$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json) Hash identifier: /agEI0eFCxFGGjollr2Pm7FkmR7PYYNUDcRumi0pCMQ= Subject key identifier: 13:DE:51:25:18:DB:65:44:E4:6B:0B:9A:90:DC:40:9F:5B:1F:41:73 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584EE38CA490BD8C73A0F0A60A40 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 212238 IP address blocks: 158.115.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a4:90:bd:8c:73:a0:f0:a6:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=63931d3a-02d3-49d2-840d-aaa5c437799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:0d:fd:d9:d4:ca:9d:98:c6:e1:9f:e6:ef: 68:21:ed:e9:69:f3:af:09:7a:4e:13:6a:c7:e8:f2: ee:69:b0:ae:b3:81:97:de:20:5c:07:a6:88:e3:18: 0a:ca:cf:60:e0:14:fc:f1:e4:73:1e:e0:81:ac:f8: a1:4f:ae:d1:75:7c:90:dc:a7:7a:c2:41:1e:e3:f4: 58:7e:9b:8f:a4:4d:1c:ae:9e:e1:84:4d:af:e7:42: 6a:2b:93:45:b7:a9:b5:af:58:60:11:a9:cb:6d:93: cc:b4:e7:d9:81:1a:c4:92:11:2c:1d:a6:6f:d4:5d: 7d:ad:65:e0:c5:5d:a5:2e:a0:f6:35:6e:34:45:99: 0d:63:ec:1e:88:c0:d4:15:9e:5f:2f:d7:b5:b2:85: 1b:35:b6:fd:8c:c3:f4:e6:5c:a1:fa:86:0a:57:a2: 1e:e9:6b:6f:77:40:45:7a:80:fd:ce:27:be:a7:36: fd:96:d6:82:47:c4:9f:c9:ab:f8:9d:e5:51:19:2f: 1c:0b:0b:ba:32:79:22:8c:54:c2:ee:a4:3c:ee:03: 77:44:6a:66:4c:65:16:ac:26:fe:35:d8:29:a2:c5: 5e:fa:89:00:fc:46:e3:a8:89:9d:e3:f5:7b:ab:26: 16:c0:5a:e2:fd:de:e9:f3:36:07:0f:2a:88:4e:5e: da:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DE:51:25:18:DB:65:44:E4:6B:0B:9A:90:DC:40:9F:5B:1F:41:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:78:46:32:73:23:dd:f4:f4:f5:39:86:bd:a8:07:cd:70:13: bb:84:9f:13:06:b7:b4:29:21:f5:39:9e:c2:ad:96:5c:5b:89: ef:91:83:7d:fa:26:1e:b1:d4:75:f2:5f:35:01:eb:9b:31:c7: cf:ce:48:50:63:ff:9e:7c:fd:00:44:2d:e2:45:9d:10:1f:c5: 04:61:cf:03:e9:95:ab:e3:50:f8:68:b7:89:4c:6e:ac:3e:a8: 6d:c9:cd:92:d6:e5:4f:4a:55:14:93:43:ca:bf:31:d3:ac:99: 84:47:b7:ae:27:e8:da:17:19:9d:f9:29:86:d5:5e:27:2e:ba: 9f:71:9d:68:41:66:99:52:c1:3b:1d:5b:2d:7d:40:c3:f1:0c: 6d:31:4f:06:ca:8e:43:b5:6e:12:19:fe:a4:6f:df:39:d1:e8: 4f:d6:4e:7e:a3:bd:5d:0a:e0:8f:ff:37:e4:6c:28:42:eb:18: 21:91:ab:99:9e:58:80:92:29:1e:15:fc:6d:71:4b:f0:12:e4: 73:d9:60:fa:c5:36:00:76:e5:55:f4:39:b0:3b:7d:05:04:4f: 10:16:db:bb:fe:31:b3:60:a9:e1:3a:5d:d4:c5:34:7c:83:25: 1e:19:82:a5:8d:23:4b:e5:48:a1:25:1d:ec:75:9d:3a:ca:36: 0a:cf:2a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKSQvYxzoPCmCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NjM5MzFkM2EtMDJkMy00OWQyLTg0MGQtYWFhNWM0Mzc3OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSAN/dnUyp2YxuGf5u9oIe3pafOvCXpOE2rH 6PLuabCus4GX3iBcB6aI4xgKys9g4BT88eRzHuCBrPihT67RdXyQ3Kd6wkEe4/RY fpuPpE0crp7hhE2v50JqK5NFt6m1r1hgEanLbZPMtOfZgRrEkhEsHaZv1F19rWXg xV2lLqD2NW40RZkNY+weiMDUFZ5fL9e1soUbNbb9jMP05lyh+oYKV6Ie6Wtvd0BF eoD9zie+pzb9ltaCR8Sfyav4neVRGS8cCwu6MnkijFTC7qQ87gN3RGpmTGUWrCb+ NdgposVe+okA/EbjqImd4/V7qyYWwFri/d7p8zYHDyqITl7aswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPeUSUY22VE5GsLmpDcQJ9bH0FzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU3MjA3YWEtMzNiYS0z NTE3LWJhOTItZGJlYWU3NTZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt4RjJzI9309PU5hr2oB81wE7uEnxMGt7QpIfU5nsKtllxbie+Rg336 Jh6x1HXyXzUB65sxx8/OSFBj/558/QBELeJFnRAfxQRhzwPplavjUPhot4lMbqw+ qG3JzZLW5U9KVRSTQ8q/MdOsmYRHt64n6NoXGZ35KYbVXicuup9xnWhBZplSwTsd Wy19QMPxDG0xTwbKjkO1bhIZ/qRv3znR6E/WTn6jvV0K4I//N+RsKELrGCGRq5me WICSKR4V/G1xS/AS5HPZYPrFNgB25VX0ObA7fQUETxAW27v+MbNgqeE6XdTFNHyD JR4ZgqWNI0vlSKElHex1nTrKNgrPKgM= -----END CERTIFICATE-----Generated at Fri Sep 18 17:07:51 2026 by rpki-client