$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa File: 295e6495-4792-3797-a2bf-51461c90e961.roa (raw, json) Hash identifier: 7vw+Nn60u0VNkuycmG7tZ4OUdODSx81VlGIFPmq91j4= Subject key identifier: 82:2D:F8:91:F8:C6:15:25:AB:54:62:EF:05:28:A9:B8:ED:96:05:45 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584DE84B3D3EC0A5EE621BF0AE80 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 40342 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:3d:3e:c0:a5:ee:62:1b:f0:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=cbb9f03a-0196-4934-9a65-52b117642634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:57:68:b9:75:2d:d1:bf:81:9c:03:15:95: f7:7f:d4:71:53:63:dd:6c:c8:ad:19:a2:13:c3:77: a2:69:51:c8:17:b7:14:a8:f1:e0:ea:a4:ee:95:f9: 8a:73:c3:6a:f7:1e:6e:ea:b7:4f:99:99:d1:25:4d: 98:9d:03:3e:51:6c:96:4b:3e:66:4b:6c:86:c8:8e: 06:8c:4a:14:e4:5e:df:14:47:ee:44:89:c5:49:da: 6e:54:cf:35:c2:25:df:3e:37:4d:0e:64:20:f7:2f: f7:b1:f6:12:27:0f:07:fd:a6:44:bc:30:a3:c5:1d: e4:f0:87:e6:ff:dc:2c:b8:51:42:82:da:69:22:d3: 97:05:60:b8:07:8b:d4:24:7a:76:b2:a4:c0:50:20: 3e:a0:4e:7d:a6:6e:b9:4b:0d:8e:46:60:68:05:4b: ac:c9:e4:cc:7c:b3:45:d4:fe:f3:a1:8c:0d:d9:2e: 5b:81:f8:aa:52:1c:46:10:07:93:92:b3:06:e5:6c: be:c0:83:8f:5a:53:c3:1d:4b:77:7c:96:a2:28:2f: a5:20:89:da:96:7e:fd:5c:d2:93:02:2d:84:40:bc: f1:35:06:b1:57:7a:6c:ce:91:f5:a7:eb:24:ee:10: 88:9c:80:f3:c9:c7:53:6d:9f:a6:78:1b:64:98:66: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2D:F8:91:F8:C6:15:25:AB:54:62:EF:05:28:A9:B8:ED:96:05:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:1b:96:bd:6e:8b:3b:1e:4c:a9:be:a3:08:5f:78:e6:0b:55: d8:a4:13:1c:fa:77:41:1d:25:1e:c7:cd:37:74:95:ca:5c:c8: 66:db:31:00:b8:b2:cf:5b:94:5f:a3:3b:28:87:4e:d7:7c:57: f9:3f:13:5f:4b:49:ff:a4:6a:44:b5:f2:72:10:f4:68:ea:30: 2b:d5:17:8d:52:4e:a8:f9:e5:43:ae:ce:61:8e:bf:7c:c6:55: 7b:f6:31:fc:f2:4a:41:0e:38:6a:0b:53:0a:18:4e:c1:79:d0: 3c:da:90:04:ca:fd:62:6c:5e:dc:2f:dc:b7:df:2f:34:d0:b7: 1a:b7:4a:76:e2:b9:ea:9d:45:b2:2a:e9:bf:d0:79:90:6e:d4: a3:98:63:34:ae:72:84:d6:17:c4:cd:ee:9c:87:a7:83:8f:8e: 4a:3b:9a:b5:7a:db:0d:65:90:78:61:8f:15:4a:28:6d:87:31: 5b:4e:2b:f8:c4:05:8d:99:2f:17:e2:3a:cc:56:81:73:ff:ad: f4:95:fc:a9:67:5b:30:88:7a:39:9e:d9:4b:4c:b0:a9:72:e5: 0e:0e:96:ff:49:f2:81:1d:1f:1b:48:0e:6d:26:aa:cd:97:5a: ea:8e:5f:07:c3:89:1b:ce:16:34:e2:92:33:59:30:65:41:7b: 66:2e:4a:e5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3oSz0+wKXuYhvwroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk Y2JiOWYwM2EtMDE5Ni00OTM0LTlhNjUtNTJiMTE3NjQyNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfxXaLl1LdG/gZwDFZX3f9RxU2PdbMitGaIT w3eiaVHIF7cUqPHg6qTulfmKc8Nq9x5u6rdPmZnRJU2YnQM+UWyWSz5mS2yGyI4G jEoU5F7fFEfuRInFSdpuVM81wiXfPjdNDmQg9y/3sfYSJw8H/aZEvDCjxR3k8Ifm /9wsuFFCgtppItOXBWC4B4vUJHp2sqTAUCA+oE59pm65Sw2ORmBoBUusyeTMfLNF 1P7zoYwN2S5bgfiqUhxGEAeTkrMG5Wy+wIOPWlPDHUt3fJaiKC+lIInaln79XNKT Ai2EQLzxNQaxV3pszpH1p+sk7hCInIDzycdTbZ+meBtkmGZ1cQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIIt+JH4xhUlq1Ri7wUoqbjtlgVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMjk1ZTY0OTUtNDc5Mi0z Nzk3LWEyYmYtNTE0NjFjOTBlOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQC aMjcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD0blr1uizseTKm+owhfeOYLVdikExz6d0EdJR7HzTd0lcpc yGbbMQC4ss9blF+jOyiHTtd8V/k/E19LSf+kakS18nIQ9GjqMCvVF41STqj55UOu zmGOv3zGVXv2MfzySkEOOGoLUwoYTsF50DzakATK/WJsXtwv3LffLzTQtxq3Snbi ueqdRbIq6b/QeZBu1KOYYzSucoTWF8TN7pyHp4OPjko7mrV62w1lkHhhjxVKKG2H MVtOK/jEBY2ZLxfiOsxWgXP/rfSV/KlnWzCIejme2UtMsKly5Q4Olv9J8oEdHxtI Dm0mqs2XWuqOXwfDiRvOFjTikjNZMGVBe2YuSuU= -----END CERTIFICATE-----Generated at Thu May 21 19:34:10 2026 by rpki-client