$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa File: cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json) Hash identifier: 0R4JmSPIzP4nER71k2I8cSrFGIcALc1jUAi8P9kJ+GU= Subject key identifier: 12:A6:E6:7C:69:EB:C0:48:C5:A3:B7:8B:6A:96:27:9C:68:EE:D3:28 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584F4973D2DF9BA556A12A5A6B40 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d2:df:9b:a5:56:a1:2a:5a:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=26f8a4f3-7889-4ed6-a7d4-220d6cf2f9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ab:d0:39:39:a2:a9:48:d4:bb:70:48:b7:8c: f4:de:7c:77:a7:46:08:ec:0f:f9:87:b9:bd:ba:38: f5:36:6a:c0:46:45:2f:d4:d9:24:88:88:64:3a:db: b4:9f:d6:27:db:bf:f2:e0:1c:a8:30:83:03:66:c9: 24:b8:82:9f:67:55:e1:d5:fc:96:44:4d:66:65:1e: da:0d:5c:af:f8:f1:4a:cc:c4:b5:53:89:35:7b:41: 9e:35:04:4f:dc:f0:89:87:db:f1:3e:29:c1:af:7c: 7c:d5:34:da:c0:fc:33:c4:81:76:cb:c2:c3:f4:b7: 4e:6e:34:75:ec:55:ca:9a:b1:9a:42:1f:df:f2:57: 33:03:84:7b:f9:08:e2:f2:36:ce:e6:c1:2c:81:54: 7c:c1:7d:26:1d:e2:2a:fa:07:d4:3a:aa:00:b2:e8: 6e:9e:9c:9e:f4:47:68:3c:cb:48:fa:05:b2:fd:f4: 82:18:7f:3f:c4:84:3e:52:94:99:80:7a:64:eb:43: 18:5e:1f:6f:a0:de:06:9a:bd:a7:bb:43:11:06:66: 55:a3:30:19:f7:62:e9:42:4c:e0:68:b3:9a:8d:3d: e4:ca:df:c7:c2:f9:96:9b:3c:d0:8a:9e:ea:6f:15: 08:01:8e:c8:16:64:7f:50:d5:1a:da:7c:b8:2d:2b: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:E6:7C:69:EB:C0:48:C5:A3:B7:8B:6A:96:27:9C:68:EE:D3:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:dd:0d:62:e3:38:d4:df:f5:74:bb:2d:98:63:32:2c:88:d9: 27:ff:01:3d:38:d4:47:14:5c:9c:1b:d9:5b:fb:34:79:bb:47: b7:d1:bb:3d:79:89:83:f4:6e:ab:18:5a:2b:17:d4:86:9e:55: 03:91:6a:f1:f3:9e:23:21:70:93:b0:95:df:bf:83:b9:a0:81: 40:e6:c5:7d:c7:da:c1:3b:0d:1f:bf:c1:15:04:69:e5:7b:4f: 8d:61:3d:cc:28:1d:9b:bb:8d:38:6c:8d:bb:bc:37:e7:95:81: b5:6b:e0:03:80:2a:da:34:f0:e7:62:99:27:ed:26:92:2a:64: d5:0b:ae:b0:06:5d:2d:61:18:17:b6:1a:fc:3a:4a:af:c9:58: f7:70:40:c9:ca:05:16:30:2c:f1:f4:41:6f:6c:70:fd:27:7d: 2c:53:17:4f:ba:2c:e6:28:d7:36:81:b7:cf:b1:be:b4:b7:eb: 42:e0:38:ed:58:24:6c:9f:c0:12:be:49:94:db:31:3c:ed:31: 2e:1a:4c:65:a2:1b:e1:87:41:70:94:de:1a:48:8b:23:22:78: 59:61:5c:f0:99:77:c7:2d:7d:91:95:a2:5f:5a:c3:dc:54:f9: d3:ff:32:0e:ae:4a:8b:f0:5a:a5:f9:dc:db:3f:ad:c1:34:60: 6d:62:cf:a0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc9Lfm6VWoSpaa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjZmOGE0ZjMtNzg4OS00ZWQ2LWE3ZDQtMjIwZDZjZjJmOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmavQOTmiqUjUu3BIt4z03nx3p0YI7A/5h7m9 ujj1NmrARkUv1NkkiIhkOtu0n9Yn27/y4ByoMIMDZskkuIKfZ1Xh1fyWRE1mZR7a DVyv+PFKzMS1U4k1e0GeNQRP3PCJh9vxPinBr3x81TTawPwzxIF2y8LD9LdObjR1 7FXKmrGaQh/f8lczA4R7+Qji8jbO5sEsgVR8wX0mHeIq+gfUOqoAsuhunpye9Edo PMtI+gWy/fSCGH8/xIQ+UpSZgHpk60MYXh9voN4Gmr2nu0MRBmZVozAZ92LpQkzg aLOajT3kyt/HwvmWmzzQip7qbxUIAY7IFmR/UNUa2ny4LSv7SQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBKm5nxp68BIxaO3i2qWJ5xo7tMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvY2ZjZTJiYTQtN2NkOC0z NzIyLTk2ZTAtNDE1YjNmYzU1MjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQA aMjeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJTdDWLjONTf9XS7LZhjMiyI2Sf/AT041EcUXJwb2Vv7NHm7 R7fRuz15iYP0bqsYWisX1IaeVQORavHzniMhcJOwld+/g7mggUDmxX3H2sE7DR+/ wRUEaeV7T41hPcwoHZu7jThsjbu8N+eVgbVr4AOAKto08OdimSftJpIqZNULrrAG XS1hGBe2Gvw6Sq/JWPdwQMnKBRYwLPH0QW9scP0nfSxTF0+6LOYo1zaBt8+xvrS3 60LgOO1YJGyfwBK+SZTbMTztMS4aTGWiG+GHQXCU3hpIiyMieFlhXPCZd8ctfZGV ol9aw9xU+dP/Mg6uSovwWqX53Ns/rcE0YG1iz6A= -----END CERTIFICATE-----Generated at Tue Oct 6 14:29:17 2026 by rpki-client