$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa File: be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa (raw, json) Hash identifier: QI6OxtF7feDkU+ksCifgbeVvzsca46TVFyD8DYFq/Kw= Subject key identifier: 90:F1:10:84:C1:C3:0A:F8:AD:4D:E3:F8:0C:0D:4C:A0:DC:37:E0:F0 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584D1F4A44FDC40FF854661FAA00 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 40342 IP address blocks: 104.200.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:44:fd:c4:0f:f8:54:66:1f:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=011452a4-abee-4871-bfaa-c223fc5aff32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:ca:ca:7a:32:0b:57:7c:56:84:d8:12:a4: c3:28:09:c4:41:d9:c5:40:2d:29:a2:21:e5:aa:c4: ce:a9:a5:7f:01:12:9f:c5:1a:db:85:dc:e8:5d:dd: 20:c8:e0:b5:30:f2:17:15:80:59:3c:c1:63:e7:ac: 61:3d:fc:c4:76:51:b2:4e:95:86:b2:1b:42:2f:21: db:59:cb:bd:be:61:2d:80:ff:5f:d0:63:86:11:95: 4d:c1:7c:ec:88:2d:6f:bf:52:53:54:57:62:37:ea: 9d:b5:9f:2f:3e:df:fe:3a:49:08:fb:75:c3:80:9e: 84:96:eb:a7:f0:13:59:89:cf:eb:73:89:fc:75:98: 9d:c2:63:00:73:1c:04:1a:c9:73:3f:69:75:58:89: 5b:ba:d1:04:e7:7e:80:6a:4d:ab:63:a1:b6:2e:4f: 2d:09:dc:13:67:0f:32:44:c9:6f:cf:a1:f6:64:82: e1:e0:30:88:b9:64:a0:eb:b8:55:7e:7e:c6:1d:35: 4d:cd:48:98:8d:ed:a2:44:a1:1f:ba:a4:09:66:62: 37:05:59:d9:1a:a0:20:3b:f6:46:5a:a1:27:d8:6c: 54:32:f2:e1:fc:36:e2:d2:67:89:05:9a:0b:85:b1: eb:78:6f:c2:1b:9a:5e:1b:ac:5c:23:28:7b:c1:fe: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F1:10:84:C1:C3:0A:F8:AD:4D:E3:F8:0C:0D:4C:A0:DC:37:E0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:18:6f:41:13:e3:e6:69:ad:e1:5d:60:c0:47:4b:1d:de:6f: 9e:5f:9e:2b:43:b0:f5:2f:c3:78:78:4f:03:2c:56:fd:9f:d8: 30:b8:48:63:50:fb:ad:b6:72:24:ee:1a:6b:9d:73:1f:c1:71: 52:16:74:41:2e:36:c9:18:b4:87:cc:db:a7:0e:60:5b:c5:0b: 53:f7:26:df:67:cf:c6:ed:63:52:58:a3:ec:d9:59:72:47:9f: 4a:ef:45:fc:b0:97:30:8c:ee:45:ce:16:f8:f4:c8:59:41:04: ff:64:2d:17:49:96:4e:85:0d:99:b0:39:2e:71:dd:c8:85:ab: 8d:31:1b:5d:35:97:28:f6:7a:10:57:32:a8:b9:11:ca:3f:24: 0e:5d:dc:11:c9:a7:8c:b3:67:51:2c:0e:6d:1f:6c:55:9b:31: d5:0a:56:a9:cd:ca:95:2f:04:44:88:1b:48:33:99:d3:54:3a: 5c:71:41:ce:3d:90:99:f7:80:8c:e1:b3:24:06:db:ce:ee:98: 88:4b:17:fe:6d:c2:c5:73:6d:ac:17:a6:cd:57:70:75:7d:0f: 3c:0b:42:f2:78:91:8f:d0:3a:98:08:62:b6:07:f5:26:d9:da: 85:6c:da:34:91:4a:64:83:be:82:34:43:5a:e8:a2:27:99:6d: b1:90:ab:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkT9xA/4VGYfqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MDExNDUyYTQtYWJlZS00ODcxLWJmYWEtYzIyM2ZjNWFmZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicrKynoyC1d8VoTYEqTDKAnEQdnFQC0poiHl qsTOqaV/ARKfxRrbhdzoXd0gyOC1MPIXFYBZPMFj56xhPfzEdlGyTpWGshtCLyHb Wcu9vmEtgP9f0GOGEZVNwXzsiC1vv1JTVFdiN+qdtZ8vPt/+OkkI+3XDgJ6Eluun 8BNZic/rc4n8dZidwmMAcxwEGslzP2l1WIlbutEE536Aak2rY6G2Lk8tCdwTZw8y RMlvz6H2ZILh4DCIuWSg67hVfn7GHTVNzUiYje2iRKEfuqQJZmI3BVnZGqAgO/ZG WqEn2GxUMvLh/Dbi0meJBZoLhbHreG/CG5peG6xcIyh7wf7LAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDxEITBwwr4rU3j+AwNTKDcN+DwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvYmUxOGU1OTEtZDI2Yi0z ZjVkLWIzYTktYmQ2MmIwNjk3ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEYb0ET4+ZpreFdYMBHSx3eb55fnitDsPUvw3h4TwMsVv2f2DC4SGNQ +622ciTuGmudcx/BcVIWdEEuNskYtIfM26cOYFvFC1P3Jt9nz8btY1JYo+zZWXJH n0rvRfywlzCM7kXOFvj0yFlBBP9kLRdJlk6FDZmwOS5x3ciFq40xG101lyj2ehBX Mqi5Eco/JA5d3BHJp4yzZ1EsDm0fbFWbMdUKVqnNypUvBESIG0gzmdNUOlxxQc49 kJn3gIzhsyQG287umIhLF/5twsVzbawXps1XcHV9DzwLQvJ4kY/QOpgIYrYH9SbZ 2oVs2jSRSmSDvoI0Q1rooieZbbGQqwY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:00:34 2026 by rpki-client