$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa File: ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa (raw, json) Hash identifier: 0qvoUGs9QIZdfjM+cT1QTL3ARAD0NLP9frwv6+NPBMs= Subject key identifier: 52:D8:71:0C:F7:81:0D:F7:F2:9C:A8:A3:BE:EC:C7:A5:FB:F0:E5:DC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877A973BA63E1C690C8500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.19.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7a:97:3b:a6:3e:1c:69:0c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=fd55fe91-3edf-48e7-8e1e-7f0b9669f943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:13:bc:47:cc:fe:ab:a4:fc:59:02:dc:29:74: 81:3a:94:fc:3f:42:91:9b:ac:fa:38:81:4a:ba:11: 4c:ba:ad:c6:12:e4:d5:7c:31:07:3f:84:a7:62:f0: 36:6b:99:58:ee:1e:54:b3:6e:a9:94:0b:35:aa:2f: 4b:66:95:dd:ab:7b:60:c7:02:f1:a6:44:d4:5b:0a: aa:5f:4c:2e:4e:21:db:2a:67:f0:d1:7e:36:d9:83: 7d:46:c8:cb:80:d2:e7:de:5e:d6:17:00:b9:13:28: d1:99:3b:d8:3e:94:73:c3:08:0a:14:8e:ec:88:82: 3a:70:c7:9e:42:97:f4:6f:ca:0c:25:e9:20:49:19: 35:23:66:3a:1c:6a:f1:d4:ce:67:ff:ba:5e:76:8f: d0:cf:0e:c6:ad:e2:29:53:d7:70:e4:22:9b:e7:bd: 6e:28:6a:17:c5:fb:b9:d5:ba:03:52:a4:9d:14:84: a5:c1:b5:33:df:b9:fd:c8:61:f1:1a:e5:e6:f7:b6: 54:9b:61:b2:8e:15:4e:6a:36:b0:98:9d:21:03:81: b1:65:17:29:3c:c6:38:31:84:05:ba:d7:ab:8f:7b: 81:28:a3:b4:ef:64:70:26:c0:18:26:b9:4c:af:97: b6:cc:a6:6b:0e:05:3d:fe:c5:12:b6:e3:03:0f:75: 77:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:71:0C:F7:81:0D:F7:F2:9C:A8:A3:BE:EC:C7:A5:FB:F0:E5:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9c:9b:11:46:73:9f:cc:ba:3f:5f:63:53:cf:1e:e4:ab:61: 69:92:f2:5d:06:ea:0a:16:f9:20:b3:26:33:06:c6:31:7e:db: 29:85:7b:86:1a:d1:bc:b4:b1:b1:65:e0:52:a8:33:ce:a7:b2: f6:24:44:5b:09:c4:35:2c:db:79:c8:64:be:b8:3e:d3:86:8c: b2:f1:87:b3:fa:1c:b2:63:58:2c:74:43:48:db:3f:03:ea:7f: 23:f3:d2:1b:19:b0:7e:3d:85:51:70:2f:68:55:bb:e9:4e:4c: e0:40:95:66:52:68:cd:14:5c:00:9c:c9:f1:62:56:44:c5:11: bb:a1:25:bd:8c:64:d9:96:0c:f2:ca:ef:3f:7d:cf:c7:70:e2: 11:0b:32:03:50:15:92:43:11:d5:5c:d6:8c:73:43:ef:b6:f9: 13:d4:39:d5:d7:a7:9d:24:37:c7:53:19:99:35:15:ed:95:01: f2:77:5b:6c:69:86:a8:35:32:de:3c:84:54:d9:38:31:91:3f: f9:84:0e:79:56:d3:d9:17:9c:d7:8d:db:81:4c:3f:58:af:27: 01:1f:2a:5b:dd:56:0a:78:31:d1:24:cc:78:86:ff:8f:62:b1: 5e:5c:37:84:8c:0a:9c:02:c7:cb:50:5a:5a:ae:00:dd:54:6c: b9:91:04:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3qXO6Y+HGkMhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ1NWZlOTEtM2VkZi00OGU3LThlMWUtN2YwYjk2NjlmOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xO8R8z+q6T8WQLcKXSBOpT8P0KRm6z6OIFK uhFMuq3GEuTVfDEHP4SnYvA2a5lY7h5Us26plAs1qi9LZpXdq3tgxwLxpkTUWwqq X0wuTiHbKmfw0X422YN9RsjLgNLn3l7WFwC5EyjRmTvYPpRzwwgKFI7siII6cMee Qpf0b8oMJekgSRk1I2Y6HGrx1M5n/7pedo/Qzw7GreIpU9dw5CKb571uKGoXxfu5 1boDUqSdFISlwbUz37n9yGHxGuXm97ZUm2GyjhVOajawmJ0hA4GxZRcpPMY4MYQF uterj3uBKKO072RwJsAYJrlMr5e2zKZrDgU9/sUStuMDD3V3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLYcQz3gQ338pyoo77sx6X78OXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmY0M2JiMjItNDEwMS0z OWZiLWEwZGYtMmUwZDBiM2FhMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGcmxFGc5/Muj9fY1PPHuSrYWmS8l0G6goW+SCzJjMGxjF+2ymFe4Ya 0by0sbFl4FKoM86nsvYkRFsJxDUs23nIZL64PtOGjLLxh7P6HLJjWCx0Q0jbPwPq fyPz0hsZsH49hVFwL2hVu+lOTOBAlWZSaM0UXACcyfFiVkTFEbuhJb2MZNmWDPLK 7z99z8dw4hELMgNQFZJDEdVc1oxzQ++2+RPUOdXXp50kN8dTGZk1Fe2VAfJ3W2xp hqg1Mt48hFTZODGRP/mEDnlW09kXnNeN24FMP1ivJwEfKlvdVgp4MdEkzHiG/49i sV5cN4SMCpwCx8tQWlquAN1UbLmRBOc= -----END CERTIFICATE-----Generated at Tue Sep 22 06:01:39 2026 by rpki-client