$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa File: bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa (raw, json) Hash identifier: jNjk+Xpc9Xp8VdIShCnUWG6+EFDgDI9DCsLm+op69hs= Subject key identifier: D1:CE:D2:58:7F:C7:3A:8A:1D:9F:1E:87:BA:54:69:80:DC:FC:EE:4C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4824961276B3FE6F6A83E5C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 104.16.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:96:12:76:b3:fe:6f:6a:83:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=898d9a59-51f4-4a12-a4f4-48e15531d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:d4:a6:43:cf:22:b4:ce:62:cc:bd:16:29: bc:ec:5f:de:5b:d6:01:47:97:11:70:f7:b0:7d:5c: 89:0f:22:13:1d:6c:36:ab:52:fd:cd:dd:8d:0a:be: d8:72:7e:12:50:ed:06:ba:6d:16:5a:43:c7:94:7d: 4f:44:35:8b:b8:d7:4f:98:70:a5:a5:f2:ac:0c:89: 63:03:80:a8:7e:b1:f8:45:9f:42:4b:19:7a:aa:85: ad:8a:9f:38:5a:a4:f4:50:5e:b0:de:28:cb:b9:e4: b9:a2:72:be:bb:21:fc:e7:cb:82:84:09:4e:8e:a1: 8e:27:70:e1:98:9e:72:d9:57:27:02:1a:f0:e4:e7: 1d:7c:6e:6c:71:cb:50:00:9b:d3:c5:41:bc:a0:a1: 74:c3:b4:f9:35:00:e0:46:2b:72:3b:dc:67:8e:1c: e8:e7:c1:3a:f2:5e:f3:4b:98:68:19:65:7e:b5:35: 31:21:bb:ac:98:94:20:f3:39:08:e4:a6:be:f6:bb: 32:96:ca:7d:7c:05:6d:94:ab:4c:8d:ac:7b:30:3b: 19:76:1d:71:3d:7f:54:c8:45:00:5d:13:37:70:fd: 84:66:3b:d0:55:91:72:b7:df:a1:00:0c:d2:17:2d: c8:66:8e:50:ec:5b:1c:f5:42:87:00:1b:7d:ad:ea: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CE:D2:58:7F:C7:3A:8A:1D:9F:1E:87:BA:54:69:80:DC:FC:EE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:47:f0:0b:15:85:fb:98:5d:f0:71:e3:c0:ea:f8:93:f2:8b: 6d:14:bf:2f:38:f8:7d:e6:63:fc:d1:04:92:66:7f:5d:3f:95: 51:86:02:01:bf:c9:4d:84:3a:61:16:a8:5f:99:1e:8c:d9:3b: dc:f2:11:57:90:4c:7f:e4:aa:5b:98:d6:04:4f:07:9c:5c:7c: 3e:d0:b8:f3:12:3e:26:be:97:83:4f:91:6d:e7:e6:08:2e:23: c5:53:52:58:38:c6:c6:4d:58:1e:88:a7:90:c8:69:e6:e8:ff: da:5b:45:bd:2a:97:c4:cc:cc:a5:33:ac:74:a3:b7:74:00:5a: f6:b9:97:93:28:08:99:a9:ba:4e:24:48:e4:75:55:31:89:03: 43:af:31:44:81:5f:d3:bd:25:73:0e:97:5d:d3:48:c9:ee:34: 04:fc:d5:0f:a0:20:fc:47:77:9f:a3:9c:f9:b0:ee:11:2f:ec: 89:e6:81:45:1e:03:ef:ec:97:15:3b:54:55:e8:1d:f1:31:16: 2d:7b:2a:0f:5d:91:b5:57:27:f7:04:36:b6:16:fb:10:21:5c: a1:20:e9:13:a1:8a:ad:17:fc:8b:2c:a6:68:07:b0:78:d6:98: 28:1a:3b:b2:9b:a6:78:c8:e5:8e:de:7f:57:d6:df:b0:28:ae: ba:f1:c5:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJYSdrP+b2qD5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ODk4ZDlhNTktNTFmNC00YTEyLWE0ZjQtNDhlMTU1MzFkNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7vUpkPPIrTOYsy9Fim87F/eW9YBR5cRcPew fVyJDyITHWw2q1L9zd2NCr7Ycn4SUO0Gum0WWkPHlH1PRDWLuNdPmHClpfKsDIlj A4CofrH4RZ9CSxl6qoWtip84WqT0UF6w3ijLueS5onK+uyH858uChAlOjqGOJ3Dh mJ5y2VcnAhrw5OcdfG5scctQAJvTxUG8oKF0w7T5NQDgRityO9xnjhzo58E68l7z S5hoGWV+tTUxIbusmJQg8zkI5Ka+9rsylsp9fAVtlKtMjax7MDsZdh1xPX9UyEUA XRM3cP2EZjvQVZFyt9+hAAzSFy3IZo5Q7Fsc9UKHABt9rer45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHO0lh/xzqKHZ8eh7pUaYDc/O5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmZkZTBkOTktYWFkZi0z MjMxLWI2Y2YtZGY5YzVjNmVkZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVH8AsVhfuYXfBx48Dq+JPyi20Uvy84+H3mY/zRBJJmf10/lVGGAgG/ yU2EOmEWqF+ZHozZO9zyEVeQTH/kqluY1gRPB5xcfD7QuPMSPia+l4NPkW3n5ggu I8VTUlg4xsZNWB6Ip5DIaebo/9pbRb0ql8TMzKUzrHSjt3QAWva5l5MoCJmpuk4k SOR1VTGJA0OvMUSBX9O9JXMOl13TSMnuNAT81Q+gIPxHd5+jnPmw7hEv7InmgUUe A+/slxU7VFXoHfExFi17Kg9dkbVXJ/cENrYW+xAhXKEg6ROhiq0X/IsspmgHsHjW mCgaO7KbpnjI5Y7ef1fW37AorrrxxdI= -----END CERTIFICATE-----Generated at Thu Jul 23 23:12:29 2026 by rpki-client