$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa File: f746411c-82dc-320f-833f-056441f592f0.roa (raw, json) Hash identifier: NZ5zUki6BHOv44nRH4/WDsTv0t7CHLSctwehjjGoymQ= Subject key identifier: 55:41:BE:8B:4A:11:94:43:C6:7F:E2:14:6D:DD:6A:81:6F:F7:F9:AE Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584D1F4A1BE8FF9B178439B4D580 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 40342 IP address blocks: 104.200.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1b:e8:ff:9b:17:84:39:b4:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=375dcb06-c0af-473d-8aa9-17fc7733a1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:b2:bb:8a:48:27:84:a3:ba:aa:f4:78:ec: e8:d7:fb:cb:a3:19:ae:65:8a:34:fb:d2:59:a4:75: 84:c0:55:42:c7:bd:1d:16:ca:94:70:00:f1:78:8d: b0:4c:c5:f0:0c:62:4d:0c:91:06:b0:3d:07:cb:aa: 72:10:ca:0c:d1:8f:78:5c:b6:4a:d9:c3:13:03:6d: 21:e6:35:06:8b:b2:4b:1c:c6:45:1f:4b:6e:7b:ed: 0e:20:f1:36:1a:7f:7e:58:51:c7:d1:2b:10:2d:67: 9f:dc:c8:5c:38:e9:06:33:25:1f:49:9d:65:67:2b: 6e:b2:4e:25:b9:72:d9:1b:b7:88:8a:4c:ad:5f:d5: de:3b:02:f4:02:c0:96:25:73:4d:bf:18:33:86:2e: dd:38:2a:86:50:df:11:4e:40:5c:4e:9a:24:f4:dd: cf:bb:94:5a:ad:02:cf:3b:1a:2e:7c:a9:83:46:14: 80:d8:7d:15:ba:1f:bf:2f:88:45:97:09:87:88:6c: fe:e5:53:10:aa:5c:6e:bc:f1:0b:7b:6d:25:d5:c5: 57:93:6b:92:40:08:b1:1c:2c:dc:57:98:ab:9f:37: 32:4c:1b:9f:b4:d0:2f:42:72:e7:db:7f:9a:02:31: 0b:c6:51:2c:05:ac:48:8f:b4:eb:41:88:40:20:11: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:41:BE:8B:4A:11:94:43:C6:7F:E2:14:6D:DD:6A:81:6F:F7:F9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:17:5c:80:72:6e:4d:ae:b7:76:8c:be:8a:e9:4b:9a:1f:17: a7:08:1e:c2:d6:43:3c:f9:5d:4b:4b:c2:0f:a9:e7:f9:f9:84: f2:1e:35:28:7e:13:25:97:e9:36:48:fc:fc:ec:7c:2c:18:98: cc:82:a6:e4:50:04:96:b8:44:7d:ce:70:a4:4a:f1:8b:3c:03: 66:92:60:81:d9:a6:6a:d6:ab:65:bd:7b:f6:45:95:c8:3b:bc: 15:38:e9:2f:21:24:9b:96:b4:4c:fb:77:05:e1:98:19:f8:72: 34:6f:66:4d:54:4f:d0:c9:62:e8:ac:41:5b:e2:90:41:95:3d: 63:b5:6d:71:ae:ff:29:2e:3e:71:17:b8:d1:1c:bd:90:2c:72: eb:78:b0:7a:af:64:8f:98:1f:62:b2:68:f2:cb:30:6a:58:1f: 18:05:75:c3:74:70:d6:44:e9:70:d2:4c:51:23:5b:b2:4f:fe: e7:96:2a:b6:e4:93:a5:9e:9f:0d:1b:3a:1b:71:21:12:a9:72: f1:35:be:bc:65:c0:8b:d8:f0:3d:51:48:f3:18:2d:9d:03:ca: 40:12:9d:de:df:50:c9:88:d1:bd:03:ff:8e:e7:25:50:46:e4: e9:39:6a:17:3b:03:54:5f:0a:d6:7b:70:7f:2e:e5:e9:2a:1c: 98:85:ef:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShvo/5sXhDm01YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk Mzc1ZGNiMDYtYzBhZi00NzNkLThhYTktMTdmYzc3MzNhMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi++yu4pIJ4Sjuqr0eOzo1/vLoxmuZYo0+9JZ pHWEwFVCx70dFsqUcADxeI2wTMXwDGJNDJEGsD0Hy6pyEMoM0Y94XLZK2cMTA20h 5jUGi7JLHMZFH0tue+0OIPE2Gn9+WFHH0SsQLWef3MhcOOkGMyUfSZ1lZytusk4l uXLZG7eIikytX9XeOwL0AsCWJXNNvxgzhi7dOCqGUN8RTkBcTpok9N3Pu5RarQLP OxoufKmDRhSA2H0Vuh+/L4hFlwmHiGz+5VMQqlxuvPELe20l1cVXk2uSQAixHCzc V5irnzcyTBuftNAvQnLn23+aAjELxlEsBaxIj7TrQYhAIBGqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVBvotKEZRDxn/iFG3daoFv9/muMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZjc0NjQxMWMtODJkYy0z MjBmLTgzM2YtMDU2NDQxZjU5MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAXXIBybk2ut3aMvorpS5ofF6cIHsLWQzz5XUtLwg+p5/n5hPIeNSh+ EyWX6TZI/PzsfCwYmMyCpuRQBJa4RH3OcKRK8Ys8A2aSYIHZpmrWq2W9e/ZFlcg7 vBU46S8hJJuWtEz7dwXhmBn4cjRvZk1UT9DJYuisQVvikEGVPWO1bXGu/ykuPnEX uNEcvZAscut4sHqvZI+YH2KyaPLLMGpYHxgFdcN0cNZE6XDSTFEjW7JP/ueWKrbk k6Wenw0bOhtxIRKpcvE1vrxlwIvY8D1RSPMYLZ0DykASnd7fUMmI0b0D/47nJVBG 5Ok5ahc7A1RfCtZ7cH8u5ekqHJiF7wM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:18 2026 by rpki-client