$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa File: d459f45e-a006-338c-9b08-b1327ea9704d.roa (raw, json) Hash identifier: BM8XtfZtWfq2Dv1JBBpt1JXs/W0laautJnAJDOIgD3M= Subject key identifier: 7C:48:CF:53:D8:16:CA:52:A9:BB:3A:10:DF:68:F1:63:F1:3E:91:8E Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584D07ACF280B9314F782E364100 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 22773 IP address blocks: 104.200.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f2:80:b9:31:4f:78:2e:36:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=df1fcdd9-0c5a-4ba8-9a4f-72de2c06450c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:e8:5c:49:5e:ca:33:b3:a1:33:38:80:f4: 33:f9:e2:c3:b8:f4:d4:fc:70:35:6f:c0:8f:70:03: 94:00:0e:d6:27:19:76:d8:f7:45:38:97:5a:f8:20: 56:80:89:92:4f:03:bd:e2:dc:9c:bc:4e:e8:9b:b5: f0:71:a7:7d:cc:70:e8:bd:fa:66:62:b4:92:c7:67: 10:0b:a9:e1:a5:a5:b4:02:d8:57:38:e9:67:32:49: a3:3b:ec:26:a2:e4:d2:b5:23:91:c2:77:26:d0:88: eb:2e:ac:2f:af:ef:aa:4b:c1:53:0d:50:99:d9:6b: 50:9d:b2:23:cc:ef:ee:80:47:5c:42:28:c6:fb:c4: 72:4c:e2:56:ff:25:5c:3d:f6:c9:fa:dd:b3:c6:df: c9:21:2f:d7:f4:4a:1e:20:81:63:fd:de:b1:3d:8d: a4:3d:fa:e0:fa:19:28:90:2f:86:08:ad:80:2c:ae: 15:3c:8f:10:75:b3:5a:6e:eb:e0:e2:17:6c:64:94: 4a:f9:a8:12:33:00:c5:0c:14:f0:d2:ca:14:42:d9: 6d:81:42:4b:f6:de:0b:62:95:6a:6f:1a:9b:24:d7: cc:54:66:9b:1d:e5:bf:87:de:d4:30:cf:d7:d8:57: a5:75:90:51:69:0f:93:d6:87:81:4c:6b:fe:60:9d: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:CF:53:D8:16:CA:52:A9:BB:3A:10:DF:68:F1:63:F1:3E:91:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a3:18:8e:0a:aa:c8:b6:e1:d7:34:fe:85:03:30:e2:05:91: b2:f0:58:e0:7f:98:80:4c:c0:5c:8e:25:e8:89:17:68:f1:3b: e9:a8:1a:c7:04:c2:7e:6a:69:c4:a5:7f:52:8d:c2:f8:26:da: 47:f7:a1:14:87:03:87:1a:82:98:c1:2e:35:0c:6d:1b:51:10: 7f:38:b0:7f:cc:be:47:5a:60:cd:78:bc:1e:bc:7b:a8:89:58: 60:e2:04:d8:42:f2:d5:62:2e:fb:5f:6f:fa:c6:10:fa:b5:fd: c1:ca:04:69:10:06:ac:85:a8:90:91:0a:de:30:dd:40:d6:0c: 15:dc:f4:0b:4e:04:89:d9:9b:d5:9d:e2:8a:66:07:d8:71:4b: 67:6a:fe:23:e9:bc:7f:7a:39:25:0b:62:79:d3:c0:ca:40:70: df:dc:23:c2:62:1e:ed:15:c6:15:90:1c:77:bc:91:52:21:e1: 13:10:22:11:b5:d1:5a:e4:12:3b:ea:f0:04:74:80:48:d8:fa: 92:19:90:8b:a0:df:7e:3a:0c:a2:be:8f:74:e1:f1:b2:47:80: ad:e5:3c:53:04:3c:d4:e1:40:55:66:65:d4:77:47:36:fa:bf: 74:0c:a2:9d:9d:81:1a:4a:33:c5:e4:56:18:42:58:55:cd:44: f0:1f:18:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPKAuTFPeC42QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZGYxZmNkZDktMGM1YS00YmE4LTlhNGYtNzJkZTJjMDY0NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+foXEleyjOzoTM4gPQz+eLDuPTU/HA1b8CP cAOUAA7WJxl22PdFOJda+CBWgImSTwO94tycvE7om7Xwcad9zHDovfpmYrSSx2cQ C6nhpaW0AthXOOlnMkmjO+wmouTStSORwncm0IjrLqwvr++qS8FTDVCZ2WtQnbIj zO/ugEdcQijG+8RyTOJW/yVcPfbJ+t2zxt/JIS/X9EoeIIFj/d6xPY2kPfrg+hko kC+GCK2ALK4VPI8QdbNabuvg4hdsZJRK+agSMwDFDBTw0soUQtltgUJL9t4LYpVq bxqbJNfMVGabHeW/h97UMM/X2FeldZBRaQ+T1oeBTGv+YJ3b8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxIz1PYFspSqbs6EN9o8WPxPpGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZDQ1OWY0NWUtYTAwNi0z MzhjLTliMDgtYjEzMjdlYTk3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6jGI4Kqsi24dc0/oUDMOIFkbLwWOB/mIBMwFyOJeiJF2jxO+moGscE wn5qacSlf1KNwvgm2kf3oRSHA4cagpjBLjUMbRtREH84sH/MvkdaYM14vB68e6iJ WGDiBNhC8tViLvtfb/rGEPq1/cHKBGkQBqyFqJCRCt4w3UDWDBXc9AtOBInZm9Wd 4opmB9hxS2dq/iPpvH96OSULYnnTwMpAcN/cI8JiHu0VxhWQHHe8kVIh4RMQIhG1 0VrkEjvq8AR0gEjY+pIZkIug3346DKK+j3Th8bJHgK3lPFMEPNThQFVmZdR3Rzb6 v3QMop2dgRpKM8XkVhhCWFXNRPAfGPM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:39 2026 by rpki-client