$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f910016b-72da-3c1d-b0cf-01dd180eae03.roa File: f910016b-72da-3c1d-b0cf-01dd180eae03.roa (raw, json) Hash identifier: CjIYl+qwgknFcn7qKozAdaH8ZYohvyDkFWUrKD+hTDs= Subject key identifier: 14:91:FC:8F:81:38:DC:A2:03:A5:F4:0D:20:2E:46:08:5E:7F:D5:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD4D89BBEDCD995BBCF40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f910016b-72da-3c1d-b0cf-01dd180eae03.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 104.17.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d4:d8:9b:be:dc:d9:95:bb:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=6a3574f9-26c7-468a-adc4-f4adbe7910eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:5d:37:08:aa:ce:d6:c6:2e:2f:be:ad:d1: e3:7d:5a:4f:0c:45:36:bf:98:28:a8:78:e0:62:88: 82:9e:d7:0a:52:57:eb:57:83:59:4a:6b:50:f1:14: db:87:c1:b8:3e:7a:17:15:11:66:49:73:50:bb:b1: 57:1d:d6:24:16:8b:e0:22:87:53:3c:2e:13:38:34: f0:d4:9c:16:61:85:51:8e:00:41:67:fb:46:6d:48: 6e:0e:bd:c1:8e:b6:b2:99:05:20:f1:fb:9f:17:6f: 96:91:54:f1:6e:1e:a7:83:37:e5:15:82:b7:88:ac: d5:f1:6d:f4:28:a8:3a:3d:22:0a:de:6f:67:9e:3f: 34:83:a1:4d:bd:82:0d:60:88:0c:2b:c5:df:1e:ff: 2d:85:05:de:0d:de:9b:03:2b:ae:5d:51:d6:27:24: 05:e6:34:e1:1c:89:7e:f5:0f:fb:19:0d:cd:f0:e5: c7:58:bb:35:68:72:33:a7:c9:75:79:62:a3:94:26: 81:9c:3c:41:e0:ed:9c:bb:91:c1:3d:70:f3:21:52: 6e:d8:40:a3:5f:67:8d:c4:93:30:a7:70:5c:f2:32: 8a:57:3e:94:3f:e5:0a:ca:ca:d1:cd:ec:db:6e:6b: 9e:a0:a6:3c:a5:3b:e3:ca:33:cf:67:82:1a:cb:2e: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:91:FC:8F:81:38:DC:A2:03:A5:F4:0D:20:2E:46:08:5E:7F:D5:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f910016b-72da-3c1d-b0cf-01dd180eae03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:84:1c:8f:c8:6f:12:de:f0:77:f2:7b:60:06:53:93:da:82: b0:7c:34:d3:6b:5c:44:e9:66:56:b2:6f:c8:42:be:d9:87:f5: 84:f3:09:f2:9c:e2:f8:b4:46:ee:0f:28:29:87:f2:8a:29:3c: e5:ef:e9:27:09:8f:a4:f1:46:ec:b4:3f:32:6e:5b:61:5d:5c: 8e:ac:aa:d7:84:70:27:e2:0a:09:f0:f0:2c:41:4d:cf:b2:41: 98:4f:a4:1f:fc:9c:44:4d:30:e4:4e:5f:61:b6:3f:f4:af:3a: b1:ef:04:14:ce:b4:94:d8:b3:2e:55:9c:43:81:69:de:54:7e: 5f:49:75:57:9f:96:e5:65:d7:56:e2:57:c2:2d:dc:04:cc:d1: ae:5d:65:15:aa:18:c0:75:a6:af:e3:23:4f:21:66:41:ef:7d: c9:d8:11:2d:60:be:e4:10:1b:6e:90:24:76:fe:ab:b4:66:04: 72:38:17:6e:17:4d:fd:53:84:f7:e4:a4:90:d7:cf:ed:8d:c4: 86:31:93:3c:62:68:1e:b3:18:48:30:f9:db:7b:1c:8b:c8:5b: 8c:f4:94:54:84:68:63:b0:5f:8f:27:9e:db:f8:11:f3:ea:4e: 01:17:ad:5f:1f:bb:54:37:2e:cf:55:85:7a:29:33:a3:23:97: 99:ef:ba:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39TYm77c2ZW7z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NmEzNTc0ZjktMjZjNy00NjhhLWFkYzQtZjRhZGJlNzkxMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgONdNwiqztbGLi++rdHjfVpPDEU2v5goqHjg YoiCntcKUlfrV4NZSmtQ8RTbh8G4PnoXFRFmSXNQu7FXHdYkFovgIodTPC4TODTw 1JwWYYVRjgBBZ/tGbUhuDr3BjraymQUg8fufF2+WkVTxbh6ngzflFYK3iKzV8W30 KKg6PSIK3m9nnj80g6FNvYINYIgMK8XfHv8thQXeDd6bAyuuXVHWJyQF5jThHIl+ 9Q/7GQ3N8OXHWLs1aHIzp8l1eWKjlCaBnDxB4O2cu5HBPXDzIVJu2ECjX2eNxJMw p3Bc8jKKVz6UP+UKysrRzezbbmueoKY8pTvjyjPPZ4Iayy5O4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSR/I+BONyiA6X0DSAuRghef9WgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjkxMDAxNmItNzJkYS0z YzFkLWIwY2YtMDFkZDE4MGVhZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWEHI/IbxLe8Hfye2AGU5PagrB8NNNrXETpZlayb8hCvtmH9YTzCfKc 4vi0Ru4PKCmH8oopPOXv6ScJj6TxRuy0PzJuW2FdXI6sqteEcCfiCgnw8CxBTc+y QZhPpB/8nERNMOROX2G2P/SvOrHvBBTOtJTYsy5VnEOBad5Ufl9JdVefluVl11bi V8It3ATM0a5dZRWqGMB1pq/jI08hZkHvfcnYES1gvuQQG26QJHb+q7RmBHI4F24X Tf1ThPfkpJDXz+2NxIYxkzxiaB6zGEgw+dt7HIvIW4z0lFSEaGOwX48nntv4EfPq TgEXrV8fu1Q3Ls9VhXopM6Mjl5nvuq8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:48:11 2026 by rpki-client