$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa File: 8689f776-5658-3cb8-aff0-a810a2806f8b.roa (raw, json) Hash identifier: vPKKdYtHqea4TH9/6+ps5h52oMWIGyDwH94QuHffaDk= Subject key identifier: 4A:04:A1:2C:D8:10:05:85:55:5D:71:8F:65:19:AF:C1:E2:0A:BB:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFE95003F6AFF20E3BBCC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:e9:50:03:f6:af:f2:0e:3b:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=dee8bf90-8cc7-4370-acdd-846df1285f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4e:32:dc:41:b8:3a:aa:d6:c4:73:07:00:12: 57:77:ef:25:1a:5e:61:c8:71:8c:60:55:8c:a2:ee: c4:b2:d7:1f:47:bf:5c:b0:ed:d4:18:78:98:8e:aa: b7:a7:91:e9:e8:f8:00:43:c5:3d:1e:05:b3:64:24: 35:a1:9a:49:2e:ef:2d:89:f2:e2:72:e9:51:8e:31: d5:c1:6f:d9:60:05:b3:2a:a7:6e:f1:8b:ff:35:74: 9a:8f:c7:5f:50:a5:5d:d6:8c:7c:53:a4:62:e9:b9: 5a:df:99:fb:a5:60:c9:a0:ed:da:24:97:6c:1b:59: b9:ab:45:fe:5a:45:d5:09:c8:01:54:0a:50:86:98: db:30:15:3d:76:2b:5d:b2:6f:e9:e9:f7:25:26:2b: 47:93:50:3a:fb:87:59:c9:fa:d0:d8:e5:40:bd:3c: 4f:d7:51:04:b1:ab:f3:f4:0a:3e:2c:b8:9d:b4:f7: 89:8e:d2:f1:91:f1:5e:47:78:11:d8:42:3f:8c:78: 00:4a:ef:f1:c2:3d:31:b9:b2:d2:e8:c7:04:ec:3f: a9:52:2e:d5:60:ed:9d:46:76:a0:6b:2d:06:b9:dd: 20:5a:4d:fb:51:29:5d:70:5d:e3:bc:f0:63:80:50: f7:f2:b9:47:96:b6:f7:ef:1c:85:c0:1c:50:84:d2: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:04:A1:2C:D8:10:05:85:55:5D:71:8F:65:19:AF:C1:E2:0A:BB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8689f776-5658-3cb8-aff0-a810a2806f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cf:fb:c3:5a:6f:fe:52:5f:72:1d:b9:a5:26:ef:0c:f8:3c: 3f:15:b1:d3:46:fb:17:d7:dc:8f:9d:43:dc:5c:3a:3b:08:e4: d9:90:67:e3:10:6b:3c:f2:4b:0f:56:af:b3:34:c5:a7:fb:67: 9a:f5:b2:a5:c1:1f:60:aa:37:95:1a:19:3f:f7:68:14:f2:54: df:40:b0:47:85:d2:02:e3:c8:dc:00:50:ec:95:7d:1b:22:9e: 62:7c:70:df:65:ee:b3:f6:1d:66:ea:42:4d:a4:61:7d:82:e1: 92:9e:59:8b:cd:f9:b2:10:fc:dc:fd:6f:d6:9d:8a:2f:e4:5b: c4:5f:ad:a3:a1:25:26:de:b1:cf:46:0d:28:46:37:96:f4:f5: 44:a9:86:14:ed:6c:43:e7:0c:4f:d0:2a:2e:a4:de:92:7e:4a: c3:d1:57:2b:10:02:9e:b6:8f:35:ed:dc:fd:1a:53:5b:71:3f: f2:d7:a4:78:5b:f5:be:5f:6a:67:9d:72:a0:46:79:63:57:06: b5:e9:40:96:88:0d:6c:59:94:d8:5f:49:7c:ec:99:34:76:7a: 28:4d:70:4f:fd:10:51:13:d3:5f:14:7e:05:93:d9:45:12:b4: 84:07:1e:95:05:ba:94:b7:c3:5d:a4:65:50:a5:8a:19:0b:61: fe:43:41:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+lQA/av8g47vMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZGVlOGJmOTAtOGNjNy00MzcwLWFjZGQtODQ2ZGYxMjg1ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E4y3EG4OqrWxHMHABJXd+8lGl5hyHGMYFWM ou7EstcfR79csO3UGHiYjqq3p5Hp6PgAQ8U9HgWzZCQ1oZpJLu8tifLiculRjjHV wW/ZYAWzKqdu8Yv/NXSaj8dfUKVd1ox8U6Ri6bla35n7pWDJoO3aJJdsG1m5q0X+ WkXVCcgBVApQhpjbMBU9ditdsm/p6fclJitHk1A6+4dZyfrQ2OVAvTxP11EEsavz 9Ao+LLidtPeJjtLxkfFeR3gR2EI/jHgASu/xwj0xubLS6McE7D+pUi7VYO2dRnag ay0Gud0gWk37USldcF3jvPBjgFD38rlHlrb37xyFwBxQhNL2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoEoSzYEAWFVV1xj2UZr8HiCrsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODY4OWY3NzYtNTY1OC0z Y2I4LWFmZjAtYTgxMGEyODA2ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfP+8Nab/5SX3IduaUm7wz4PD8VsdNG+xfX3I+dQ9xcOjsI5NmQZ+MQ azzySw9Wr7M0xaf7Z5r1sqXBH2CqN5UaGT/3aBTyVN9AsEeF0gLjyNwAUOyVfRsi nmJ8cN9l7rP2HWbqQk2kYX2C4ZKeWYvN+bIQ/Nz9b9adii/kW8RfraOhJSbesc9G DShGN5b09USphhTtbEPnDE/QKi6k3pJ+SsPRVysQAp62jzXt3P0aU1txP/LXpHhb 9b5famedcqBGeWNXBrXpQJaIDWxZlNhfSXzsmTR2eihNcE/9EFET018UfgWT2UUS tIQHHpUFupS3w12kZVClihkLYf5DQe4= -----END CERTIFICATE-----Generated at Fri Apr 17 22:29:35 2026 by rpki-client