6:a5:1a:50:aa:e3:40:77:8d:5d: a8:e1:e3:3d:a9:00:98:96:d0:06:ba:15:73:64:5f: 1c:4a:69:e7:46:6f:ba:4d:94:f7:24:50:ba:6a:47: b3:4e:72:b2:13:43:f2:5f:da:50:49:73:33:0f:7c: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AE:D2:16:85:7C:8B:54:19:00:FE:07:A6:72:54:8B:52:58:E3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:de:76:5a:d0:7c:e9:92:1e:c3:d2:ed:6d:09:8e:5e:fd:e5: 87:15:64:9a:ce:1e:82:df:52:10:1a:f6:3e:32:b8:e3:7e:d4: 18:0a:44:b9:00:19:3d:6e:54:41:d8:1a:05:b6:a0:8f:84:4d: 0c:74:19:88:b9:fc:2a:91:65:db:7e:a3:2d:6f:9c:c0:8e:c1: ab:ed:e7:09:07:9e:a0:ff:a5:d9:43:03:07:28:f6:5e:94:c4: ee:95:7c:cd:8e:8f:92:76:0d:a7:ba:35:81:4f:03:43:1d:3b: fc:2f:8b:b2:b7:b5:a1:84:e0:3d:98:57:1b:06:67:4e:be:3e: 4a:25:44:52:04:79:d1:2c:6b:6c:23:a0:87:cd:9a:83:0e:0a: 8c:5f:16:26:4a:f9:23:6e:fd:50:f6:6b:f6:59:3a:7e:d7:8b: 69:9b:5c:88:1c:51:7c:7e:cb:e3:e3:f1:69:e8:11:5a:72:13: 7e:2c:d7:57:88:ef:b8:c3:63:9d:48:df:ed:75:88:bc:54:a8: bc:12:e5:71:e6:22:d7:27:a2:9e:6f:b6:72:f1:37:ae:48:99: 77:2e:97:4d:e5:15:42:ef:6e:6f:51:26:a0:65:cf:1c:1d:78: dd:df:38:1b:fd:38:72:a6:fa:e2:26:e4:3d:d6:96:ac:80:40: d9:1b:99:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2H7xKTusiS4tVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk OThhMGViNmItMmQyNC00YmRkLTgwMDktMzc3MGI0Mzc2NGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk76fryT89gM8CvZ8KWQLpZeR2tOLEjLberwE 7cnMBsOsDcuWt9b/OqKZIdkXTS94vzducQbDX6T+7+FXrE9tEhDZOgtJcyk1l0lS 1zC2F1vN1Ga+1yhEXayhV3xqY91UmmwSguMtvYXAmn5dzfSmH1iD3E+XUu8Yyqzx YnfFKKh/iYl9aHRKU1LJohd07It/opet7Qx/yxZnZVtWSkbzGGSJaMOn37u+XtWC C7nOvSSgBY2oYyP1CPHhYiQmle735tRKLQh9kPalGlCq40B3jV2o4eM9qQCYltAG uhVzZF8cSmnnRm+6TZT3JFC6akezTnKyE0PyX9pQSXMzD3xp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOu0haFfItUGQD+B6ZyVItSWOMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDUzMTVlYzAtODIyOS0z ZGE3LWFiYmQtYWI4Y2VkZjliYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXedlrQfOmSHsPS7W0Jjl795YcVZJrOHoLfUhAa9j4yuON+1BgKRLkA GT1uVEHYGgW2oI+ETQx0GYi5/CqRZdt+oy1vnMCOwavt5wkHnqD/pdlDAwco9l6U xO6VfM2Oj5J2Dae6NYFPA0MdO/wvi7K3taGE4D2YVxsGZ06+PkolRFIEedEsa2wj oIfNmoMOCoxfFiZK+SNu/VD2a/ZZOn7Xi2mbXIgcUXx+y+Pj8WnoEVpyE34s11eI 77jDY51I3+11iLxUqLwS5XHmItcnop5vtnLxN65ImXcul03lFULvbm9RJqBlzxwd eN3fOBv9OHKm+uIm5D3WlqyAQNkbmXw= -----END CERTIFICATE-----Generated at Sat Oct 24 19:08:10 2026 by rpki-client