$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa File: bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa (raw, json) Hash identifier: YqowQ65hP0fIY4ByP9atK+2rRFUF5jViNNicJgWuU9M= Subject key identifier: 15:17:EC:24:A2:E4:5A:11:95:6F:F5:3D:AB:C2:43:0E:34:60:8A:F8 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584F374D2DCF45EAAFCE31670440 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 23470 IP address blocks: 104.238.220.0/24 maxlen: 24 104.238.221.0/24 maxlen: 24 104.238.222.0/24 maxlen: 24 104.238.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2d:cf:45:ea:af:ce:31:67:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=7dc07e35-1315-4016-b16d-1171ac3b2386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:54:75:96:c2:95:2a:55:18:20:24:c0:1a: 0d:22:48:1b:fc:b3:c9:d0:bf:12:fb:b7:be:58:d4: a9:d9:40:e1:00:90:65:bc:82:b5:b0:f5:ae:8c:81: da:5e:8b:10:22:14:72:64:72:c2:7a:12:c2:be:ee: ba:33:3e:fb:8e:41:81:67:dd:3e:f3:a2:da:86:2d: 33:c2:bb:73:45:13:ab:c2:76:61:c9:49:aa:90:44: a8:9f:21:f1:dd:16:35:7d:b6:a5:02:b4:d0:cd:c2: 2a:98:27:df:81:9d:c1:26:4e:6e:6b:37:4b:20:a5: ff:6c:e6:f4:58:a3:15:ac:0d:9a:c4:67:7a:60:a1: bd:48:1e:f0:9c:ab:87:ac:35:d2:a2:05:1a:1e:93: 02:82:36:c1:37:e2:8b:69:a6:bc:4c:07:39:d9:e1: 4e:0c:c9:de:26:ed:78:26:80:08:fe:fc:5d:0c:e3: 7c:c1:ea:b1:a9:6b:91:d3:5f:54:7e:a4:4a:ea:9e: 3f:e6:84:01:b1:de:cf:19:b1:a3:99:dc:25:82:ef: 27:70:a2:80:fe:14:33:22:16:7a:a2:3a:65:8a:ca: a9:37:97:ba:50:3c:2f:ec:2b:f1:e2:36:0f:f0:ac: b4:16:c5:73:3c:53:08:b6:9a:62:07:2f:d6:bc:9d: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:EC:24:A2:E4:5A:11:95:6F:F5:3D:AB:C2:43:0E:34:60:8A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.238.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d8:92:0b:09:60:8c:c5:7e:82:c3:48:21:1b:03:3a:fe:9b: 5b:eb:87:0d:33:f1:42:3b:7c:a7:8a:db:4e:f1:6a:43:12:d9: 83:6f:57:8f:57:c2:8d:20:11:01:ec:4a:e4:64:3e:a2:f8:9f: 72:0f:32:f2:13:dc:24:22:3e:25:05:33:7b:a6:ba:bc:89:ec: 61:5b:34:03:38:a0:3c:3e:9c:02:0a:53:10:45:76:51:2e:d0: c9:8f:18:69:3b:12:7b:54:56:91:99:c5:e1:b8:aa:3f:d9:de: 7a:c6:d3:21:92:17:ce:85:cc:3e:0e:d3:38:a3:c8:94:65:b2: 7a:74:e9:ae:fb:b9:e9:7a:15:bb:10:50:65:32:33:08:18:13: 8f:53:4e:13:68:fe:11:b0:d7:25:61:f3:2a:7e:cc:aa:df:ca: 2c:6c:cf:c2:c7:aa:26:46:42:45:ee:c6:c5:04:90:23:51:34: d6:c4:eb:b7:5e:97:44:cc:3a:f2:84:81:d1:65:a5:3e:25:8a: 5e:ff:ac:99:94:8b:1a:bc:fc:c9:b8:36:ab:a9:d2:81:a2:cb: 13:84:e4:68:fb:98:ea:51:b6:fc:02:fa:b9:14:97:c8:82:24: 02:45:62:07:37:e3:db:db:a9:a7:16:eb:ef:bb:3c:64:c4:5e: ae:8e:a6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TS3PReqvzjFnBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk N2RjMDdlMzUtMTMxNS00MDE2LWIxNmQtMTE3MWFjM2IyMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtlUdZbClSpVGCAkwBoNIkgb/LPJ0L8S+7e+ WNSp2UDhAJBlvIK1sPWujIHaXosQIhRyZHLCehLCvu66Mz77jkGBZ90+86Lahi0z wrtzRROrwnZhyUmqkESonyHx3RY1fbalArTQzcIqmCffgZ3BJk5uazdLIKX/bOb0 WKMVrA2axGd6YKG9SB7wnKuHrDXSogUaHpMCgjbBN+KLaaa8TAc52eFODMneJu14 JoAI/vxdDON8weqxqWuR019UfqRK6p4/5oQBsd7PGbGjmdwlgu8ncKKA/hQzIhZ6 ojplisqpN5e6UDwv7Cvx4jYP8Ky0FsVzPFMItppiBy/WvJ1LSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUX7CSi5FoRlW/1PavCQw40YIr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmVmOGUwYTYtZDUzOC0z ZDdjLTgxYjMtYThkYjIyMWQzNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrYkgsJYIzFfoLDSCEbAzr+m1vrhw0z8UI7fKeK207xakMS2YNvV49X wo0gEQHsSuRkPqL4n3IPMvIT3CQiPiUFM3umuryJ7GFbNAM4oDw+nAIKUxBFdlEu 0MmPGGk7EntUVpGZxeG4qj/Z3nrG0yGSF86FzD4O0zijyJRlsnp06a77uel6FbsQ UGUyMwgYE49TThNo/hGw1yVh8yp+zKrfyixsz8LHqiZGQkXuxsUEkCNRNNbE67de l0TMOvKEgdFlpT4lil7/rJmUixq8/Mm4Nqup0oGiyxOE5Gj7mOpRtvwC+rkUl8iC JAJFYgc349vbqacW6++7PGTEXq6Opjo= -----END CERTIFICATE-----Generated at Thu Oct 8 18:01:41 2026 by rpki-client