$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa File: 2b3279f2-fad4-3ca8-b7db-21db2208a819.roa (raw, json) Hash identifier: 8i96e4uF2bIyeDBtjCpneDUpRoqeUAva3EpfjZYkUZw= Subject key identifier: 6B:BC:3B:DA:19:9C:89:E5:AF:9C:DF:D6:1B:F2:17:77:02:18:5B:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD725DBF57732A68AA0C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.20.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d7:25:db:f5:77:32:a6:8a:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=84c3ca55-46c5-4848-9020-c78759c579c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:52:25:6a:25:89:5e:a0:4b:64:1b:d7:b2:18: 10:5b:5b:ba:b4:60:4e:03:59:0e:8d:c0:2c:85:fc: 6a:2f:ee:17:ee:2f:29:fd:c8:cf:20:f0:8b:af:25: e5:74:b7:0d:fa:1d:73:ec:80:54:38:68:f1:de:eb: fd:26:74:3f:c6:fc:d1:dd:cc:7b:c3:89:9f:cc:6d: 47:20:25:87:ab:6a:ca:70:83:38:ff:c7:cb:6c:3c: 76:da:76:52:25:96:dc:a8:f0:38:f4:01:4a:a1:47: d2:99:85:e9:69:65:67:8c:e1:a6:a5:80:18:b5:d0: d6:49:de:b9:62:97:d4:02:03:83:70:ee:bd:1a:7a: 44:09:32:7b:e2:78:f1:a9:1a:ed:d1:ec:8c:7b:e6: 8e:f1:83:21:67:07:63:8b:25:fa:be:7d:18:ae:f5: f2:cc:4b:2a:83:bc:36:08:07:29:ff:07:48:20:ce: b0:c7:a5:9f:ce:b0:f3:da:0a:12:47:0c:70:b2:0f: 4a:4d:6a:40:27:72:11:a1:1f:75:0c:06:6e:dc:1c: a8:7b:d6:f9:e6:54:48:51:35:80:5a:de:55:79:86: 87:0d:57:ac:96:19:25:15:9b:56:49:8c:0c:16:f5: 13:db:5d:2a:80:e6:6f:02:68:f4:6b:cc:5f:5c:d5: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BC:3B:DA:19:9C:89:E5:AF:9C:DF:D6:1B:F2:17:77:02:18:5B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:7d:43:79:6c:40:8a:85:42:5d:97:86:2d:3d:85:f0:88:06: 5b:62:98:b9:78:62:64:c6:d3:0e:54:1a:f5:7c:a1:3e:3c:6c: 6f:dc:5f:76:4b:15:51:6b:c1:2f:65:ef:3e:57:9d:eb:37:94: 46:f0:68:7e:83:13:38:7e:a7:6f:83:8b:05:de:ea:e9:bb:30: 52:c1:4a:ac:6d:c6:cc:28:4e:0d:d4:bd:f6:b7:46:38:9e:54: 36:f0:f6:86:4f:7a:24:da:a5:ee:2f:19:26:0c:84:f2:85:b3: aa:f1:f4:85:11:90:0a:21:90:21:0a:61:c7:40:cc:1b:05:aa: ed:d3:e6:1e:f5:99:a5:54:1f:6b:ef:94:41:bc:39:e0:22:99: 78:70:25:6b:e2:6a:72:7e:d5:68:1d:ae:7c:9d:17:3b:59:c5: bd:a0:1c:19:f7:94:71:e6:91:8c:c4:91:79:0c:5a:99:62:32: 31:0b:99:b2:53:59:6b:53:79:43:f1:0e:11:a3:5e:c6:69:97: 33:db:0c:88:b1:1e:ca:eb:e1:b8:bb:75:e0:ab:81:78:14:f7: c2:b3:1e:26:f3:f8:4d:f8:93:a6:39:ac:87:ee:64:61:f8:1e: 54:35:08:1e:09:95:93:e4:65:5c:4b:9c:e6:62:74:91:e7:08: 43:bd:a0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39cl2/V3MqaKoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ODRjM2NhNTUtNDZjNS00ODQ4LTkwMjAtYzc4NzU5YzU3OWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFIlaiWJXqBLZBvXshgQW1u6tGBOA1kOjcAs hfxqL+4X7i8p/cjPIPCLryXldLcN+h1z7IBUOGjx3uv9JnQ/xvzR3cx7w4mfzG1H ICWHq2rKcIM4/8fLbDx22nZSJZbcqPA49AFKoUfSmYXpaWVnjOGmpYAYtdDWSd65 YpfUAgODcO69GnpECTJ74njxqRrt0eyMe+aO8YMhZwdjiyX6vn0YrvXyzEsqg7w2 CAcp/wdIIM6wx6WfzrDz2goSRwxwsg9KTWpAJ3IRoR91DAZu3Byoe9b55lRIUTWA Wt5VeYaHDVeslhklFZtWSYwMFvUT210qgOZvAmj0a8xfXNXsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu8O9oZnInlr5zf1hvyF3cCGFucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIzMjc5ZjItZmFkNC0z Y2E4LWI3ZGItMjFkYjIyMDhhODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd9Q3lsQIqFQl2Xhi09hfCIBltimLl4YmTG0w5UGvV8oT48bG/cX3ZL FVFrwS9l7z5Xnes3lEbwaH6DEzh+p2+DiwXe6um7MFLBSqxtxswoTg3Uvfa3Rjie VDbw9oZPeiTape4vGSYMhPKFs6rx9IURkAohkCEKYcdAzBsFqu3T5h71maVUH2vv lEG8OeAimXhwJWvianJ+1WgdrnydFztZxb2gHBn3lHHmkYzEkXkMWpliMjELmbJT WWtTeUPxDhGjXsZplzPbDIixHsrr4bi7deCrgXgU98KzHibz+E34k6Y5rIfuZGH4 HlQ1CB4JlZPkZVxLnOZidJHnCEO9oGc= -----END CERTIFICATE-----Generated at Fri Apr 17 17:24:39 2026 by rpki-client