$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa File: da9a4408-8b68-391a-8e54-a150697293fa.roa (raw, json) Hash identifier: cI3fb06MQX1Vtt5a30vrjx26mZoxXk0D78Y5cejanOU= Subject key identifier: 4A:27:72:18:06:2E:10:C6:94:0D:CE:C8:91:E8:03:25:F7:6B:66:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877215157813C4A8C060C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.31.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:72:15:15:78:13:c4:a8:c0:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=d1146eab-6a41-4d0f-8bfb-bd471e570f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:64:e4:7e:69:d9:f1:20:09:de:6c:1d:e7: cc:f3:47:dc:16:78:93:be:da:45:b6:da:51:c9:1e: 0f:95:4b:77:1b:5d:c6:c3:9d:35:ac:20:c2:d8:df: 9c:84:ce:91:f1:e6:81:a5:05:4a:09:f2:6d:cd:5c: 3e:d3:4e:a6:68:88:b2:40:f3:4d:8f:3b:f2:65:68: 64:07:a0:96:12:f7:b7:23:b2:90:a7:93:22:f7:06: 06:dc:cb:77:91:ad:bc:42:b2:a5:08:c8:af:e0:bb: e4:29:0d:f2:2e:cf:be:d6:4b:84:3b:b3:d2:4c:65: 28:48:d6:ab:c0:2d:c9:8c:24:1a:33:30:01:77:ab: 82:2c:73:23:4f:19:4a:49:f1:6a:d8:9e:ec:e0:41: 7a:f0:59:82:b8:b5:f3:94:8f:ea:44:83:c3:f6:ba: 05:f8:bc:40:6d:d3:1e:ec:1a:46:c2:13:77:11:ab: a6:d0:c4:e3:66:2c:f5:34:bc:ee:97:43:a7:00:04: a6:d3:79:90:ba:9e:dc:da:c0:74:2c:78:28:ac:26: 2f:8f:59:1b:57:5e:d2:27:2a:a2:55:e5:f0:9c:a9: 0f:6f:e7:cd:cc:37:f9:b5:98:1b:36:ca:4c:8b:04: c4:18:2d:d7:00:8a:4e:8c:4b:33:bd:28:e1:58:7d: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:27:72:18:06:2E:10:C6:94:0D:CE:C8:91:E8:03:25:F7:6B:66:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e1:33:a5:2a:07:ac:60:ad:24:b9:df:1b:a9:d3:d5:e8:f7: a9:8c:fc:7e:ac:33:ad:25:13:ae:d4:2d:fa:a9:50:8d:1c:35: d1:76:24:90:20:98:ba:05:32:6f:49:a4:2b:30:72:a2:52:71: 80:81:ec:1a:09:3e:fb:77:8f:a4:d2:43:e8:e8:af:45:06:a9: 57:18:03:8d:12:7d:28:ff:31:2d:ca:d7:03:2f:64:f7:da:ed: af:a3:e0:b5:5d:40:96:61:36:ee:5a:10:ee:d7:e5:db:59:3a: bd:87:dd:6c:d1:70:21:b7:ea:e8:ea:d3:21:47:15:c7:21:c4: 39:c0:24:97:af:1d:46:08:c8:b7:4a:e9:38:80:9a:29:3e:0d: 97:4a:4d:d7:fb:09:36:8a:84:1c:ff:a6:ab:c3:bc:7f:2d:a0: 66:d5:14:0f:44:bd:4f:c5:4f:93:46:08:bc:37:f2:e6:3f:52: 7b:89:a5:30:3f:09:15:46:fc:b7:88:34:d0:46:53:1f:7d:9f: 41:1e:ca:6b:b2:95:c9:e2:ee:96:b0:ba:bb:0f:28:da:64:49: 42:06:d1:84:85:c2:dc:79:d0:86:fb:4d:0f:c3:e5:b5:60:0a: b6:d7:bf:c8:93:15:39:63:30:9c:1b:31:b6:34:46:e2:50:8b: d0:3b:37:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3IVFXgTxKjAYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDExNDZlYWItNmE0MS00ZDBmLThiZmItYmQ0NzFlNTcwZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmNk5H5p2fEgCd5sHefM80fcFniTvtpFttpR yR4PlUt3G13Gw501rCDC2N+chM6R8eaBpQVKCfJtzVw+006maIiyQPNNjzvyZWhk B6CWEve3I7KQp5Mi9wYG3Mt3ka28QrKlCMiv4LvkKQ3yLs++1kuEO7PSTGUoSNar wC3JjCQaMzABd6uCLHMjTxlKSfFq2J7s4EF68FmCuLXzlI/qRIPD9roF+LxAbdMe 7BpGwhN3Eaum0MTjZiz1NLzul0OnAASm03mQup7c2sB0LHgorCYvj1kbV17SJyqi VeXwnKkPb+fNzDf5tZgbNspMiwTEGC3XAIpOjEszvSjhWH0YhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEonchgGLhDGlA3OyJHoAyX3a2ZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE5YTQ0MDgtOGI2OC0z OTFhLThlNTQtYTE1MDY5NzI5M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbhM6UqB6xgrSS53xup09Xo96mM/H6sM60lE67ULfqpUI0cNdF2JJAg mLoFMm9JpCswcqJScYCB7BoJPvt3j6TSQ+jor0UGqVcYA40SfSj/MS3K1wMvZPfa 7a+j4LVdQJZhNu5aEO7X5dtZOr2H3WzRcCG36ujq0yFHFcchxDnAJJevHUYIyLdK 6TiAmik+DZdKTdf7CTaKhBz/pqvDvH8toGbVFA9EvU/FT5NGCLw38uY/UnuJpTA/ CRVG/LeINNBGUx99n0Eeymuylcni7pawursPKNpkSUIG0YSFwtx50Ib7TQ/D5bVg CrbXv8iTFTljMJwbMbY0RuJQi9A7N/M= -----END CERTIFICATE-----Generated at Tue Sep 22 13:19:23 2026 by rpki-client