$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa File: cf1a0411-affa-31be-a610-7a5e46691069.roa (raw, json) Hash identifier: KzGOuuT41p7gWT0/bMOaw2nIsKETLDUqMiOJh1qKeqM= Subject key identifier: 61:45:06:94:FE:D8:13:A4:DC:43:41:8C:CE:38:85:CB:F3:1B:BA:46 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584CAA2717A0FE44E3C54E9D8E00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 174 IP address blocks: 104.218.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:17:a0:fe:44:e3:c5:4e:9d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=5a1b1819-1a6d-4b31-9b80-772f3ebd5d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:16:93:7f:8b:18:f7:cc:06:6c:db:5a:a1:01: 66:5f:42:6e:e5:11:28:89:a9:4f:96:69:5f:02:63: ae:11:49:60:aa:8e:8d:69:d8:f7:45:61:01:0a:f3: a8:96:26:50:b8:75:6e:2a:3e:5c:7d:2a:d9:0c:8c: 2b:90:47:a7:63:e8:f4:e7:76:77:47:8f:99:6b:be: a3:54:94:77:24:4f:28:32:49:b0:63:ab:2e:eb:19: 5b:92:05:fd:75:69:35:7a:72:86:20:b5:d3:8c:47: be:44:fb:d3:82:05:86:6d:f3:2c:e1:ab:35:1c:f4: f9:b4:ea:c0:3f:c4:04:bb:9b:6b:12:7e:4a:b4:e2: ba:f4:66:97:43:72:60:17:b7:7e:7d:22:58:98:65: 99:9a:5a:8e:00:e4:e6:b3:f1:9d:52:d4:53:91:3f: 5f:34:88:a0:9c:57:15:22:7f:75:43:66:fb:0a:2e: 0c:b4:e4:54:a4:86:90:67:8e:aa:21:68:94:78:01: 6e:19:79:93:1d:c9:a9:a7:b5:9a:b2:85:6b:f9:03: 05:c2:ff:be:d1:a5:67:e8:37:d1:7f:c9:ea:d3:4a: 14:f8:27:cc:1d:2f:c8:89:77:e5:24:cd:7a:04:20: 84:e5:5b:96:af:8e:57:97:72:88:e9:12:29:88:81: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:06:94:FE:D8:13:A4:DC:43:41:8C:CE:38:85:CB:F3:1B:BA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c3:7e:ac:d0:29:bd:aa:73:4e:ba:6c:e0:dd:04:a4:d5:54: ee:82:cc:9f:95:60:b6:a6:02:6c:ec:3c:82:da:95:89:c7:54: ce:be:6d:60:84:ec:47:01:48:09:1e:0b:fb:e5:76:be:4c:f9: ed:ac:0d:a8:61:2b:c6:a4:0a:d4:f3:cb:ad:4a:7e:90:cb:8a: a7:95:86:62:90:6b:00:9e:33:a4:78:7a:77:bf:1c:ba:51:04: 36:b8:e4:26:11:20:0f:c1:5e:d4:ce:4a:c8:ec:7a:64:ad:16: 0d:a4:44:6a:8c:ff:82:84:18:9d:af:5c:d2:b6:cb:d5:1c:0a: 47:0e:1d:b3:f2:d2:6f:15:74:d0:eb:b8:09:c2:34:51:9e:3e: e5:30:2a:ab:4e:57:47:7d:32:3c:f1:14:44:91:72:6f:44:37: 7b:7e:cc:bb:c0:5e:71:e1:78:40:af:4d:62:e6:ec:cb:8a:2b: 3e:03:db:a6:f5:32:98:f0:80:be:39:38:26:f1:c4:0a:2a:7c: e3:23:73:ef:1d:2f:98:44:1b:c7:b9:cb:bf:6c:0f:3f:b4:a4: 31:2b:dd:f4:03:00:47:b9:7b:49:91:16:d0:6b:d0:93:65:ba: ec:b7:08:99:e2:61:9e:80:57:fa:77:d8:e9:40:bc:e7:44:6f: 25:97:00:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxeg/kTjxU6djgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NWExYjE4MTktMWE2ZC00YjMxLTliODAtNzcyZjNlYmQ1ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxaTf4sY98wGbNtaoQFmX0Ju5REoialPlmlf AmOuEUlgqo6Nadj3RWEBCvOoliZQuHVuKj5cfSrZDIwrkEenY+j053Z3R4+Za76j VJR3JE8oMkmwY6su6xlbkgX9dWk1enKGILXTjEe+RPvTggWGbfMs4as1HPT5tOrA P8QEu5trEn5KtOK69GaXQ3JgF7d+fSJYmGWZmlqOAOTms/GdUtRTkT9fNIignFcV In91Q2b7Ci4MtORUpIaQZ46qIWiUeAFuGXmTHcmpp7WasoVr+QMFwv++0aVn6DfR f8nq00oU+CfMHS/IiXflJM16BCCE5VuWr45Xl3KI6RIpiIHCEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFFBpT+2BOk3ENBjM44hcvzG7pGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2YxYTA0MTEtYWZmYS0z MWJlLWE2MTAtN2E1ZTQ2NjkxMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADDfqzQKb2qc066bODdBKTVVO6CzJ+VYLamAmzsPILalYnHVM6+bWCE 7EcBSAkeC/vldr5M+e2sDahhK8akCtTzy61KfpDLiqeVhmKQawCeM6R4ene/HLpR BDa45CYRIA/BXtTOSsjsemStFg2kRGqM/4KEGJ2vXNK2y9UcCkcOHbPy0m8VdNDr uAnCNFGePuUwKqtOV0d9MjzxFESRcm9EN3t+zLvAXnHheECvTWLm7MuKKz4D26b1 MpjwgL45OCbxxAoqfOMjc+8dL5hEG8e5y79sDz+0pDEr3fQDAEe5e0mRFtBr0JNl uuy3CJniYZ6AV/p32OlAvOdEbyWXAHo= -----END CERTIFICATE-----Generated at Tue Feb 24 21:17:39 2026 by rpki-client