$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa File: af12d4d2-eba1-3225-9761-d1d0bcd90937.roa (raw, json) Hash identifier: Muve2giS5GJkj6EOyk5hSZn0JJ46OnTUAuqQZjiIED0= Subject key identifier: 36:2B:1C:37:5F:97:E9:0B:F9:99:5E:26:F0:D6:8A:B8:DB:90:AF:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA87696E12824ED28532B880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 104.20.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:69:6e:12:82:4e:d2:85:32:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=847c799e-5986-4383-b161-2bc2a7264f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:91:37:ea:0c:1f:42:5e:e5:8d:0a:54:0d:79: 2c:50:cd:7d:87:4e:1e:67:e4:ac:99:35:52:5b:9a: 89:75:d7:bc:f1:f3:66:50:f7:fa:65:e0:a2:ca:44: 47:30:36:6d:32:4d:1c:d8:cd:3c:cd:a3:58:2a:59: 32:ce:48:20:29:e7:41:de:32:cc:88:aa:00:68:79: 3b:76:76:27:45:a5:89:83:3b:e2:8a:62:5a:04:53: 22:1f:bb:8b:a2:50:90:52:70:2a:66:a9:3d:a6:84: 0a:44:e4:64:bd:a3:85:71:f5:ca:28:81:3f:19:33: 34:37:5e:58:91:8a:41:12:b4:a8:8e:4f:6c:a8:3b: f1:d3:eb:bb:84:bc:cc:28:c8:12:71:da:84:ac:09: 76:f6:f2:27:d9:0b:33:36:11:74:9a:78:1f:76:21: c8:c3:27:a8:67:3b:ed:5d:6d:de:cd:24:bc:af:e0: a2:f5:4c:ca:de:8d:5b:fc:98:f3:76:8f:30:28:ce: f1:c7:84:06:26:56:6e:6c:35:4c:f1:74:ea:92:6f: 89:92:bf:73:69:89:df:3e:5b:e5:fc:ff:ff:8d:66: 4e:54:94:a6:28:d8:35:93:40:32:a5:ef:39:87:41: 36:ac:eb:ba:b4:49:74:82:98:c1:70:20:de:c1:2f: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2B:1C:37:5F:97:E9:0B:F9:99:5E:26:F0:D6:8A:B8:DB:90:AF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5d:be:68:59:24:36:51:61:55:a7:3d:29:7a:25:16:4b:8c: 4b:2f:fb:63:33:1d:70:e7:c4:1b:5a:9a:3b:f9:d6:d3:4a:53: 88:f2:4a:08:40:ff:8b:72:b5:08:78:7b:1b:b3:b3:33:32:a4: 55:39:6e:a0:56:84:76:f9:6a:9d:36:ec:50:01:44:c3:58:37: 9b:b9:51:c9:4e:87:f9:ee:73:dd:d1:37:d6:e8:b2:7b:c1:95: f9:1b:0f:fa:5a:da:95:0a:52:2b:f2:d0:f2:2b:23:10:9d:e8: 0c:55:b8:b7:ad:96:24:f6:b4:b4:d0:21:d9:5e:83:0a:49:f9: 69:23:45:79:73:e7:f9:fe:78:c9:4c:37:0d:85:de:64:86:a5: 2e:3a:c3:67:80:90:13:5e:6d:17:ce:62:ab:99:21:0b:9b:59: 69:36:5d:b0:e5:e4:28:b7:ea:5f:a5:38:be:14:05:5d:0b:c8: f0:f0:70:f6:c9:69:1e:df:e5:a4:ff:42:8c:95:dd:10:80:87: ec:88:0c:be:2d:c2:fd:4d:ee:3d:a7:66:74:fd:89:47:c4:d6: 47:5c:be:4d:ed:78:84:21:d9:d3:69:28:24:28:aa:b9:be:91: 5a:49:33:4b:4f:8d:4e:6e:58:f0:57:af:e0:24:92:3b:25:9c: 7a:d5:e2:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2luEoJO0oUyuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODQ3Yzc5OWUtNTk4Ni00MzgzLWIxNjEtMmJjMmE3MjY0ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZE36gwfQl7ljQpUDXksUM19h04eZ+SsmTVS W5qJdde88fNmUPf6ZeCiykRHMDZtMk0c2M08zaNYKlkyzkggKedB3jLMiKoAaHk7 dnYnRaWJgzviimJaBFMiH7uLolCQUnAqZqk9poQKRORkvaOFcfXKKIE/GTM0N15Y kYpBErSojk9sqDvx0+u7hLzMKMgScdqErAl29vIn2QszNhF0mngfdiHIwyeoZzvt XW3ezSS8r+Ci9UzK3o1b/Jjzdo8wKM7xx4QGJlZubDVM8XTqkm+Jkr9zaYnfPlvl /P//jWZOVJSmKNg1k0Aype85h0E2rOu6tEl0gpjBcCDewS+XzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYrHDdfl+kL+ZleJvDWirjbkK9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWYxMmQ0ZDItZWJhMS0z MjI1LTk3NjEtZDFkMGJjZDkwOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRdvmhZJDZRYVWnPSl6JRZLjEsv+2MzHXDnxBtamjv51tNKU4jySghA /4tytQh4exuzszMypFU5bqBWhHb5ap027FABRMNYN5u5UclOh/nuc93RN9bosnvB lfkbD/pa2pUKUivy0PIrIxCd6AxVuLetliT2tLTQIdlegwpJ+WkjRXlz5/n+eMlM Nw2F3mSGpS46w2eAkBNebRfOYquZIQubWWk2XbDl5Ci36l+lOL4UBV0LyPDwcPbJ aR7f5aT/QoyV3RCAh+yIDL4twv1N7j2nZnT9iUfE1kdcvk3teIQh2dNpKCQoqrm+ kVpJM0tPjU5uWPBXr+AkkjslnHrV4tc= -----END CERTIFICATE-----Generated at Sun Sep 20 18:58:34 2026 by rpki-client