$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/19f810fe-b691-34eb-8a5a-af302da8a8aa.roa File: 19f810fe-b691-34eb-8a5a-af302da8a8aa.roa (raw, json) Hash identifier: xEnsNB+xJ7b4t2KyKEWZbzPfjiJTUdHAAAxp+azxzX8= Subject key identifier: 8A:CD:9D:1E:76:B6:4C:65:26:44:B5:8A:CE:46:CE:BA:BA:A8:FB:E6 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584EA79BF9B7D297480D609AD980 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/19f810fe-b691-34eb-8a5a-af302da8a8aa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46261 IP address blocks: 104.251.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f9:b7:d2:97:48:0d:60:9a:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c8f2a70d-60b4-48e0-805d-e160304decd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:f6:27:c2:dc:78:ea:c4:fb:d3:01:09:89: a6:2d:5e:8d:6e:28:59:9f:1b:d7:6e:e1:67:0e:da: 97:1e:f8:d8:a1:69:57:70:33:5b:9a:f3:2c:f4:73: 84:18:63:c2:69:76:76:90:25:56:19:dd:bd:a7:a7: 82:b2:55:13:94:ec:2f:ee:a6:e0:06:27:dd:95:0d: e9:ab:1d:5d:45:0d:84:1c:73:1a:68:79:fc:93:2c: 62:20:49:ba:16:08:0b:03:3e:70:3d:07:dc:9b:a7: b2:2e:32:c7:e2:c6:d7:94:ce:e9:17:f0:19:e3:44: 30:56:17:03:32:79:09:73:fa:ab:9f:af:d0:48:6a: 95:08:28:6f:d7:8e:43:59:0d:88:b2:a4:eb:a1:76: 25:37:01:41:25:3c:ab:08:cc:d9:3b:74:2d:6c:0b: 11:88:b5:82:cd:55:10:b2:1c:75:2a:b1:76:50:74: f8:6d:fe:12:1a:90:ce:e6:fd:73:eb:cc:34:63:ae: c2:c1:69:65:fe:a4:b5:9f:c2:bf:6f:35:a7:fd:74: b0:f9:24:62:c7:94:e6:c6:7b:fe:c5:73:ba:2b:7b: 02:be:3e:a2:47:ba:29:f0:47:0f:cc:85:eb:ab:4a: f0:e8:7a:6a:fb:57:82:83:e8:69:40:4a:60:22:2d: 7b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:9D:1E:76:B6:4C:65:26:44:B5:8A:CE:46:CE:BA:BA:A8:FB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/19f810fe-b691-34eb-8a5a-af302da8a8aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3a:aa:e2:e0:38:6e:e7:0c:68:6a:ce:b2:ff:7b:65:a3:8f: dd:5c:fe:28:a4:4c:d7:c7:35:27:00:d3:72:0f:88:a3:42:fa: 3f:13:63:01:ca:a0:18:17:43:41:0a:84:1f:24:b4:36:5b:a2: d4:37:e9:2b:e7:81:60:db:46:22:ae:37:44:9b:73:89:5d:b5: 29:09:19:84:d6:7f:87:0a:58:d7:14:82:7f:45:35:2f:b7:ff: 28:f1:6c:eb:be:53:27:3d:90:b2:98:e4:62:73:28:02:8f:13: b3:55:3d:ff:7f:d9:93:31:e2:88:4d:ff:a7:63:ab:fe:ab:6d: e1:73:e9:3f:b1:bb:12:55:28:d0:d2:d7:95:07:bf:15:3a:b5: 3a:b1:b9:9e:e0:28:45:80:6c:ab:3d:87:23:73:61:f5:53:d7: 41:88:e0:92:ef:d3:b5:aa:20:16:64:be:ad:67:89:a9:ce:47: 81:b8:b5:e3:64:f5:ee:38:f4:f0:30:1a:a4:f7:86:3e:20:b6: 78:3c:e4:5d:20:cf:dc:41:b6:f8:bd:c7:65:89:01:86:f5:4c: 9a:7d:50:ae:b6:46:66:a8:7c:40:26:da:52:42:88:12:b0:cd: 1d:e1:1d:88:cf:df:45:81:da:30:46:2b:82:76:fd:ce:5d:9e: d3:a5:82:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/m30pdIDWCa2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzhmMmE3MGQtNjBiNC00OGUwLTgwNWQtZTE2MDMwNGRlY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki32J8LceOrE+9MBCYmmLV6NbihZnxvXbuFn DtqXHvjYoWlXcDNbmvMs9HOEGGPCaXZ2kCVWGd29p6eCslUTlOwv7qbgBifdlQ3p qx1dRQ2EHHMaaHn8kyxiIEm6FggLAz5wPQfcm6eyLjLH4sbXlM7pF/AZ40QwVhcD MnkJc/qrn6/QSGqVCChv145DWQ2IsqTroXYlNwFBJTyrCMzZO3QtbAsRiLWCzVUQ shx1KrF2UHT4bf4SGpDO5v1z68w0Y67CwWll/qS1n8K/bzWn/XSw+SRix5Tmxnv+ xXO6K3sCvj6iR7op8EcPzIXrq0rw6Hpq+1eCg+hpQEpgIi17JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrNnR52tkxlJkS1is5Gzrq6qPvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTlmODEwZmUtYjY5MS0z NGViLThhNWEtYWYzMDJkYThhOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM6quLgOG7nDGhqzrL/e2Wjj91c/iikTNfHNScA03IPiKNC+j8TYwHK oBgXQ0EKhB8ktDZbotQ36SvngWDbRiKuN0Sbc4ldtSkJGYTWf4cKWNcUgn9FNS+3 /yjxbOu+Uyc9kLKY5GJzKAKPE7NVPf9/2ZMx4ohN/6djq/6rbeFz6T+xuxJVKNDS 15UHvxU6tTqxuZ7gKEWAbKs9hyNzYfVT10GI4JLv07WqIBZkvq1nianOR4G4teNk 9e449PAwGqT3hj4gtng85F0gz9xBtvi9x2WJAYb1TJp9UK62RmaofEAm2lJCiBKw zR3hHYjP30WB2jBGK4J2/c5dntOlgvQ= -----END CERTIFICATE-----Generated at Wed Sep 2 15:34:14 2026 by rpki-client