$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa File: d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json) Hash identifier: xZ5H92U3QHIaiUDo1BHw6IDZRUsQ4txOh1FT2ARW8/4= Subject key identifier: 87:0D:1D:C7:0E:22:1C:E4:0C:B6:9F:13:DF:52:EE:FE:3D:CA:C9:5C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584CB121BDEC01AF2CB442006300 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 23470 IP address blocks: 104.251.85.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:bd:ec:01:af:2c:b4:42:00:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=b2879495-56ef-4419-a016-6a9bb9c816e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f6:be:14:af:6c:87:29:f8:b4:02:0e:f0:14: eb:39:01:c6:24:d5:24:61:88:64:1e:e5:77:f1:fa: 00:23:1d:5b:36:b6:c1:11:7a:58:42:00:25:23:3b: cf:5c:5c:ac:db:02:14:b8:f5:51:71:17:6c:76:0e: b6:51:fb:e3:92:ec:a3:f3:73:10:15:ed:b8:a7:8d: a8:a1:87:8c:6b:1e:2f:19:ad:56:64:17:60:0f:7c: 4a:65:3d:d9:2f:eb:f9:e3:32:d9:80:4b:03:a9:8a: 3c:6a:8d:9d:b3:15:1e:b2:dc:e4:35:a2:13:fc:ae: 74:b8:5c:80:c5:98:f3:5b:ee:27:e8:f4:33:ef:87: bc:b6:3a:2b:ff:fc:a3:fd:08:e2:13:90:bf:09:48: ed:e9:ad:5f:43:11:f3:8b:03:d8:0a:93:cf:11:2d: 7c:46:08:64:ba:67:ff:62:34:b7:93:9c:0e:9c:38: a5:29:64:e0:d4:86:3a:9a:c5:9f:90:44:d0:82:9b: 65:d6:0b:cf:46:af:57:1e:82:1f:20:77:85:29:36: 1a:e3:1f:56:ef:02:9c:3e:8e:f8:cf:03:b9:4a:5c: 7e:9a:6f:ba:e6:dd:67:ac:67:27:0d:58:6d:f8:66: ce:01:1d:74:bd:0c:58:13:e1:d5:0d:f1:d6:59:ec: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0D:1D:C7:0E:22:1C:E4:0C:B6:9F:13:DF:52:EE:FE:3D:CA:C9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.85.0/24 104.251.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7f:28:fa:62:26:b3:eb:f3:88:cb:c6:f8:d1:31:9d:00:54: 41:1b:7e:1c:f6:69:42:f5:b7:ca:3e:e5:a3:aa:7e:99:34:39: 09:ab:fd:f2:e3:b5:78:fd:af:b9:fd:49:68:91:68:90:86:10: 2b:a9:4c:54:0f:0a:c0:c1:71:ed:19:f9:17:c0:d6:65:39:02: 4a:0a:21:ad:53:10:36:c0:bc:fe:c4:b9:df:94:57:c7:b4:b5: fb:0a:04:ba:a8:b8:dc:92:0e:bf:0e:83:c7:fc:41:92:44:63: ac:ba:a8:71:5f:36:d3:b2:d9:59:83:bd:d7:45:45:81:d5:80: 8c:04:1a:8f:b6:9a:4a:da:c4:e3:9e:2a:65:b9:86:39:0f:18: 78:da:e5:de:14:bd:de:05:a0:2c:d0:70:0d:9a:f1:bc:6f:1b: e3:2f:dd:7e:b6:69:34:2f:90:8c:e4:e1:83:19:f5:98:f0:c6: bb:54:9f:dd:35:89:70:95:7c:65:87:06:9b:58:be:57:1d:56: 87:f2:12:b3:b8:24:56:5b:e2:31:73:7a:8a:c5:ca:29:f9:ca: 66:39:c1:bc:8f:99:f6:bb:6b:6e:0f:19:ca:a7:a4:b5:8d:cd: dd:92:41:48:6d:75:d3:52:a0:08:a2:45:3c:f5:23:98:11:54: cf:07:4c:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyxIb3sAa8stEIAYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjI4Nzk0OTUtNTZlZi00NDE5LWEwMTYtNmE5YmI5YzgxNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkva+FK9shyn4tAIO8BTrOQHGJNUkYYhkHuV3 8foAIx1bNrbBEXpYQgAlIzvPXFys2wIUuPVRcRdsdg62Ufvjkuyj83MQFe24p42o oYeMax4vGa1WZBdgD3xKZT3ZL+v54zLZgEsDqYo8ao2dsxUestzkNaIT/K50uFyA xZjzW+4n6PQz74e8tjor//yj/QjiE5C/CUjt6a1fQxHziwPYCpPPES18Rghkumf/ YjS3k5wOnDilKWTg1IY6msWfkETQgptl1gvPRq9XHoIfIHeFKTYa4x9W7wKcPo74 zwO5Slx+mm+65t1nrGcnDVht+GbOAR10vQxYE+HVDfHWWey7HQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIcNHccOIhzkDLafE99S7v49yslcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDhkYzg2Y2ItMTYxZi0z OTk1LThkOTktZGQyNDBkZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtVAwQA aPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAx/KPpiJrPr84jLxvjRMZ0AVEEbfhz2aUL1t8o+5aOqfpk0 OQmr/fLjtXj9r7n9SWiRaJCGECupTFQPCsDBce0Z+RfA1mU5AkoKIa1TEDbAvP7E ud+UV8e0tfsKBLqouNySDr8Og8f8QZJEY6y6qHFfNtOy2VmDvddFRYHVgIwEGo+2 mkraxOOeKmW5hjkPGHja5d4Uvd4FoCzQcA2a8bxvG+Mv3X62aTQvkIzk4YMZ9Zjw xrtUn901iXCVfGWHBptYvlcdVofyErO4JFZb4jFzeorFyin5ymY5wbyPmfa7a24P GcqnpLWNzd2SQUhtddNSoAiiRTz1I5gRVM8HTMM= -----END CERTIFICATE-----Generated at Sun Feb 22 21:44:54 2026 by rpki-client