$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa File: 5b65e206-849c-3cf1-a6e0-7265114b7c15.roa (raw, json) Hash identifier: dq+uidXJAorOsn0NUp/yRAFhqL5V2C9m34AjFXHZqKs= Subject key identifier: 67:A6:F5:1E:9C:A6:89:0A:23:A0:B9:77:B9:4B:34:07:39:63:1B:3C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFEAD3A342BFEAB0557E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.25.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ea:d3:a3:42:bf:ea:b0:55:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=da536ec9-136a-46ab-829e-76f8bf3c5fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:da:78:4b:7c:7d:13:ff:76:3a:31:af:3f: 3c:19:20:03:fd:a0:f4:98:e1:01:90:57:3e:62:c9: ce:d3:4d:88:a4:4b:71:4b:8b:f9:2b:db:71:60:27: 75:6b:ac:ba:b7:70:ff:2f:50:26:bf:5a:e6:00:73: ca:4d:fd:93:d5:87:a5:b8:85:21:ea:a4:2a:52:00: 0e:fb:f6:5f:65:26:b4:27:0f:96:8e:2b:79:60:66: 74:2f:c2:f7:28:87:39:d1:d5:44:b4:fb:8b:fb:36: 11:f5:d8:b4:52:14:1b:37:b8:9e:25:dc:d9:43:4d: 10:a1:98:44:74:0e:28:5f:28:14:3d:48:45:37:88: 22:ff:f0:d6:29:61:19:17:28:8e:01:12:f2:37:d6: 2d:a9:2d:3d:42:a4:f3:eb:19:88:10:b5:d0:f2:11: ae:c7:50:6d:a9:06:3b:c2:54:a7:1a:e4:bd:1a:35: ed:d9:dc:5a:06:9a:aa:df:51:2a:7d:fc:49:21:a3: 76:46:23:0d:40:31:69:5a:3f:1f:be:e3:a6:fa:1a: 6d:64:22:36:e2:43:ca:ff:9e:9f:12:ae:fd:a4:4b: 0e:e4:7d:1c:47:91:c0:9a:8c:4f:b2:07:7c:1c:fc: 10:bd:d0:7d:24:03:cb:4c:0c:cd:7a:ef:7f:6f:82: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A6:F5:1E:9C:A6:89:0A:23:A0:B9:77:B9:4B:34:07:39:63:1B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5f:00:64:ba:10:a0:57:3e:5a:b7:07:d8:20:bd:f4:5d:07: a0:b9:fd:f6:07:0b:b0:cb:67:bb:87:6c:9d:3d:ba:a1:97:1c: e2:04:58:ab:8b:a9:f5:68:3f:00:71:43:03:7e:1a:53:c3:0d: ad:8b:8b:68:d8:1a:ed:ab:7f:11:5e:a8:5f:b8:3d:94:93:98: 6f:f8:2c:5e:a9:80:ac:9a:f7:53:78:df:2c:09:a7:14:35:7d: 1b:a5:e7:5f:9b:9d:e2:4c:07:a0:43:ea:6f:14:b7:5b:66:fb: ce:f5:14:2d:49:2a:5b:cd:ec:0d:03:de:a4:35:9c:ad:cd:44: f8:7b:ff:8b:86:1f:cd:44:6e:b7:20:c8:41:c0:61:fd:92:ee: 59:8d:61:b4:d3:e0:8e:42:5b:7c:d0:0b:b3:da:1c:20:e3:25: 51:e7:03:f6:0f:cf:d1:08:03:01:dc:5b:86:0d:ee:81:b3:33: 88:bf:d6:00:98:81:7e:7b:46:8a:2b:31:0c:f6:bc:a0:e6:91: a9:b9:d9:d9:26:a1:d7:bf:bc:9c:cf:d5:1b:88:14:0a:01:46: f1:b0:58:5e:eb:85:65:ca:8f:38:b0:ed:5c:4e:9c:17:0b:89: a4:48:ae:f5:f6:66:73:05:ee:39:ea:03:ec:85:b1:2b:eb:42: 46:86:66:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+rTo0K/6rBVfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZGE1MzZlYzktMTM2YS00NmFiLTgyOWUtNzZmOGJmM2M1ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp/aeEt8fRP/djoxrz88GSAD/aD0mOEBkFc+ YsnO002IpEtxS4v5K9txYCd1a6y6t3D/L1Amv1rmAHPKTf2T1YeluIUh6qQqUgAO +/ZfZSa0Jw+Wjit5YGZ0L8L3KIc50dVEtPuL+zYR9di0UhQbN7ieJdzZQ00QoZhE dA4oXygUPUhFN4gi//DWKWEZFyiOARLyN9YtqS09QqTz6xmIELXQ8hGux1BtqQY7 wlSnGuS9GjXt2dxaBpqq31EqffxJIaN2RiMNQDFpWj8fvuOm+hptZCI24kPK/56f Eq79pEsO5H0cR5HAmoxPsgd8HPwQvdB9JAPLTAzNeu9/b4KIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGem9R6cpokKI6C5d7lLNAc5Yxs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWI2NWUyMDYtODQ5Yy0z Y2YxLWE2ZTAtNzI2NTExNGI3YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRfAGS6EKBXPlq3B9ggvfRdB6C5/fYHC7DLZ7uHbJ09uqGXHOIEWKuL qfVoPwBxQwN+GlPDDa2Li2jYGu2rfxFeqF+4PZSTmG/4LF6pgKya91N43ywJpxQ1 fRul51+bneJMB6BD6m8Ut1tm+871FC1JKlvN7A0D3qQ1nK3NRPh7/4uGH81Ebrcg yEHAYf2S7lmNYbTT4I5CW3zQC7PaHCDjJVHnA/YPz9EIAwHcW4YN7oGzM4i/1gCY gX57RoorMQz2vKDmkam52dkmode/vJzP1RuIFAoBRvGwWF7rhWXKjziw7VxOnBcL iaRIrvX2ZnMF7jnqA+yFsSvrQkaGZhg= -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:52 2026 by rpki-client