$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa File: cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json) Hash identifier: yIXX458oUqY6xHeqO9RGhB3n0M3HvGVnKe0hySKCjNY= Subject key identifier: C0:A9:0E:4A:D2:76:6F:4B:0A:E2:FC:3B:EB:F9:1B:8F:21:86:4D:52 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584D07ACF2AA7A7613CA8FCA8200 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f2:aa:7a:76:13:ca:8f:ca:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=0222f92b-8ec5-4ddc-86da-2cb9ab917e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:37:b1:9e:c8:a3:69:4c:0d:37:75:dc:e8: b6:17:ea:f0:ce:89:72:3a:65:60:04:70:85:a5:d6: c6:3b:3f:15:e1:0e:d5:dc:06:7a:10:57:ac:4b:4d: b8:5d:53:1e:a6:a6:7f:6a:3d:d4:20:fb:65:34:ec: 33:d7:5a:d5:74:d1:21:b4:22:1c:62:38:7b:d5:89: ab:3f:03:2a:c2:b7:2e:91:22:08:97:29:24:a7:63: 06:dc:ab:cf:e6:94:c6:73:35:6a:f4:9e:2f:b0:23: 1c:9f:af:8f:35:36:f8:e3:5a:7b:38:4e:57:e5:2b: 6f:47:78:67:30:45:17:5c:2e:39:ad:cd:d9:e1:fb: 39:e6:0a:44:5b:fd:00:c4:b6:c9:10:c3:7b:bd:91: d0:f6:d3:37:22:57:d4:40:f1:8f:52:6f:bd:1b:a5: 8c:af:3a:46:b0:3e:eb:16:94:19:ae:4f:21:7d:7c: a2:65:f1:29:28:ca:e4:83:73:19:22:72:b0:f2:8c: 72:75:21:7d:57:0a:d1:78:c4:00:fc:e5:a8:da:73: 68:4d:fc:3c:98:db:a4:95:d6:10:27:87:bb:0f:d1: ad:ec:cc:a6:99:7a:6f:e0:cb:8e:d1:c3:a7:99:00: 8e:80:6b:e7:94:02:20:61:9a:3c:8e:12:82:52:e2: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:0E:4A:D2:76:6F:4B:0A:E2:FC:3B:EB:F9:1B:8F:21:86:4D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f3:84:38:17:fa:32:7c:1c:d2:a9:12:2e:0f:c6:95:6c:da: 8e:a3:62:ac:28:31:f3:a4:31:f0:bc:05:96:d6:e5:44:c9:33: 9c:01:d8:09:93:e9:7b:fb:d4:39:fe:a1:0f:5c:67:8b:52:10: c6:4c:64:17:33:fc:42:3d:f9:e6:66:df:45:72:a0:8f:3d:14: b4:54:d8:e6:57:1a:e2:d3:50:f2:59:80:5a:59:58:8f:86:0f: e3:85:c2:83:5e:c5:64:2b:f4:f6:50:cc:e6:98:ee:4f:7c:29: b5:d4:7a:66:ee:aa:79:ed:32:2b:77:31:69:50:87:a5:a6:67: 02:e8:34:a5:43:c5:29:cf:86:5a:29:c1:82:a1:94:d0:8e:b2: 5e:9b:1f:e7:5f:2a:3f:7a:de:b8:96:e8:ec:79:ea:d9:41:68: 8f:30:7e:f5:7c:f6:e7:fd:c3:71:55:38:13:82:de:31:2a:71: 4a:f1:b8:7f:90:21:0c:da:ef:5d:fd:b3:0b:b1:e1:7b:19:7a: 27:5a:b9:9d:63:09:89:67:02:b9:c8:e6:05:cb:8c:65:d2:35: ba:c3:d6:55:c6:1d:62:d4:0d:83:ff:f1:99:57:7d:01:88:20: 7e:20:b6:60:a2:c7:e8:18:20:63:bc:7d:83:dc:b4:70:ad:9d: 13:a9:70:59 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0HrPKqenYTyo/KggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MDIyMmY5MmItOGVjNS00ZGRjLTg2ZGEtMmNiOWFiOTE3ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGI3sZ7Io2lMDTd13Oi2F+rwzolyOmVgBHCF pdbGOz8V4Q7V3AZ6EFesS024XVMepqZ/aj3UIPtlNOwz11rVdNEhtCIcYjh71Ymr PwMqwrcukSIIlykkp2MG3KvP5pTGczVq9J4vsCMcn6+PNTb441p7OE5X5StvR3hn MEUXXC45rc3Z4fs55gpEW/0AxLbJEMN7vZHQ9tM3IlfUQPGPUm+9G6WMrzpGsD7r FpQZrk8hfXyiZfEpKMrkg3MZInKw8oxydSF9VwrReMQA/OWo2nNoTfw8mNukldYQ J4e7D9Gt7MymmXpv4MuO0cOnmQCOgGvnlAIgYZo8jhKCUuLwJwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMCpDkrSdm9LCuL8O+v5G48hhk1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvY2ZjZTJiYTQtN2NkOC0z NzIyLTk2ZTAtNDE1YjNmYzU1MjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQA aMjeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJLzhDgX+jJ8HNKpEi4PxpVs2o6jYqwoMfOkMfC8BZbW5UTJ M5wB2AmT6Xv71Dn+oQ9cZ4tSEMZMZBcz/EI9+eZm30VyoI89FLRU2OZXGuLTUPJZ gFpZWI+GD+OFwoNexWQr9PZQzOaY7k98KbXUembuqnntMit3MWlQh6WmZwLoNKVD xSnPhlopwYKhlNCOsl6bH+dfKj963riW6Ox56tlBaI8wfvV89uf9w3FVOBOC3jEq cUrxuH+QIQza7139swux4XsZeidauZ1jCYlnArnI5gXLjGXSNbrD1lXGHWLUDYP/ 8ZlXfQGIIH4gtmCix+gYIGO8fYPctHCtnROpcFk= -----END CERTIFICATE-----Generated at Thu Mar 26 01:57:08 2026 by rpki-client