$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa File: 4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa (raw, json) Hash identifier: to4pQ/oaIGU6zheHDxiWZFBVInW3Z4LbEHvFOnzsyb0= Subject key identifier: 74:C3:9E:53:8C:B1:C3:8C:AB:0A:DC:40:FD:5E:5B:73:32:1F:A5:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD7D7AA6483B04A127CE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.24.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d7:d7:aa:64:83:b0:4a:12:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=9f9d2ae0-bea4-4d7f-b6d4-b1a166e2ebac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:88:54:16:77:51:b0:82:6d:34:fd:f9:28:9b: 61:41:19:77:cd:21:c9:f3:cd:c4:c2:38:d2:3f:fc: 7f:22:1d:8d:83:9a:67:b2:c6:7a:f0:1b:05:48:88: 3f:26:ef:7e:fc:d3:e2:d2:4d:81:ce:bc:aa:32:ad: 23:ee:65:f3:7e:e4:89:8b:19:34:b2:69:62:66:95: cf:9f:06:65:ab:cc:9c:29:2c:be:8f:ff:df:58:4b: e9:63:8a:49:ef:a1:d2:4e:96:c1:53:65:7e:38:8e: 72:81:83:8f:96:cb:a9:9a:75:ad:13:51:5c:32:76: 0f:5f:36:eb:ed:0e:c2:55:e2:62:60:99:7f:02:99: c6:9d:15:65:c2:b5:35:46:c9:d3:86:01:31:b9:82: b2:ac:99:94:ae:82:2c:cc:51:b1:6a:a6:86:63:54: 61:61:61:31:a6:32:84:f6:58:f8:d7:c0:12:7f:e3: a5:37:13:1c:7c:67:39:81:e3:5c:a4:1e:f4:3c:ca: 1e:41:41:3a:30:cf:47:94:dd:a0:91:49:43:82:11: f1:e2:56:1d:7f:c3:bd:ae:81:93:96:32:ce:84:41: 32:f4:5b:3b:52:c2:6c:1b:81:f2:9e:2b:ed:d7:03: a2:d6:a7:0b:8c:c0:fd:91:6e:a4:0f:fb:6a:82:55: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C3:9E:53:8C:B1:C3:8C:AB:0A:DC:40:FD:5E:5B:73:32:1F:A5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2f:96:c9:62:50:8e:72:2e:1a:21:13:39:c8:b5:d8:ef:54: 4d:a5:26:44:03:13:c7:bc:75:07:16:91:ef:f0:1d:e5:fe:be: a7:4e:bc:f2:90:bd:e4:6a:f4:af:0f:ef:66:d5:88:75:f7:c3: 41:39:8d:aa:59:05:24:78:25:27:1b:a1:2f:d4:1e:d4:f2:19: d7:d2:07:31:29:dc:04:13:4e:85:82:ac:49:20:b5:7c:c4:75: 30:59:d4:71:9b:b0:ab:de:f2:5d:9c:07:21:ed:85:a1:88:98: 17:08:bf:b3:5d:ef:5a:ed:11:e7:c7:d1:95:1e:e7:a3:ba:44: fa:2b:4f:db:c5:c0:4d:a6:9d:bd:51:24:9e:94:ea:fd:92:6e: 3e:38:4a:3f:62:53:16:97:0e:5c:6e:8d:79:a6:4d:37:99:5c: 77:a4:46:d3:d0:2c:fa:21:8a:ef:ea:d2:2e:9c:a1:65:52:85: c9:77:45:a8:21:27:2b:d4:56:e0:39:34:84:d5:17:b3:50:99: 06:27:62:1a:2a:ea:50:cf:60:82:7e:96:32:5c:b5:45:a6:3a: 53:15:b6:bb:1e:ef:5e:e6:ad:10:30:ab:45:a5:af:98:ce:81: 14:42:7f:cc:a9:9d:74:7d:8b:99:e8:f3:2a:2d:05:e6:81:51: 0a:15:3a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39fXqmSDsEoSfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OWY5ZDJhZTAtYmVhNC00ZDdmLWI2ZDQtYjFhMTY2ZTJlYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YhUFndRsIJtNP35KJthQRl3zSHJ883EwjjS P/x/Ih2Ng5pnssZ68BsFSIg/Ju9+/NPi0k2BzryqMq0j7mXzfuSJixk0smliZpXP nwZlq8ycKSy+j//fWEvpY4pJ76HSTpbBU2V+OI5ygYOPlsupmnWtE1FcMnYPXzbr 7Q7CVeJiYJl/ApnGnRVlwrU1RsnThgExuYKyrJmUroIszFGxaqaGY1RhYWExpjKE 9lj418ASf+OlNxMcfGc5geNcpB70PMoeQUE6MM9HlN2gkUlDghHx4lYdf8O9roGT ljLOhEEy9Fs7UsJsG4Hynivt1wOi1qcLjMD9kW6kD/tqglXAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTDnlOMscOMqwrcQP1eW3MyH6WbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGE2ZjVmMDQtNjNkNC0z M2FiLTgyYzItOGU4YjAyOWJmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIovlsliUI5yLhohEznItdjvVE2lJkQDE8e8dQcWke/wHeX+vqdOvPKQ veRq9K8P72bViHX3w0E5japZBSR4JScboS/UHtTyGdfSBzEp3AQTToWCrEkgtXzE dTBZ1HGbsKve8l2cByHthaGImBcIv7Nd71rtEefH0ZUe56O6RPorT9vFwE2mnb1R JJ6U6v2Sbj44Sj9iUxaXDlxujXmmTTeZXHekRtPQLPohiu/q0i6coWVShcl3Ragh JyvUVuA5NITVF7NQmQYnYhoq6lDPYIJ+ljJctUWmOlMVtrse717mrRAwq0Wlr5jO gRRCf8ypnXR9i5no8yotBeaBUQoVOn0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:39:39 2026 by rpki-client