$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de540c15-ffec-35e2-bc0c-2341a2da11c9.roa File: de540c15-ffec-35e2-bc0c-2341a2da11c9.roa (raw, json) Hash identifier: hPg6CYV6+RxYG5nMbmrCGRnHJ390XXb9eKg/fOx8sjs= Subject key identifier: 0C:4A:72:5A:CD:4D:49:E1:11:EA:AB:84:5C:77:35:45:E6:2A:A4:61 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD6AF2B8FB13562DCEE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de540c15-ffec-35e2-bc0c-2341a2da11c9.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.19.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d6:af:2b:8f:b1:35:62:dc:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=83800e2f-3411-4351-b729-b412df76985e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:af:9a:20:bd:33:68:45:97:b0:90:03:23: a4:bd:fe:0b:34:51:9f:0e:50:80:da:67:fc:4d:50: 1e:7a:02:20:ca:6d:05:77:ba:71:3f:af:e8:f3:c2: 1e:8b:2e:68:f1:c0:11:88:4a:c9:07:0b:a9:7d:c5: 7a:5e:63:0f:ff:fc:de:49:45:93:31:1d:02:d5:98: eb:05:30:2c:54:e9:86:93:d7:68:7a:c8:0e:1d:4b: d2:ff:05:56:8c:0b:ed:66:3d:1a:33:28:57:e0:97: 5e:65:eb:31:78:35:d1:23:5c:4b:4a:3b:06:69:bc: a6:33:ca:df:22:04:8e:7f:bb:5f:b6:e3:7e:53:c6: 2b:82:c3:f7:1c:65:a1:91:b5:75:a2:55:8e:e4:ae: fb:78:b3:da:c4:20:49:d0:0c:68:54:df:6e:57:05: 9d:9b:47:65:ac:07:cb:f0:42:95:76:fc:0c:20:f1: 83:50:5d:3c:11:10:36:af:5c:ea:4e:3d:3a:24:6c: 62:94:d3:a5:2c:0b:85:12:58:24:77:43:3c:d8:50: f2:86:b8:e4:0b:b7:13:7b:0a:77:00:00:2a:88:fc: fe:40:e3:fc:4d:19:85:70:ee:01:74:fc:1c:e2:27: c9:cb:63:b9:d2:2f:72:3f:44:d4:18:17:dc:65:ea: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:72:5A:CD:4D:49:E1:11:EA:AB:84:5C:77:35:45:E6:2A:A4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de540c15-ffec-35e2-bc0c-2341a2da11c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:0b:02:62:26:13:81:46:20:71:c5:31:75:a6:05:d7:a8:f0: 7a:a5:c2:62:0d:8c:06:5f:a4:07:77:81:fa:c4:d9:01:29:4e: ee:9c:75:77:c9:30:29:b5:ac:db:4b:f4:21:b3:41:f3:4f:f3: 44:4a:3e:cd:37:20:f0:ae:34:06:c9:65:92:d3:42:5e:ba:22: c9:9b:16:de:c1:6f:de:12:30:e6:66:6d:a9:35:61:ca:ea:f1: 5d:d0:e2:87:fc:e3:45:59:13:51:41:7c:74:8e:1d:4a:e5:77: 23:4a:14:c6:de:c9:8b:ec:6f:f1:dd:68:c8:2e:d2:c9:6a:f9: c9:49:55:fb:86:0c:55:d8:59:10:be:a7:0b:08:4c:a0:3c:0d: 12:bf:3a:c8:5e:d3:a4:13:19:08:b8:0b:76:1d:73:59:15:57: 62:1d:11:cd:3c:80:52:d3:ad:dd:a6:a5:eb:b5:a7:bc:41:8b: a0:9f:ff:a9:25:e7:ff:96:b2:bd:3c:d8:cd:82:97:58:ee:fb: 46:32:2f:79:61:5d:a9:6c:3c:61:e1:75:58:d2:52:35:0b:60: bc:58:a1:3e:dc:74:ed:0b:65:97:ac:31:d4:b3:d6:c5:89:86: 8c:4e:38:99:3e:e0:94:aa:3b:33:36:cb:fb:53:d9:82:24:53: eb:c9:fe:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39avK4+xNWLc7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ODM4MDBlMmYtMzQxMS00MzUxLWI3MjktYjQxMmRmNzY5ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5+vmiC9M2hFl7CQAyOkvf4LNFGfDlCA2mf8 TVAeegIgym0Fd7pxP6/o88Ieiy5o8cARiErJBwupfcV6XmMP//zeSUWTMR0C1Zjr BTAsVOmGk9doesgOHUvS/wVWjAvtZj0aMyhX4JdeZesxeDXRI1xLSjsGabymM8rf IgSOf7tftuN+U8YrgsP3HGWhkbV1olWO5K77eLPaxCBJ0AxoVN9uVwWdm0dlrAfL 8EKVdvwMIPGDUF08ERA2r1zqTj06JGxilNOlLAuFElgkd0M82FDyhrjkC7cTewp3 AAAqiPz+QOP8TRmFcO4BdPwc4ifJy2O50i9yP0TUGBfcZeoqwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxKclrNTUnhEeqrhFx3NUXmKqRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU1NDBjMTUtZmZlYy0z NWUyLWJjMGMtMjM0MWEyZGExMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4LAmImE4FGIHHFMXWmBdeo8HqlwmINjAZfpAd3gfrE2QEpTu6cdXfJ MCm1rNtL9CGzQfNP80RKPs03IPCuNAbJZZLTQl66IsmbFt7Bb94SMOZmbak1Ycrq 8V3Q4of840VZE1FBfHSOHUrldyNKFMbeyYvsb/HdaMgu0slq+clJVfuGDFXYWRC+ pwsITKA8DRK/Oshe06QTGQi4C3Ydc1kVV2IdEc08gFLTrd2mpeu1p7xBi6Cf/6kl 5/+Wsr082M2Cl1ju+0YyL3lhXalsPGHhdVjSUjULYLxYoT7cdO0LZZesMdSz1sWJ hoxOOJk+4JSqOzM2y/tT2YIkU+vJ/js= -----END CERTIFICATE-----Generated at Fri Apr 17 14:16:50 2026 by rpki-client