$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa File: bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa (raw, json) Hash identifier: IFU/nC6CObKMOg5K98RhWW7ZQlHKrOPdZ4ZdXY3BPmU= Subject key identifier: 4E:6E:C7:10:C7:AE:46:DD:40:94:C8:35:4F:41:AF:4F:0E:EA:D6:3C Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584E94EA5EE6A4E85B7738097EC0 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 23470 IP address blocks: 104.238.220.0/24 maxlen: 24 104.238.221.0/24 maxlen: 24 104.238.222.0/24 maxlen: 24 104.238.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:5e:e6:a4:e8:5b:77:38:09:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=1926e166-1e65-4a2e-898d-618fc2ac569c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5e:45:be:2b:c6:c1:ed:c2:0e:7c:c7:63:69: 3c:ee:6b:e3:b0:cc:9a:3a:87:f8:89:1e:29:08:40: 18:38:9b:88:66:88:b4:cb:45:eb:d9:0d:d1:35:95: f8:05:af:be:74:ec:80:3f:c0:4c:08:9f:f9:32:af: b6:6d:97:ec:45:e7:54:f2:26:0f:d4:ee:ab:11:47: e9:4e:9b:d9:58:12:04:fd:d4:f3:37:b2:d1:dc:0f: 86:72:11:f5:a4:ae:95:8d:78:1e:57:39:43:2e:97: 17:c7:1f:be:41:4b:f6:2c:bf:07:49:d7:e4:3f:51: d4:68:ac:6f:89:92:4a:b1:7c:24:ac:d0:30:48:f5: 69:14:ad:22:f7:03:1a:6e:8f:4b:f0:7e:a8:7d:a4: 12:ce:d7:be:1a:4b:e6:2a:5e:55:5e:ae:23:47:cc: 6c:ae:a7:cc:e2:5c:d0:b7:3e:68:30:9a:6e:4e:d6: 57:71:52:2d:b8:6c:31:b6:a1:91:a1:1c:7d:b6:40: 4b:24:35:4c:18:b0:87:4c:cb:7f:b8:f8:1e:f9:78: 59:cb:a5:26:0d:f9:4b:2f:f7:d1:e9:bf:5a:cb:5d: a5:04:23:da:35:10:6a:e5:f3:e4:95:a9:1b:53:f1: 5a:0e:6e:66:92:1c:78:22:0f:0f:52:83:e2:7a:d9: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6E:C7:10:C7:AE:46:DD:40:94:C8:35:4F:41:AF:4F:0E:EA:D6:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bef8e0a6-d538-3d7c-81b3-a8db221d35db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.238.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5c:c6:71:b9:8a:2f:af:0f:35:0d:5f:69:b3:0d:85:58:0f: 54:45:fe:b3:e2:2e:dc:db:ce:1d:c6:fd:04:c9:65:d3:77:2b: b3:02:b6:35:ee:24:61:4b:12:d0:2c:ca:2f:58:08:10:44:1a: 35:a3:c1:eb:9b:d3:7f:f7:66:9e:23:12:09:43:d8:c8:d3:95: 99:b2:71:bb:c3:11:13:aa:60:9f:2b:76:02:67:43:18:a9:bd: 38:84:ad:cf:5c:14:16:ed:6f:50:00:33:ca:41:de:d3:09:57: 27:2c:00:7d:73:48:34:ae:97:d0:ae:db:b1:bd:95:f2:21:77: 61:52:53:ac:1d:16:9d:0e:ee:0b:00:c5:93:fc:dc:e0:23:45: d0:75:d5:2c:27:bb:51:43:e1:7c:24:2c:87:f8:48:b6:ba:bf: 22:4a:9e:fa:ca:30:77:35:e6:7b:c7:ea:16:99:24:f5:b3:48: c5:55:7b:dd:d9:de:84:aa:a6:b5:7a:90:99:76:67:6b:6f:c1: f9:e9:7c:d2:95:25:32:d6:f6:e9:1a:cd:ea:d2:f7:43:0e:f4: 81:55:bb:a1:76:7f:fb:0e:b9:3e:6b:0f:2d:56:e7:2a:1c:53: 41:f6:1e:78:6a:81:79:2b:a2:1e:40:e2:7b:9e:2c:de:41:27: 0b:38:c2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6l7mpOhbdzgJfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk MTkyNmUxNjYtMWU2NS00YTJlLTg5OGQtNjE4ZmMyYWM1NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V5FvivGwe3CDnzHY2k87mvjsMyaOof4iR4p CEAYOJuIZoi0y0Xr2Q3RNZX4Ba++dOyAP8BMCJ/5Mq+2bZfsRedU8iYP1O6rEUfp TpvZWBIE/dTzN7LR3A+GchH1pK6VjXgeVzlDLpcXxx++QUv2LL8HSdfkP1HUaKxv iZJKsXwkrNAwSPVpFK0i9wMabo9L8H6ofaQSzte+GkvmKl5VXq4jR8xsrqfM4lzQ tz5oMJpuTtZXcVItuGwxtqGRoRx9tkBLJDVMGLCHTMt/uPge+XhZy6UmDflLL/fR 6b9ay12lBCPaNRBq5fPklakbU/FaDm5mkhx4Ig8PUoPietm6OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5uxxDHrkbdQJTINU9Br08O6tY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmVmOGUwYTYtZDUzOC0z ZDdjLTgxYjMtYThkYjIyMWQzNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNcxnG5ii+vDzUNX2mzDYVYD1RF/rPiLtzbzh3G/QTJZdN3K7MCtjXu JGFLEtAsyi9YCBBEGjWjweub03/3Zp4jEglD2MjTlZmycbvDEROqYJ8rdgJnQxip vTiErc9cFBbtb1AAM8pB3tMJVycsAH1zSDSul9Cu27G9lfIhd2FSU6wdFp0O7gsA xZP83OAjRdB11Swnu1FD4XwkLIf4SLa6vyJKnvrKMHc15nvH6haZJPWzSMVVe93Z 3oSqprV6kJl2Z2tvwfnpfNKVJTLW9ukazerS90MO9IFVu6F2f/sOuT5rDy1W5yoc U0H2HnhqgXkroh5A4nueLN5BJws4wjE= -----END CERTIFICATE-----Generated at Fri Jul 24 13:06:31 2026 by rpki-client