$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4120c196-671b-3417-bd57-d35e410acc80.roa File: 4120c196-671b-3417-bd57-d35e410acc80.roa (raw, json) Hash identifier: 2GOA7t7qnL+ffF2+IyphGe8sH5JQZ8oeo+vn4rIyhQs= Subject key identifier: 2B:F8:8D:DD:EC:16:8F:28:4C:FA:F3:04:B5:45:3D:92:10:C2:2F:9F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877B74FB9F756D0CCB8980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4120c196-671b-3417-bd57-d35e410acc80.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.21.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7b:74:fb:9f:75:6d:0c:cb:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=5d1764b5-3fcc-4368-8f91-beca76c94610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:e2:94:61:06:87:58:4c:80:13:7d:da:29: a5:18:38:40:d9:b7:c0:7b:ed:9d:30:bb:4e:e1:3e: 0c:b6:42:df:33:7b:f3:8e:c8:3a:37:79:f3:11:70: 41:f0:60:e0:e7:0f:a4:41:5c:34:c4:d6:b9:2e:07: e3:43:50:70:f0:90:db:3c:e5:8c:f4:a0:ca:07:a0: eb:38:7e:63:08:d8:52:2d:da:a2:3d:5a:f1:ca:8e: e7:d1:9e:8a:53:8b:41:71:d0:68:b6:86:ea:55:07: d2:31:f5:b1:fc:06:ae:8e:16:15:6c:23:64:73:33: 6f:03:ee:4b:f7:f6:fa:4e:a4:a1:18:c8:aa:14:72: 7d:40:72:70:83:f2:16:1a:a8:bd:7b:41:95:f2:7a: 7b:06:a0:6e:4f:6b:85:8b:19:d6:16:fd:26:08:48: f8:d6:5a:bc:fd:0f:53:49:d3:57:10:e7:62:8b:c5: f7:51:48:1a:77:a6:53:bc:69:e4:27:50:1a:1f:7a: d2:f4:63:2a:40:1c:f2:cd:14:83:72:eb:63:79:69: b4:99:d2:61:3c:03:98:84:48:02:23:f4:80:e4:8f: f2:cc:d9:ab:ca:4c:0a:a2:77:af:62:42:7d:af:42: 15:fd:83:92:1f:59:7a:2e:37:01:74:43:fd:6e:2c: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:8D:DD:EC:16:8F:28:4C:FA:F3:04:B5:45:3D:92:10:C2:2F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4120c196-671b-3417-bd57-d35e410acc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ac:4f:c4:86:f9:f5:5a:d8:3b:ac:e9:3a:9b:8f:7e:f4:7d: 29:34:a7:e3:92:3b:9d:51:d9:24:b8:c6:17:a9:b5:de:72:fd: 00:97:f3:2d:97:01:a0:db:11:a8:cb:06:18:db:22:d6:c0:d5: 56:6c:69:a5:2c:25:6b:73:4d:7e:37:c4:76:95:0f:32:ef:58: f7:be:a4:45:2f:2d:3a:6c:10:12:cf:19:4f:88:36:21:23:34: c7:74:46:95:19:54:f2:58:98:fb:5d:28:7c:d6:ce:d9:17:04: f9:09:bd:81:05:6d:9c:94:48:ad:65:16:cd:f9:24:c0:cd:56: bf:90:3a:9b:2b:73:11:67:73:c0:d2:21:b9:06:93:af:f9:f6: 72:77:20:f4:8e:c3:f1:e5:93:aa:bc:df:a3:21:ae:b7:54:3f: 97:67:c3:dd:25:31:f9:1d:ed:b1:32:c1:8e:a5:4a:f1:23:fe: ea:48:f7:e2:17:71:dc:85:5f:32:fa:a0:3b:27:b4:02:d8:2c: fb:98:6d:6c:63:e7:11:a2:13:66:2f:ae:17:21:7f:e3:ad:31: e7:c2:c9:d3:1b:b8:d7:bc:d4:16:d8:4c:6a:f8:c8:fa:9a:b4: 7e:1e:27:30:73:c4:ad:00:2b:c7:ba:4d:b0:b8:83:2f:ca:30: 4a:80:78:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3t0+591bQzLiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NWQxNzY0YjUtM2ZjYy00MzY4LThmOTEtYmVjYTc2Yzk0NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CLilGEGh1hMgBN92imlGDhA2bfAe+2dMLtO 4T4MtkLfM3vzjsg6N3nzEXBB8GDg5w+kQVw0xNa5LgfjQ1Bw8JDbPOWM9KDKB6Dr OH5jCNhSLdqiPVrxyo7n0Z6KU4tBcdBotobqVQfSMfWx/AaujhYVbCNkczNvA+5L 9/b6TqShGMiqFHJ9QHJwg/IWGqi9e0GV8np7BqBuT2uFixnWFv0mCEj41lq8/Q9T SdNXEOdii8X3UUgad6ZTvGnkJ1AaH3rS9GMqQBzyzRSDcutjeWm0mdJhPAOYhEgC I/SA5I/yzNmrykwKonevYkJ9r0IV/YOSH1l6LjcBdEP9bizhqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv4jd3sFo8oTPrzBLVFPZIQwi+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDEyMGMxOTYtNjcxYi0z NDE3LWJkNTctZDM1ZTQxMGFjYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWsT8SG+fVa2Dus6Tqbj370fSk0p+OSO51R2SS4xheptd5y/QCX8y2X AaDbEajLBhjbItbA1VZsaaUsJWtzTX43xHaVDzLvWPe+pEUvLTpsEBLPGU+INiEj NMd0RpUZVPJYmPtdKHzWztkXBPkJvYEFbZyUSK1lFs35JMDNVr+QOpsrcxFnc8DS IbkGk6/59nJ3IPSOw/Hlk6q836MhrrdUP5dnw90lMfkd7bEywY6lSvEj/upI9+IX cdyFXzL6oDsntALYLPuYbWxj5xGiE2Yvrhchf+OtMefCydMbuNe81BbYTGr4yPqa tH4eJzBzxK0AK8e6TbC4gy/KMEqAeB8= -----END CERTIFICATE-----Generated at Sun Sep 20 16:04:49 2026 by rpki-client