$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20dd8c4b-4436-3a23-a21b-844f13aa91c2.roa File: 20dd8c4b-4436-3a23-a21b-844f13aa91c2.roa (raw, json) Hash identifier: tu/8J2OSCBVk30Zf8njpudc8HiHGH8BL0YjhziGGCbc= Subject key identifier: 12:32:27:86:44:E3:D9:E1:47:61:B4:B3:FA:6B:32:88:D4:41:D3:5C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D95EFE6DA5E505EA71D352B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20dd8c4b-4436-3a23-a21b-844f13aa91c2.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 104.22.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:e6:da:5e:50:5e:a7:1d:35:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=43396f16-6191-46c3-a27a-c3f01304f1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:d0:b6:0f:99:a3:5f:bc:65:ef:76:4f:8e: dd:80:5b:fc:08:7e:6c:e0:5e:f5:2d:60:eb:ae:4b: 87:cc:71:50:3f:21:ae:9e:19:4c:c0:42:58:d5:f6: 28:6b:09:69:f2:62:6f:bc:43:3c:53:4b:4f:51:4f: 50:13:0e:b7:13:0e:2b:12:75:41:63:6d:11:ad:ef: dc:f1:70:53:b7:34:25:e9:6c:d7:d2:77:14:8e:27: 7a:06:5c:7f:06:86:05:8d:28:59:69:09:03:5d:5c: 2b:0b:27:47:bf:a5:5c:a2:c6:0e:e7:01:de:93:ba: 7b:08:be:cf:7a:e5:69:8a:5b:15:1f:52:d6:63:b3: 1b:46:90:a6:76:0a:8a:42:c8:0e:7a:0e:58:e1:27: 9d:d4:bd:8f:27:e4:f1:7d:a6:47:2a:bf:26:6d:46: 9f:bf:07:5b:af:1c:c8:48:74:e4:c2:e9:ec:c5:5c: 90:93:60:66:6b:94:56:59:37:49:6e:fa:30:af:6a: fd:a2:d9:f9:c5:c7:93:ae:12:64:3d:16:5c:0c:f7: 18:c1:23:53:3e:79:8b:a0:16:9e:53:56:4c:80:15: 3a:85:d3:60:43:d9:85:07:8b:1b:78:3a:96:35:0b: 35:e6:36:cf:ef:df:9c:3e:3d:59:e5:f1:22:f0:3c: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:32:27:86:44:E3:D9:E1:47:61:B4:B3:FA:6B:32:88:D4:41:D3:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20dd8c4b-4436-3a23-a21b-844f13aa91c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.22.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:64:29:e9:b8:e3:be:20:b9:1f:1a:b1:52:d5:80:74:07:af: 2f:f4:7b:8e:6b:bc:8d:4c:14:a7:a2:af:27:d8:74:1a:7f:59: 23:02:68:0b:86:aa:bb:15:5e:b9:e5:a3:d7:5d:6a:b5:0f:e5: 2e:73:d2:dc:45:56:b8:74:4a:63:22:ff:d1:b0:a9:75:7d:d5: 95:81:4c:b2:74:0d:52:e4:e0:e6:04:39:74:a9:76:5a:db:b3: 8a:2a:b4:16:06:71:1c:02:9c:6a:a0:e0:4e:fa:97:8a:ea:26: 61:cc:f4:9d:a7:ee:8e:fd:2c:65:f4:57:a0:ec:14:9d:2d:20: 44:1d:95:50:1a:c8:02:6a:e7:f1:ac:62:75:22:7b:29:cc:fc: f9:29:08:43:c2:66:62:4d:0f:46:d9:44:7d:91:ba:c2:98:35: 50:ba:b7:ab:15:28:58:1e:10:73:b9:01:ea:5d:98:7d:a0:fa: e8:bb:cc:5f:c0:c6:76:46:3e:db:6b:e2:96:e8:54:4c:ce:bb: aa:74:b2:3f:a7:12:89:20:49:96:75:4b:ca:4e:7f:e7:25:fd: 8e:46:21:de:33:9b:0a:3f:c7:eb:e3:10:84:ba:a4:fc:29:d7: cb:cd:59:f2:18:8d:0b:cc:4b:ae:ac:f9:e0:e2:ce:f8:fb:25: 49:ae:96:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+baXlBepx01KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NDMzOTZmMTYtNjE5MS00NmMzLWEyN2EtYzNmMDEzMDRmMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy87Qtg+Zo1+8Ze92T47dgFv8CH5s4F71LWDr rkuHzHFQPyGunhlMwEJY1fYoawlp8mJvvEM8U0tPUU9QEw63Ew4rEnVBY20Rre/c 8XBTtzQl6WzX0ncUjid6Blx/BoYFjShZaQkDXVwrCydHv6VcosYO5wHek7p7CL7P euVpilsVH1LWY7MbRpCmdgqKQsgOeg5Y4Sed1L2PJ+TxfaZHKr8mbUafvwdbrxzI SHTkwunsxVyQk2Bma5RWWTdJbvowr2r9otn5xceTrhJkPRZcDPcYwSNTPnmLoBae U1ZMgBU6hdNgQ9mFB4sbeDqWNQs15jbP79+cPj1Z5fEi8Dw5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIyJ4ZE49nhR2G0s/prMojUQdNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjBkZDhjNGItNDQzNi0z YTIzLWEyMWItODQ0ZjEzYWE5MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtkKem4474guR8asVLVgHQHry/0e45rvI1MFKeiryfYdBp/WSMCaAuG qrsVXrnlo9ddarUP5S5z0txFVrh0SmMi/9GwqXV91ZWBTLJ0DVLk4OYEOXSpdlrb s4oqtBYGcRwCnGqg4E76l4rqJmHM9J2n7o79LGX0V6DsFJ0tIEQdlVAayAJq5/Gs YnUieynM/PkpCEPCZmJND0bZRH2RusKYNVC6t6sVKFgeEHO5AepdmH2g+ui7zF/A xnZGPttr4pboVEzOu6p0sj+nEokgSZZ1S8pOf+cl/Y5GId4zmwo/x+vjEIS6pPwp 18vNWfIYjQvMS66s+eDizvj7JUmulok= -----END CERTIFICATE-----Generated at Wed May 13 13:13:19 2026 by rpki-client