$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa File: 295e6495-4792-3797-a2bf-51461c90e961.roa (raw, json) Hash identifier: dehR3+VVPnYH+IwKsariv+C4+QDvibrM1yiPVKHrbP0= Subject key identifier: FB:55:25:F6:CB:3D:D4:AE:9D:BA:ED:93:61:DC:0F:40:19:D1:08:F1 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584EA791B3193459D9F1959233C0 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40342 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:b3:19:34:59:d9:f1:95:92:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e8fb5ec6-650d-4a92-9b36-c8265c644865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:94:dd:0e:0e:cd:7d:02:57:80:86:26:1e:18: 6c:61:91:b8:c0:47:5f:cd:dd:57:eb:e1:96:c9:45: c1:fd:5d:ea:a4:59:04:62:d4:74:96:62:03:49:86: b3:49:6e:63:ab:65:56:f4:82:63:11:b9:5a:f8:bd: 97:73:97:84:c6:ba:7e:e3:ce:6e:63:a1:ac:cd:c5: 9f:29:44:35:35:a1:0e:b8:9c:c4:a8:08:0e:d4:e9: d5:bd:82:38:19:0e:af:5a:79:d9:f0:f4:06:b4:18: f9:35:a1:ef:d5:ce:9e:b7:88:22:2a:42:1c:c3:8b: 97:c0:9e:bb:a2:41:df:3e:57:37:03:9d:a9:d2:52: 8e:a1:9e:35:b0:91:15:92:b6:1c:f8:e0:9e:81:bb: 8d:12:a3:13:34:04:95:92:83:08:2f:12:84:15:fd: 40:81:33:ee:85:bc:bf:7a:61:37:12:1d:d2:4b:87: c3:38:d4:da:20:ac:45:e1:e5:73:f1:39:e6:61:05: c9:3e:1b:d2:8e:90:52:2e:88:77:d3:89:5d:0d:49: 4e:60:0b:aa:61:21:4b:18:13:bd:57:20:f7:93:77: ef:2a:8d:08:08:e7:04:f6:d7:f0:31:ae:03:ff:51: 62:d2:5a:92:7f:0e:b7:b7:96:c7:2f:7f:2e:f8:51: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:55:25:F6:CB:3D:D4:AE:9D:BA:ED:93:61:DC:0F:40:19:D1:08:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a7:7e:b6:15:4e:61:d5:93:e9:57:fa:8b:e5:c8:97:08:a8: 8a:74:52:1f:0d:89:ae:37:74:b8:da:b9:c3:13:94:23:50:14: 24:1a:4d:6b:d2:78:f5:c6:f1:90:e6:2b:79:be:d9:f7:ac:cb: ee:11:ee:8d:cb:09:71:7a:6f:bb:64:a7:84:e7:0a:d5:7c:97: 5b:37:04:17:30:96:3d:79:ff:c5:99:b9:ca:41:c9:41:47:12: 6c:5f:65:61:f0:a9:a0:a0:1c:e8:b2:3a:a9:d3:2a:00:9f:d0: fb:18:6a:93:d5:23:35:93:2e:db:8b:c6:95:5d:0f:c6:31:ca: b4:f6:e0:84:3e:66:af:3d:97:05:9f:31:1a:ac:c4:db:2b:2e: da:18:50:0a:57:4e:b6:27:a1:6e:47:9e:c2:2e:52:e8:b2:32: 68:72:fb:fd:c7:14:74:88:d2:cc:cf:07:d2:69:59:c1:82:64: 89:aa:79:c9:ba:29:d7:36:67:7b:8e:1a:29:0c:49:da:83:8b: 1b:23:b9:a2:33:62:77:18:87:ff:fe:53:0c:80:bf:48:7b:20: 40:23:c6:78:bf:19:a9:c8:ac:2a:4a:98:83:39:11:ce:5c:8a: c3:b8:09:a2:eb:13:7f:08:cb:48:34:6a:af:fc:c2:31:b9:1c: 28:3e:56:52 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nkbMZNFnZ8ZWSM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZThmYjVlYzYtNjUwZC00YTkyLTliMzYtYzgyNjVjNjQ0ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJTdDg7NfQJXgIYmHhhsYZG4wEdfzd1X6+GW yUXB/V3qpFkEYtR0lmIDSYazSW5jq2VW9IJjEbla+L2Xc5eExrp+485uY6GszcWf KUQ1NaEOuJzEqAgO1OnVvYI4GQ6vWnnZ8PQGtBj5NaHv1c6et4giKkIcw4uXwJ67 okHfPlc3A52p0lKOoZ41sJEVkrYc+OCegbuNEqMTNASVkoMILxKEFf1AgTPuhby/ emE3Eh3SS4fDONTaIKxF4eVz8TnmYQXJPhvSjpBSLoh304ldDUlOYAuqYSFLGBO9 VyD3k3fvKo0ICOcE9tfwMa4D/1Fi0lqSfw63t5bHL38u+FFH2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPtVJfbLPdSunbrtk2HcD0AZ0QjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMjk1ZTY0OTUtNDc5Mi0z Nzk3LWEyYmYtNTE0NjFjOTBlOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQC aMjcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEGnfrYVTmHVk+lX+ovlyJcIqIp0Uh8Nia43dLjaucMTlCNQ FCQaTWvSePXG8ZDmK3m+2fesy+4R7o3LCXF6b7tkp4TnCtV8l1s3BBcwlj15/8WZ ucpByUFHEmxfZWHwqaCgHOiyOqnTKgCf0PsYapPVIzWTLtuLxpVdD8YxyrT24IQ+ Zq89lwWfMRqsxNsrLtoYUApXTrYnoW5HnsIuUuiyMmhy+/3HFHSI0szPB9JpWcGC ZImqecm6Kdc2Z3uOGikMSdqDixsjuaIzYncYh//+UwyAv0h7IEAjxni/GanIrCpK mIM5Ec5cisO4CaLrE38Iy0g0aq/8wjG5HCg+VlI= -----END CERTIFICATE-----Generated at Fri Aug 21 02:01:44 2026 by rpki-client