$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa File: 3ad3404f-e0f0-3545-8701-e9e8495e4652.roa (raw, json) Hash identifier: l0NdKag2EZ67NbwyJbwArvr8sFTLqvQ2VVJIkr+cRas= Subject key identifier: D1:69:AF:B5:C8:06:17:63:B3:36:DB:9C:BD:3C:4D:F3:05:91:8E:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876A04337AAADDB45F9F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.24.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6a:04:33:7a:aa:dd:b4:5f:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=fe6f410c-0ade-4bb8-b3af-70cc44f9d066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:46:7e:61:fb:6d:f3:e6:fe:65:a4:2d:10: 58:7b:cc:66:ac:55:ac:ba:6a:c7:fd:48:44:ea:d1: 8d:db:10:e5:eb:e7:67:d9:1b:e1:17:aa:b5:ff:78: be:3f:24:67:5f:d2:f7:52:1f:62:b9:3a:9a:3a:f7: 49:aa:ce:78:95:72:1c:db:2e:59:91:21:b3:cd:f7: b7:d1:7a:c2:a9:4f:cf:d4:45:9c:72:f4:a2:e6:95: 8d:93:25:b7:86:63:34:ff:59:d3:20:98:11:17:d8: a4:8c:38:ee:c8:fc:dd:c4:c6:76:03:74:62:11:2b: 71:2e:4c:5f:ca:68:0f:a9:3a:35:c1:31:50:9a:5a: c6:95:94:4d:d2:ec:07:0d:4f:b9:0b:e9:56:ad:b2: 3a:4d:b8:e0:9a:68:63:f2:c8:67:44:7e:cb:f1:d0: 4f:89:05:2b:3c:8e:26:96:ba:60:70:82:16:f5:f2: 02:cb:17:3b:19:21:3a:fb:33:a4:e8:00:85:50:13: f9:ca:ef:67:03:91:76:51:06:ad:61:17:fc:7b:ea: 58:cf:bf:57:79:93:49:bd:b3:6b:f1:82:f1:79:3c: c9:46:7e:f3:3e:e3:58:f0:bd:a1:a3:15:d0:7f:9a: 92:47:a3:52:4f:c7:9d:49:ac:75:a9:06:17:c4:88: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:69:AF:B5:C8:06:17:63:B3:36:DB:9C:BD:3C:4D:F3:05:91:8E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3ad3404f-e0f0-3545-8701-e9e8495e4652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:49:c2:2b:1f:9d:27:a6:2c:79:30:d6:6a:d2:f7:ee:75:ae: 1c:3a:3f:36:a8:bb:6c:0c:08:f5:e8:d3:89:fe:b1:ad:43:99: c4:72:fe:1e:c2:cb:63:59:9a:42:35:59:81:8b:92:d9:e9:07: 00:b3:f0:79:db:25:d3:81:41:b0:79:11:dc:f5:41:23:f1:69: a7:8c:0e:01:43:47:f7:a6:6a:20:dd:8b:22:01:a3:14:55:c1: e5:b8:d8:18:fa:95:2d:19:72:75:2a:84:79:2b:82:09:6b:3a: fe:ed:19:55:1b:39:db:fb:5d:74:7f:f1:b7:7e:9e:83:27:90: 0a:8e:da:04:06:3b:2c:8c:18:b6:ba:d9:f0:3e:5f:a0:45:c0: 71:aa:d5:f0:0a:78:ab:74:dd:78:e7:df:5a:eb:a6:c7:6b:13: 7d:aa:b5:d3:a7:0e:cb:e5:b0:26:da:b9:53:c8:cd:79:e8:7c: e2:96:24:3d:17:36:e3:bc:cd:e2:c4:cb:2f:f5:a7:13:8d:42: e9:d1:f0:d5:33:ca:0e:88:be:81:89:3b:4a:a5:53:f8:76:0a: 9a:8a:53:cc:97:63:2d:1f:5b:8d:62:7b:eb:15:34:16:e4:69: 54:51:4e:a9:c9:fc:28:e9:7e:72:7b:95:9f:31:08:18:4c:8f: 95:90:07:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2oEM3qq3bRfn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmU2ZjQxMGMtMGFkZS00YmI4LWIzYWYtNzBjYzQ0ZjlkMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBdGfmH7bfPm/mWkLRBYe8xmrFWsumrH/UhE 6tGN2xDl6+dn2RvhF6q1/3i+PyRnX9L3Uh9iuTqaOvdJqs54lXIc2y5ZkSGzzfe3 0XrCqU/P1EWccvSi5pWNkyW3hmM0/1nTIJgRF9ikjDjuyPzdxMZ2A3RiEStxLkxf ymgPqTo1wTFQmlrGlZRN0uwHDU+5C+lWrbI6Tbjgmmhj8shnRH7L8dBPiQUrPI4m lrpgcIIW9fICyxc7GSE6+zOk6ACFUBP5yu9nA5F2UQatYRf8e+pYz79XeZNJvbNr 8YLxeTzJRn7zPuNY8L2hoxXQf5qSR6NST8edSax1qQYXxIj4+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFpr7XIBhdjszbbnL08TfMFkY7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2FkMzQwNGYtZTBmMC0z NTQ1LTg3MDEtZTllODQ5NWU0NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRJwisfnSemLHkw1mrS9+51rhw6Pzaou2wMCPXo04n+sa1DmcRy/h7C y2NZmkI1WYGLktnpBwCz8HnbJdOBQbB5Edz1QSPxaaeMDgFDR/emaiDdiyIBoxRV weW42Bj6lS0ZcnUqhHkrgglrOv7tGVUbOdv7XXR/8bd+noMnkAqO2gQGOyyMGLa6 2fA+X6BFwHGq1fAKeKt03Xjn31rrpsdrE32qtdOnDsvlsCbauVPIzXnofOKWJD0X NuO8zeLEyy/1pxONQunR8NUzyg6IvoGJO0qlU/h2CpqKU8yXYy0fW41ie+sVNBbk aVRRTqnJ/CjpfnJ7lZ8xCBhMj5WQB9Y= -----END CERTIFICATE-----Generated at Tue Sep 22 03:45:16 2026 by rpki-client