$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa File: 295e6495-4792-3797-a2bf-51461c90e961.roa (raw, json) Hash identifier: kciREbI1TtS0F2/mhJjJ3kPHZUMX/UWiTVYPow8E5bs= Subject key identifier: C5:D1:5A:51:BF:C5:69:CA:C1:1E:6B:A0:52:B7:10:38:66:2B:3C:B6 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584F49740DF43AE5DE2BDFBB9F40 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40342 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0d:f4:3a:e5:de:2b:df:bb:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=761d5c46-fb20-425c-a875-59b79183a806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:89:49:cb:dd:a0:fb:ca:e4:ce:9a:3b:a9: b1:99:4f:1b:a1:f7:7a:73:09:e7:2f:ff:58:f8:63: de:9f:57:58:aa:c0:1e:65:c6:6f:e2:d3:c8:ef:ed: bb:f6:f1:b8:e5:da:be:c6:84:a1:28:9c:cb:46:61: 41:6d:c1:3c:18:27:7a:23:e4:25:ed:2f:ac:93:ec: 7c:5b:b9:5c:4a:99:e6:5f:d9:10:51:b6:84:ce:64: 48:d4:23:1c:a3:d7:9d:0a:d4:f9:80:b9:e8:88:48: ba:20:1c:bd:ba:18:4d:ba:90:d3:9d:13:04:36:3c: 47:1b:cf:ea:bd:8d:e3:26:01:36:e9:30:fc:35:eb: e6:83:b3:c9:be:37:da:4f:1d:4d:51:f5:df:45:7a: f4:0e:16:d0:10:21:30:68:4a:1c:0d:1f:c9:b4:4c: cc:dc:2e:6a:72:c4:71:ba:44:50:5e:fb:e0:06:02: 7f:aa:62:cf:4f:7e:02:49:b4:ed:6e:c5:15:ae:f3: f3:fc:96:75:68:77:ae:d2:0c:d8:68:21:d9:53:4d: 50:2c:1c:6c:69:62:20:36:21:32:88:78:e5:4a:9f: 43:87:94:22:6f:06:02:73:39:c0:1b:da:02:3c:e7: 37:da:5e:d9:15:b1:da:64:5a:71:6d:07:c4:9b:b9: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:5A:51:BF:C5:69:CA:C1:1E:6B:A0:52:B7:10:38:66:2B:3C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:33:fe:49:87:65:5c:db:f7:71:84:6a:e3:3c:a9:2c:89:60: 82:72:35:e8:18:01:7a:de:d8:38:ba:1b:bb:cf:77:be:d1:a3: f3:ae:f5:80:bc:c8:0a:be:b0:e5:e9:f5:ab:4c:3d:04:c9:10: bb:40:06:f6:6b:0d:a8:54:78:ea:5a:2c:24:54:33:6a:ce:12: 6b:1d:26:43:8f:75:01:35:74:4f:9c:2d:4d:cb:91:01:13:2b: 9f:7f:17:22:dd:4d:1c:c8:c1:d7:12:1c:a0:71:7a:99:6a:d5: 3d:2b:df:08:37:c9:7d:eb:03:f9:29:ee:05:a6:ae:18:ad:c7: ff:5b:9c:21:dc:f6:59:47:66:87:87:01:bf:3c:02:da:ed:0c: 1b:68:ea:8f:5d:51:0d:fa:95:69:a0:35:f5:be:fe:65:29:65: 82:2b:e9:96:33:88:a5:d9:31:f6:8f:2b:3d:05:0b:21:d5:10: e8:83:75:e2:50:29:8b:f3:e3:ec:fa:85:6e:8c:87:d3:af:d0: 35:e3:fb:52:dd:7f:bd:e3:36:f3:a0:62:01:af:2d:7a:02:ec: bb:e5:fe:11:73:92:85:10:38:3b:86:5e:57:9b:ba:14:17:0c: f5:6d:63:89:da:a8:96:ed:a4:6e:a6:6d:09:d2:4b:06:c3:3e: 5f:69:e9:e4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdA30OuXeK9+7n0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzYxZDVjNDYtZmIyMC00MjVjLWE4NzUtNTliNzkxODNhODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0aJScvdoPvK5M6aO6mxmU8bofd6cwnnL/9Y +GPen1dYqsAeZcZv4tPI7+279vG45dq+xoShKJzLRmFBbcE8GCd6I+Ql7S+sk+x8 W7lcSpnmX9kQUbaEzmRI1CMco9edCtT5gLnoiEi6IBy9uhhNupDTnRMENjxHG8/q vY3jJgE26TD8Nevmg7PJvjfaTx1NUfXfRXr0DhbQECEwaEocDR/JtEzM3C5qcsRx ukRQXvvgBgJ/qmLPT34CSbTtbsUVrvPz/JZ1aHeu0gzYaCHZU01QLBxsaWIgNiEy iHjlSp9Dh5QibwYCcznAG9oCPOc32l7ZFbHaZFpxbQfEm7lhQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMXRWlG/xWnKwR5roFK3EDhmKzy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMjk1ZTY0OTUtNDc5Mi0z Nzk3LWEyYmYtNTE0NjFjOTBlOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQC aMjcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAgz/kmHZVzb93GEauM8qSyJYIJyNegYAXre2Di6G7vPd77R o/Ou9YC8yAq+sOXp9atMPQTJELtABvZrDahUeOpaLCRUM2rOEmsdJkOPdQE1dE+c LU3LkQETK59/FyLdTRzIwdcSHKBxeplq1T0r3wg3yX3rA/kp7gWmrhitx/9bnCHc 9llHZoeHAb88AtrtDBto6o9dUQ36lWmgNfW+/mUpZYIr6ZYziKXZMfaPKz0FCyHV EOiDdeJQKYvz4+z6hW6Mh9Ov0DXj+1Ldf73jNvOgYgGvLXoC7Lvl/hFzkoUQODuG XlebuhQXDPVtY4naqJbtpG6mbQnSSwbDPl9p6eQ= -----END CERTIFICATE-----Generated at Wed Oct 7 11:25:29 2026 by rpki-client