$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa File: 573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa (raw, json) Hash identifier: xF4ndYJhtkvJljG9yu91vEDBx3EOyAZMrXHa5pEgp+k= Subject key identifier: 14:E3:8F:CE:89:79:F5:DD:FF:48:52:49:CE:16:71:C7:2D:34:C8:ED Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D8AC53D1E5ECD7565BFBCA840 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 46261 IP address blocks: 104.218.197.0/24 maxlen: 24 104.251.87.0/24 maxlen: 24 172.98.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3d:1e:5e:cd:75:65:bf:bc:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=af57f5d4-a259-41a1-97c6-c62980be4662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:35:ca:8c:03:be:79:2d:e2:0e:cc:df:7d: 16:5f:1f:b0:f5:af:c2:65:77:ea:d0:20:8f:a2:ee: 8b:f3:c5:60:af:dc:90:f1:12:b2:30:7a:e0:c1:dc: c2:e6:46:6b:77:a7:3b:a8:f9:66:b3:b0:3f:89:7d: d9:4f:66:e5:24:e5:f7:9d:be:cf:cd:69:35:1d:10: bb:d8:dd:6b:ce:c8:21:f6:76:ee:2c:ed:ed:7f:b9: f3:47:92:dc:ae:42:ae:08:5a:47:c2:5e:50:42:dd: 9b:22:fe:40:78:f2:0a:be:a9:e9:b8:90:ab:c2:89: 80:a8:8d:cb:d9:e7:be:3f:5c:cb:ec:b8:db:b6:e7: f6:b2:aa:a7:8f:17:9e:97:b0:16:39:6d:c3:90:70: 26:00:14:0d:73:24:5c:d3:aa:6d:ce:c0:8a:98:83: 78:81:0c:6b:b9:39:e6:31:34:64:b1:12:ff:96:0a: ad:c5:6f:09:f1:ef:d1:e3:32:a8:6a:52:d1:fb:a1: 61:bc:d5:66:81:a2:3c:e7:20:84:ea:db:c0:35:1d: 65:2c:ce:19:12:14:fd:fa:d0:60:b3:ed:0d:37:95: fd:2b:04:34:38:04:f5:ed:86:a8:e6:23:68:81:32: b3:7e:a8:49:85:e3:86:77:0d:30:16:8c:2f:40:29: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E3:8F:CE:89:79:F5:DD:FF:48:52:49:CE:16:71:C7:2D:34:C8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.197.0/24 104.251.87.0/24 172.98.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c9:fe:18:94:f1:83:39:3d:72:b9:d3:57:70:5f:b0:ee:1e: 33:67:97:bb:08:ec:fa:06:95:d0:03:22:d2:4b:b1:f2:9d:50: 3a:9c:c7:e4:f9:c9:0b:5c:fb:96:34:13:ab:bd:7a:50:42:ce: 59:2d:0c:6b:c3:de:31:c7:3f:1e:40:06:55:79:07:19:7b:44: a3:0c:63:ad:69:77:fb:1a:7a:17:ed:84:0f:1f:d7:8a:9d:00: 02:31:d5:19:8c:f6:10:a3:27:bf:c8:c5:04:7f:ac:58:11:1a: 10:0d:3a:7e:aa:a9:c1:1a:ce:1c:60:cb:05:e3:68:0a:e2:7d: fb:fc:61:55:b3:02:af:05:27:eb:d1:dd:b1:c9:6f:83:eb:6d: 60:78:76:a7:7a:26:11:f7:1f:7c:3f:77:9e:a3:49:f4:10:47: 71:8c:56:eb:77:70:a6:8e:ff:c4:13:11:a2:d6:a5:1d:b4:6e: 0f:45:a2:7f:f2:3d:29:cb:30:a9:7b:35:5f:2c:c3:60:68:9a: 4e:40:d1:8a:d1:6e:0f:4f:76:b5:d0:22:8b:35:86:4d:de:40: 03:36:60:4c:2d:55:57:07:cd:ad:b6:79:06:16:96:ca:3b:3f: 65:18:d8:78:3c:2d:39:c6:73:f2:3f:ed:17:30:bf:76:32:7d: fa:2d:21:b6 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2KxT0eXs11Zb+8qEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YWY1N2Y1ZDQtYTI1OS00MWExLTk3YzYtYzYyOTgwYmU0NjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFc1yowDvnkt4g7M330WXx+w9a/CZXfq0CCP ou6L88Vgr9yQ8RKyMHrgwdzC5kZrd6c7qPlms7A/iX3ZT2blJOX3nb7PzWk1HRC7 2N1rzsgh9nbuLO3tf7nzR5LcrkKuCFpHwl5QQt2bIv5AePIKvqnpuJCrwomAqI3L 2ee+P1zL7Ljbtuf2sqqnjxeel7AWOW3DkHAmABQNcyRc06ptzsCKmIN4gQxruTnm MTRksRL/lgqtxW8J8e/R4zKoalLR+6FhvNVmgaI85yCE6tvANR1lLM4ZEhT9+tBg s+0NN5X9KwQ0OAT17Yao5iNogTKzfqhJheOGdw0wFowvQCn5iQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBTjj86JefXd/0hSSc4WccctNMjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTczY2QwMzEtZmY2Yi0z ZDUzLWI2MmItZGJkNWJjMTc3YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaNrFAwQA aPtXAwQArGKoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA7J/hiU8YM5PXK501dwX7DuHjNnl7sI7PoGldAD ItJLsfKdUDqcx+T5yQtc+5Y0E6u9elBCzlktDGvD3jHHPx5ABlV5Bxl7RKMMY61p d/saehfthA8f14qdAAIx1RmM9hCjJ7/IxQR/rFgRGhANOn6qqcEazhxgywXjaAri ffv8YVWzAq8FJ+vR3bHJb4PrbWB4dqd6JhH3H3w/d56jSfQQR3GMVut3cKaO/8QT EaLWpR20bg9Fon/yPSnLMKl7NV8sw2Bomk5A0YrRbg9PdrXQIos1hk3eQAM2YEwt VVcHza22eQYWlso7P2UY2Hg8LTnGc/I/7Rcwv3YyffotIbY= -----END CERTIFICATE-----Generated at Tue Apr 21 18:02:36 2026 by rpki-client