$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa File: 9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa (raw, json) Hash identifier: kCtDESTaErpLITUWA03P8o1q3D1rayTzLQ7roaRwllk= Subject key identifier: 4E:FC:C1:FE:86:DF:EB:EC:63:5B:F1:2C:3B:1E:2C:66:61:22:77:88 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E5BAF4761B39E2ADB147F5EC0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 3257 IP address blocks: 104.251.82.0/24 maxlen: 24 104.251.90.0/24 maxlen: 24 207.230.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:47:61:b3:9e:2a:db:14:7f:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=b3c5dc40-12e1-4fd5-902c-e0228c471173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:86:0d:4d:83:88:63:c8:e3:af:65:a9:ac: de:4f:99:46:8c:fe:df:2b:fa:6b:3a:f5:0d:43:fc: 85:27:1d:e6:aa:65:a1:a2:6e:0c:a0:12:10:06:0a: 03:b4:b7:39:cb:20:af:c7:b1:0a:dc:88:75:15:1d: 90:ce:ff:8a:1c:db:87:78:7c:d1:10:eb:f4:53:3d: 26:05:43:8c:d3:1a:3b:91:85:77:9c:95:f2:8c:55: db:17:56:de:46:93:5c:3c:1a:99:aa:12:07:f6:8f: 5f:37:6b:71:e1:bc:91:5c:ed:e8:0b:e6:53:fa:65: 87:55:f2:41:b0:e1:c8:0d:44:cc:e5:67:a0:66:0d: 43:da:e4:4b:7b:4a:ec:2e:a5:f7:1c:f1:5d:36:5b: 15:91:4b:4b:b9:3f:49:62:08:c9:b7:30:44:62:24: d0:5e:2e:ba:14:7a:8d:b6:a3:f5:7f:6c:e1:c9:78: 87:ac:48:ca:c2:f0:0e:48:90:1b:e6:6d:6b:92:f5: c3:12:3f:c4:e3:92:b2:01:d0:07:90:24:7c:20:28: 4d:bb:13:33:b6:39:ac:8c:67:67:8f:61:62:83:76: 40:1b:76:5b:07:49:b9:94:c8:6e:67:e9:0b:e6:0e: 75:71:48:eb:ea:36:07:f3:dd:fb:f3:d1:72:71:8f: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FC:C1:FE:86:DF:EB:EC:63:5B:F1:2C:3B:1E:2C:66:61:22:77:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.82.0/24 104.251.90.0/24 207.230.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:20:bd:05:c1:89:9e:e4:d0:51:1c:9f:b5:db:8f:bf:29:fd: 75:46:5b:41:74:3d:42:8f:32:a8:d7:45:8c:d8:1d:d0:15:14: 11:91:bf:a5:51:dd:ac:bf:0e:60:e7:74:d2:ae:e3:b0:01:28: fa:dc:5c:99:1d:cc:a9:32:07:71:76:87:b7:c3:e5:fe:58:89: 32:6e:03:f3:20:a6:09:4b:eb:e5:c9:f9:b8:90:96:02:6d:de: 67:eb:9a:a7:89:5c:7b:63:32:31:ab:93:10:56:36:1f:93:a3: b2:3b:c0:19:51:a4:c6:5c:c2:24:2d:1a:7d:a4:7f:1b:c9:07: b9:7e:91:4c:ea:ec:84:ec:72:ac:48:81:0e:97:0d:91:07:c8: d4:80:3e:ca:10:b1:03:ba:b4:71:ba:b6:a3:9c:a8:36:c0:d2: 9a:ef:a9:80:19:fc:30:7d:65:39:68:60:09:98:67:0e:06:a6: 31:82:d0:04:95:27:1f:b8:8c:e5:c6:a9:ed:8c:dc:3c:0b:2b: 30:46:00:2c:7d:99:32:83:dc:45:df:2f:f5:b1:7c:a6:09:b9: a4:c0:5b:bd:92:7b:2b:be:64:a3:69:34:cd:5e:5f:b7:80:68: 49:76:e8:7c:fe:a3:be:ef:d0:f2:6f:fc:c6:fd:6f:a5:ae:aa: 6a:d2:0f:82 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5br0dhs54q2xR/XsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk YjNjNWRjNDAtMTJlMS00ZmQ1LTkwMmMtZTAyMjhjNDcxMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ6GDU2DiGPI469lqazeT5lGjP7fK/prOvUN Q/yFJx3mqmWhom4MoBIQBgoDtLc5yyCvx7EK3Ih1FR2Qzv+KHNuHeHzREOv0Uz0m BUOM0xo7kYV3nJXyjFXbF1beRpNcPBqZqhIH9o9fN2tx4byRXO3oC+ZT+mWHVfJB sOHIDUTM5WegZg1D2uRLe0rsLqX3HPFdNlsVkUtLuT9JYgjJtzBEYiTQXi66FHqN tqP1f2zhyXiHrEjKwvAOSJAb5m1rkvXDEj/E45KyAdAHkCR8IChNuxMztjmsjGdn j2Fig3ZAG3ZbB0m5lMhuZ+kL5g51cUjr6jYH893789FycY+nAQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFE78wf6G3+vsY1vxLDseLGZhIneIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOTg4NmY0YzItMmM2Yy0z MTJlLTk1MDMtZGViMGE5MWRlYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaPtSAwQA aPtaAwQCz+ZoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHEgvQXBiZ7k0FEcn7Xbj78p/XVGW0F0PUKPMqjX RYzYHdAVFBGRv6VR3ay/DmDndNKu47ABKPrcXJkdzKkyB3F2h7fD5f5YiTJuA/Mg pglL6+XJ+biQlgJt3mfrmqeJXHtjMjGrkxBWNh+To7I7wBlRpMZcwiQtGn2kfxvJ B7l+kUzq7ITscqxIgQ6XDZEHyNSAPsoQsQO6tHG6tqOcqDbA0prvqYAZ/DB9ZTlo YAmYZw4GpjGC0ASVJx+4jOXGqe2M3DwLKzBGACx9mTKD3EXfL/WxfKYJuaTAW72S eyu+ZKNpNM1eX7eAaEl26Hz+o77v0PJv/Mb9b6WuqmrSD4I= -----END CERTIFICATE-----Generated at Sat Jul 18 03:32:40 2026 by rpki-client