$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa File: be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa (raw, json) Hash identifier: keA8LftZzCxpy1DRZDLtc1/pBn8htC9GOkIJoWqJwE4= Subject key identifier: D2:A9:A0:D1:97:8E:1D:E1:A9:B8:FD:74:09:4F:F6:97:94:A4:1F:3C Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584F49765F7B97BF6514374C3980 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40342 IP address blocks: 104.200.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:5f:7b:97:bf:65:14:37:4c:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=362b5b23-c27b-465d-bcb6-15f6d5914053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:b0:52:39:0f:83:d4:d9:0e:d1:c0:5a:ff: 77:ea:fc:57:86:8d:29:39:02:69:2e:6b:f4:96:88: 51:90:79:e9:7c:78:ab:8a:d2:5c:68:13:28:d6:65: cd:23:d6:ea:dd:5a:3e:9a:4b:bb:05:ad:50:65:23: b8:53:73:e2:27:ee:20:4b:35:b9:96:e2:dd:6d:cf: 77:b6:48:59:e2:d9:55:4e:de:4b:a4:4d:c0:cd:cb: ef:48:6a:c5:45:c8:46:37:e7:13:b5:81:80:32:4b: 84:cf:84:d9:c2:39:34:c9:ab:f4:28:01:09:f8:3b: 96:0c:6c:6c:31:d7:c2:d4:85:bd:66:44:3b:2a:fc: 8a:ba:83:0e:08:60:0d:38:aa:9b:a9:de:6a:be:89: 4a:a5:78:0b:73:00:d0:e8:ed:be:9f:4c:0b:fb:dc: 9e:55:ad:06:8b:79:6f:bc:43:cc:45:7b:87:39:54: 62:03:4c:d0:6d:b4:f9:3a:9b:91:73:52:a1:93:0e: 3f:43:13:d1:80:22:3d:43:ef:93:5f:c6:c8:06:c4: cd:a9:0c:94:d0:0c:ca:28:07:ef:6f:3f:1e:e0:89: ce:98:00:dc:dc:a8:f0:e4:7d:56:03:c0:d7:b6:9e: ea:11:b4:de:91:99:1c:0b:12:e2:56:a0:c0:67:b5: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A9:A0:D1:97:8E:1D:E1:A9:B8:FD:74:09:4F:F6:97:94:A4:1F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bb:6b:4c:ba:88:02:63:c6:f0:8c:b7:c3:63:9d:ae:85:8f: d9:8b:38:14:4e:ca:59:2e:0f:bb:4e:fb:8b:38:95:c3:35:19: 63:93:e2:9c:a6:ce:cd:43:21:25:94:06:b1:93:54:dd:c0:16: a0:16:54:1d:2d:7e:30:ed:fc:b6:8f:97:1e:1f:5c:91:3c:ce: 31:de:3b:c9:09:7c:5c:9e:f1:cf:af:07:dc:7f:94:9e:09:a9: 40:4e:79:24:ce:2d:f2:a6:5c:fe:7b:38:61:a6:78:c3:ae:2e: 3b:af:c5:dc:04:17:58:7e:84:63:7c:79:b1:6c:1b:ef:78:71: 89:3c:ed:78:e1:f5:b3:02:56:e1:6c:07:0d:82:19:5e:90:4a: 37:b3:37:b4:39:1e:d7:52:10:f0:3a:4c:d5:73:e3:74:30:9a: 7a:d1:ea:fb:e7:a6:6d:22:d3:34:64:75:16:d7:42:9a:ac:1b: 14:aa:10:47:c8:ae:86:d3:56:70:7a:e3:05:a3:39:18:57:bd: e6:1f:c8:67:7f:2f:f0:98:a4:41:43:d7:24:27:57:c6:cb:bd: 52:cd:c3:43:f2:e7:5a:30:c6:5c:7a:41:6b:a1:c8:fc:17:5f: fb:e0:3c:14:e9:a4:a6:53:7f:e3:d2:17:62:ba:e4:a8:6b:2d: 41:35:5d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdl97l79lFDdMOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzYyYjViMjMtYzI3Yi00NjVkLWJjYjYtMTVmNmQ1OTE0MDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZKwUjkPg9TZDtHAWv936vxXho0pOQJpLmv0 lohRkHnpfHiritJcaBMo1mXNI9bq3Vo+mku7Ba1QZSO4U3PiJ+4gSzW5luLdbc93 tkhZ4tlVTt5LpE3AzcvvSGrFRchGN+cTtYGAMkuEz4TZwjk0yav0KAEJ+DuWDGxs MdfC1IW9ZkQ7KvyKuoMOCGANOKqbqd5qvolKpXgLcwDQ6O2+n0wL+9yeVa0Gi3lv vEPMRXuHOVRiA0zQbbT5OpuRc1Khkw4/QxPRgCI9Q++TX8bIBsTNqQyU0AzKKAfv bz8e4InOmADc3Kjw5H1WA8DXtp7qEbTekZkcCxLiVqDAZ7WKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKpoNGXjh3hqbj9dAlP9peUpB88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvYmUxOGU1OTEtZDI2Yi0z ZjVkLWIzYTktYmQ2MmIwNjk3ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu7a0y6iAJjxvCMt8Njna6Fj9mLOBROylkuD7tO+4s4lcM1GWOT4pym zs1DISWUBrGTVN3AFqAWVB0tfjDt/LaPlx4fXJE8zjHeO8kJfFye8c+vB9x/lJ4J qUBOeSTOLfKmXP57OGGmeMOuLjuvxdwEF1h+hGN8ebFsG+94cYk87Xjh9bMCVuFs Bw2CGV6QSjezN7Q5HtdSEPA6TNVz43QwmnrR6vvnpm0i0zRkdRbXQpqsGxSqEEfI robTVnB64wWjORhXveYfyGd/L/CYpEFD1yQnV8bLvVLNw0Py51owxlx6QWuhyPwX X/vgPBTppKZTf+PSF2K65KhrLUE1XVQ= -----END CERTIFICATE-----Generated at Fri Sep 25 22:06:28 2026 by rpki-client