$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa File: 519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa (raw, json) Hash identifier: 4mE/24iX/qZcs6+R+GCcoj2LEQu0WJ2wIX2xLcgXlKA= Subject key identifier: 56:6D:AC:03:E9:B5:29:57:FD:E9:F0:85:13:A2:66:0E:FD:5B:26:DA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFE629642BA11CF7FFDF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.17.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:e6:29:64:2b:a1:1c:f7:ff:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=bb9629b1-d0bf-4f80-a004-2c31e5d49081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:3a:83:e1:fd:a5:d0:9a:e9:9c:10:56:26: a3:42:eb:16:00:c0:4e:1e:9a:a8:df:dd:5c:12:1c: 3d:4e:c2:ce:a9:6a:82:cc:f2:13:4b:38:c8:8d:77: 0c:99:04:25:91:b3:57:96:af:5e:40:b4:6a:01:ea: cb:d1:35:1a:74:ae:ae:db:b6:b0:76:bd:78:0c:60: c6:62:1f:98:75:50:c8:d3:77:54:4f:6d:c0:b7:5f: c4:79:48:01:c8:79:85:a2:91:5f:48:10:4e:4c:1a: 19:b0:c9:ec:ec:46:a3:f8:a1:94:c4:b0:2a:af:9a: cf:2d:61:7c:a1:1e:42:e0:48:c1:ae:73:27:c4:8d: c4:9a:e0:b6:f3:8a:27:65:44:dc:c3:38:76:7d:3b: d0:4a:16:e6:6f:00:bd:18:85:ce:6b:9b:45:0f:67: 0d:ad:76:1e:e6:f4:dc:df:b4:5e:32:7d:82:c4:dd: 2d:df:8c:88:85:2c:af:24:d0:a9:84:71:d3:2f:31: 4a:81:36:50:f2:38:68:55:37:f7:c1:e2:37:cb:49: ad:11:de:cf:b4:7c:ee:0e:d2:e8:1f:e7:5c:55:76: a8:79:3b:6d:26:66:ca:bb:83:95:e8:5d:cd:84:0b: ce:d0:32:5d:56:09:03:b8:92:50:78:8f:e2:6a:41: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6D:AC:03:E9:B5:29:57:FD:E9:F0:85:13:A2:66:0E:FD:5B:26:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/519da7a1-e1e4-3f05-9df1-9ee58bfaa75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:42:77:bc:fa:7b:b7:a5:09:19:5d:fe:5b:d6:03:64:e1:48: de:75:09:c9:c1:ea:d5:56:35:e5:a0:ab:b8:bb:63:19:5f:71: 9c:72:3b:d4:b2:f7:fa:27:d8:37:4d:b1:a7:d5:f9:fd:fb:ab: a1:c7:07:29:43:56:10:ec:5b:e8:e1:a8:4f:83:57:65:aa:d1: 11:87:cf:56:69:86:76:8c:35:aa:7e:05:77:55:6a:68:f4:36: b0:20:ee:d2:0d:db:19:71:da:f9:a7:32:17:3e:8f:a0:cb:df: 33:e5:47:32:0a:68:ce:56:22:71:5f:e3:98:6c:1c:ad:f9:76: f3:63:45:f0:71:0b:5c:13:1b:f5:a6:7c:27:2c:51:36:79:17: 5b:79:43:86:50:f5:73:08:14:10:a5:cd:31:79:e3:57:cb:20: c0:54:16:18:ea:b1:bc:98:b8:31:9c:76:39:29:0e:a6:52:14: b3:50:25:83:2d:52:54:99:c4:65:f2:2b:90:f7:41:a8:96:79: b9:d6:6c:de:82:8c:32:de:b3:7d:31:a1:ce:a4:59:cd:e7:8e: 35:2a:67:c7:a1:8d:5b:9e:b8:99:27:91:6f:60:07:8b:41:d5: dd:36:27:83:b2:96:c3:45:dd:1c:d7:8b:6e:36:53:9d:11:7a: d0:5c:81:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+YpZCuhHPf/34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YmI5NjI5YjEtZDBiZi00ZjgwLWEwMDQtMmMzMWU1ZDQ5MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0s6g+H9pdCa6ZwQViajQusWAMBOHpqo391c Ehw9TsLOqWqCzPITSzjIjXcMmQQlkbNXlq9eQLRqAerL0TUadK6u27awdr14DGDG Yh+YdVDI03dUT23At1/EeUgByHmFopFfSBBOTBoZsMns7Eaj+KGUxLAqr5rPLWF8 oR5C4EjBrnMnxI3EmuC284onZUTcwzh2fTvQShbmbwC9GIXOa5tFD2cNrXYe5vTc 37ReMn2CxN0t34yIhSyvJNCphHHTLzFKgTZQ8jhoVTf3weI3y0mtEd7PtHzuDtLo H+dcVXaoeTttJmbKu4OV6F3NhAvO0DJdVgkDuJJQeI/iakHdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZtrAPptSlX/enwhROiZg79WybaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTE5ZGE3YTEtZTFlNC0z ZjA1LTlkZjEtOWVlNThiZmFhNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNCd7z6e7elCRld/lvWA2ThSN51CcnB6tVWNeWgq7i7YxlfcZxyO9Sy 9/on2DdNsafV+f37q6HHBylDVhDsW+jhqE+DV2Wq0RGHz1ZphnaMNap+BXdVamj0 NrAg7tIN2xlx2vmnMhc+j6DL3zPlRzIKaM5WInFf45hsHK35dvNjRfBxC1wTG/Wm fCcsUTZ5F1t5Q4ZQ9XMIFBClzTF541fLIMBUFhjqsbyYuDGcdjkpDqZSFLNQJYMt UlSZxGXyK5D3QaiWebnWbN6CjDLes30xoc6kWc3njjUqZ8ehjVueuJknkW9gB4tB 1d02J4OylsNF3RzXi242U50RetBcgYM= -----END CERTIFICATE-----Generated at Fri Apr 17 07:32:36 2026 by rpki-client