$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa File: 37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa (raw, json) Hash identifier: 1KG4GdXqpY0lZgY38jbNTv/2CjQ77tEWeK1m+wCH9LQ= Subject key identifier: 98:1B:2E:76:BC:69:85:3C:67:FE:EE:D3:58:80:22:35:87:27:08:17 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D8AC5454B759478A45CCD7600 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 5650 IP address blocks: 104.218.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:45:4b:75:94:78:a4:5c:cd:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=8e54de07-0d0b-4a98-a38f-5d3a2fd8a58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:92:49:8a:1d:f0:ed:eb:73:2d:27:ca:e1: b1:f2:37:4e:d1:3c:e6:3e:64:1b:01:1e:bf:31:32: af:0a:89:5d:f7:3f:2a:33:22:ec:d1:c3:08:0e:b6: da:3c:29:f4:d0:4a:59:2b:df:4f:0c:bd:f9:14:85: 24:9d:b1:63:85:af:3b:f4:17:e0:5c:17:cc:ed:ac: 8d:b4:87:6b:76:86:d5:03:b1:5b:7f:c9:4c:29:2d: 57:18:0d:36:32:4a:3b:1d:52:05:8e:e8:57:be:4f: ce:8e:d7:f9:8d:31:85:1d:3f:7e:9a:1d:58:22:4b: 31:91:55:7f:3d:cd:ea:66:87:c6:e3:2e:2d:47:5e: bc:b2:31:79:c2:93:cd:99:e4:4a:ea:c0:02:dc:a6: de:68:05:0c:ae:6f:7a:68:40:09:1a:2b:9a:a0:69: eb:3b:17:2e:e0:41:08:44:57:e9:dd:bd:f5:78:69: 5b:cb:b3:ae:cf:30:28:e3:9e:a0:40:30:8b:60:28: f4:dc:49:f2:60:d5:fb:e0:aa:51:c5:50:b9:c1:8e: d8:5c:5f:0b:17:4a:80:16:7b:5d:1b:34:08:48:19: 01:c8:d4:e6:0c:25:4b:25:3a:6d:28:3f:0e:51:47: f6:16:de:75:4b:ed:d7:9b:88:ef:4e:75:39:d0:1f: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1B:2E:76:BC:69:85:3C:67:FE:EE:D3:58:80:22:35:87:27:08:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:81:ee:d1:a6:94:6b:97:18:c2:b0:02:da:7f:fd:6d:18:50: 21:7a:eb:93:58:b3:ea:e7:ee:af:02:f4:57:cc:f1:4b:87:9d: 94:cc:19:31:05:29:78:15:e1:72:90:66:8c:4c:97:60:9a:b4: e1:21:ee:f9:2e:92:c6:88:7a:5f:45:34:89:20:87:72:49:da: 8c:93:0c:f4:b9:9a:63:3f:80:2d:e0:72:ce:9c:10:ad:23:a7: 1f:fa:0a:ae:46:cb:7b:eb:cb:62:f6:63:dd:4a:2d:39:ec:ac: 46:f2:2a:43:06:7a:23:fc:d7:5b:98:1f:c8:8b:d4:58:2f:31: 27:09:55:3b:83:ea:2f:0c:d7:8d:fe:ec:0f:ac:59:88:ba:82: a4:7e:3c:2f:d6:0f:c9:f3:9a:80:5d:d3:e5:34:62:66:88:90: 32:76:ee:55:32:52:52:a4:cb:c3:54:bc:84:f6:c5:c5:c2:7d: b4:28:53:e7:e2:bf:94:e8:bb:93:55:ff:45:12:9d:de:b1:65: 07:12:5f:22:69:d8:e5:d1:88:9d:38:b2:f5:49:e2:17:61:52: 2a:8e:60:f6:f1:12:ac:2c:7c:e6:25:57:56:36:31:91:ed:12: 77:2a:28:a3:21:e4:9c:56:17:a9:4c:42:53:71:39:4e:e2:38: ff:f9:99:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUVLdZR4pFzNdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk OGU1NGRlMDctMGQwYi00YTk4LWEzOGYtNWQzYTJmZDhhNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QuSSYod8O3rcy0nyuGx8jdO0TzmPmQbAR6/ MTKvCold9z8qMyLs0cMIDrbaPCn00EpZK99PDL35FIUknbFjha879BfgXBfM7ayN tIdrdobVA7Fbf8lMKS1XGA02Mko7HVIFjuhXvk/Ojtf5jTGFHT9+mh1YIksxkVV/ Pc3qZofG4y4tR168sjF5wpPNmeRK6sAC3KbeaAUMrm96aEAJGiuaoGnrOxcu4EEI RFfp3b31eGlby7OuzzAo456gQDCLYCj03EnyYNX74KpRxVC5wY7YXF8LF0qAFntd GzQISBkByNTmDCVLJTptKD8OUUf2Ft51S+3Xm4jvTnU50B8PqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgbLna8aYU8Z/7u01iAIjWHJwgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzdhZDdkYzAtZDcwMy0z MWZlLTkwZjMtY2M3MmYwNjhkN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeB7tGmlGuXGMKwAtp//W0YUCF665NYs+rn7q8C9FfM8UuHnZTMGTEF KXgV4XKQZoxMl2CatOEh7vkuksaIel9FNIkgh3JJ2oyTDPS5mmM/gC3gcs6cEK0j px/6Cq5Gy3vry2L2Y91KLTnsrEbyKkMGeiP811uYH8iL1FgvMScJVTuD6i8M143+ 7A+sWYi6gqR+PC/WD8nzmoBd0+U0YmaIkDJ27lUyUlKky8NUvIT2xcXCfbQoU+fi v5Tou5NV/0USnd6xZQcSXyJp2OXRiJ04svVJ4hdhUiqOYPbxEqwsfOYlV1Y2MZHt EncqKKMh5JxWF6lMQlNxOU7iOP/5mX8= -----END CERTIFICATE-----Generated at Sat Apr 18 23:32:55 2026 by rpki-client