$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa File: 02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa (raw, json) Hash identifier: oBDXgNx6RHFFnNS+ULcOqvTXrO8BbMn542o27i48ERE= Subject key identifier: D7:FC:5C:DB:ED:85:3C:21:62:5D:1A:EC:C6:D6:27:2E:C4:DA:0F:C5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFF292A4BF6E76CC774900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.31.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f2:92:a4:bf:6e:76:cc:77:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=332cd82f-98e4-4a52-afd3-7c1e2a23959a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:5e:11:1d:0a:69:63:99:97:2d:a6:8e:f7: da:e8:db:90:0a:a8:2b:17:80:b2:e7:ac:9a:08:49: 74:54:e3:f5:8e:1a:95:e0:3b:c0:48:a6:3c:b4:92: 7a:fa:59:fa:be:59:90:72:b1:0b:d9:0d:9a:af:d3: e5:58:2a:58:9c:ff:b9:0b:04:fa:36:38:31:7c:d5: 0f:07:25:de:3d:8c:a3:fc:4a:cb:8f:87:82:25:7e: f4:e3:2e:a8:12:ec:8a:80:6a:0b:65:4c:a1:fa:f7: c8:98:e5:23:b4:d8:b3:4b:08:1c:2b:93:f4:46:09: 30:c8:96:85:a6:89:fb:3d:67:26:d4:44:ea:91:9b: bd:13:bf:c5:25:88:58:84:6f:78:08:12:7a:6f:9d: 96:de:ff:cc:eb:9c:8b:9a:f1:75:b9:40:87:51:57: c6:b6:31:91:c5:b5:2e:18:43:80:83:23:cc:7c:5c: 52:0c:e7:c5:6f:c5:fa:ab:01:4f:88:21:56:4f:52: 87:19:b5:d0:3b:15:09:47:60:d0:57:1f:4c:9f:fa: 1d:24:95:e8:1e:3e:4b:57:4c:a8:9b:94:da:a1:52: f3:8c:ec:c4:08:11:23:32:69:3f:60:d6:0d:27:67: 2b:9a:1c:1e:86:ab:af:9a:fa:a3:55:37:18:95:7d: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FC:5C:DB:ED:85:3C:21:62:5D:1A:EC:C6:D6:27:2E:C4:DA:0F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:63:23:f3:63:30:04:08:8a:de:f1:65:14:6e:6d:ff:ec:75: cf:6b:10:32:64:c5:13:a4:1b:9d:42:c9:93:65:97:67:67:8a: 63:5e:95:7d:32:34:ae:6a:98:78:71:f7:dd:5e:8c:c1:54:fc: ca:1d:77:18:25:f6:11:81:30:4c:b9:2c:84:cf:e5:d6:e3:d9: 0d:6a:09:2c:5c:0f:29:56:b6:7c:c0:b5:09:80:2d:f1:6e:69: 09:e7:cc:42:89:16:0a:b9:bf:12:62:11:98:a6:23:30:e9:4d: ba:82:f9:44:76:46:7d:e8:e6:fb:34:85:94:8f:5d:be:d9:64: a7:29:d0:22:10:18:51:3e:0b:0f:0d:bf:76:84:35:fe:c8:2c: 6f:75:1f:fa:a3:9e:ab:eb:e5:c7:1e:d2:9e:7a:2e:4c:80:4f: 4d:5e:68:59:a7:fd:70:54:5b:cf:91:10:b6:16:cd:5b:4e:8a: f5:ea:09:90:1c:09:71:70:a0:fa:ee:17:45:8f:eb:71:32:65: c0:34:ae:c2:fe:28:9f:7b:11:02:df:6e:ba:d3:7d:30:e1:02: 0f:bd:8a:3e:30:dd:55:9f:cc:e3:65:24:1f:ac:c9:83:96:88: 58:5e:5a:20:92:f5:c1:13:93:f9:30:90:9d:c5:80:71:af:df: 8b:df:17:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/KSpL9udsx3SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MzMyY2Q4MmYtOThlNC00YTUyLWFmZDMtN2MxZTJhMjM5NTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFleER0KaWOZly2mjvfa6NuQCqgrF4Cy56ya CEl0VOP1jhqV4DvASKY8tJJ6+ln6vlmQcrEL2Q2ar9PlWCpYnP+5CwT6NjgxfNUP ByXePYyj/ErLj4eCJX704y6oEuyKgGoLZUyh+vfImOUjtNizSwgcK5P0RgkwyJaF pon7PWcm1ETqkZu9E7/FJYhYhG94CBJ6b52W3v/M65yLmvF1uUCHUVfGtjGRxbUu GEOAgyPMfFxSDOfFb8X6qwFPiCFWT1KHGbXQOxUJR2DQVx9Mn/odJJXoHj5LV0yo m5TaoVLzjOzECBEjMmk/YNYNJ2crmhwehquvmvqjVTcYlX0+AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf8XNvthTwhYl0a7MbWJy7E2g/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDJkMTY0MjAtYTQxYi0z NGM1LThlZDAtZjJkMTFjYmQ4NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5jI/NjMAQIit7xZRRubf/sdc9rEDJkxROkG51CyZNll2dnimNelX0y NK5qmHhx991ejMFU/Moddxgl9hGBMEy5LITP5dbj2Q1qCSxcDylWtnzAtQmALfFu aQnnzEKJFgq5vxJiEZimIzDpTbqC+UR2Rn3o5vs0hZSPXb7ZZKcp0CIQGFE+Cw8N v3aENf7ILG91H/qjnqvr5cce0p56LkyAT01eaFmn/XBUW8+RELYWzVtOivXqCZAc CXFwoPruF0WP63EyZcA0rsL+KJ97EQLfbrrTfTDhAg+9ij4w3VWfzONlJB+syYOW iFheWiCS9cETk/kwkJ3FgHGv34vfF2c= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:09 2026 by rpki-client