$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa File: aaf31aab-4b95-35a5-8785-33e89424e316.roa (raw, json) Hash identifier: 8K0f2Pk1gqgd3065lCuS9NmVnDEJ27DjSCOLWTFL4uA= Subject key identifier: 05:9A:FE:1A:AF:0F:D2:93:7F:5F:59:32:36:60:AF:7E:BB:1D:45:6C Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A59E7441F0CFA2FCB8A1C0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 104.156.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:9e:74:41:f0:cf:a2:fc:b8:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=0e53f7ac-829c-4262-95eb-c319d9f142b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:9e:12:8c:a9:69:ec:6f:74:76:c4:b4:32: 94:22:14:4b:20:71:10:29:05:40:f6:8e:11:0e:f5: c0:7e:fe:7d:2a:35:2c:1b:bb:71:0c:57:3a:06:65: a2:04:7d:b9:0c:57:ec:22:54:08:4a:8c:9b:f3:eb: cd:94:75:87:fd:7d:b4:4f:31:f7:e5:de:2d:0d:c6: 4e:8e:71:8f:fb:d6:31:c7:6d:86:d8:4f:ce:35:29: ba:4e:44:9b:04:5b:10:7b:57:9c:d5:af:61:16:f6: c1:3b:08:3b:88:48:8c:ce:b5:89:0a:f6:7b:e1:99: 7e:f9:3e:96:4d:c4:32:78:05:b9:63:83:6d:62:db: 64:23:8e:84:aa:b8:df:8d:0e:be:2e:95:0f:e1:97: ad:05:99:7b:9a:71:71:54:66:90:ff:24:1e:98:50: 35:e1:25:31:b1:e3:8f:4f:90:7f:35:dd:15:3a:8e: a2:f6:4e:05:68:07:dd:5c:60:4f:6f:28:68:d3:31: d4:6f:49:c9:3e:04:dd:eb:19:67:c8:6e:ff:47:73: 89:49:dd:f1:d6:cf:7c:17:66:48:48:64:31:62:7b: c5:18:8a:68:de:07:2c:ce:13:98:da:52:9b:41:71: db:d2:d0:68:1d:a5:b5:ce:27:b1:bf:53:73:a6:9f: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9A:FE:1A:AF:0F:D2:93:7F:5F:59:32:36:60:AF:7E:BB:1D:45:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 104.156.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a8:80:de:dc:49:aa:24:25:1f:56:0a:aa:e0:bd:4e:42:63: 4a:93:d9:66:b0:14:78:56:18:fa:37:a0:21:d9:a8:4d:74:90: 06:fe:39:2c:ff:90:b0:75:2b:2c:63:dc:86:1c:65:e7:04:af: a2:c5:94:6b:d4:ce:b7:77:d8:b9:cc:c9:88:73:d7:81:1f:5e: 36:9a:ba:08:3e:68:a4:42:a3:09:55:9a:f5:04:f2:8a:90:9b: 26:8d:29:5f:01:61:f3:a3:00:5d:36:bb:a4:9f:cc:f4:cc:38: e8:bb:e3:15:8b:81:33:16:50:c7:0c:89:01:f0:9a:f8:5f:49: ac:85:8b:a0:39:15:28:78:a3:45:27:d4:f1:ac:a9:87:44:26: fe:c6:b6:f8:3b:e4:f1:83:22:37:3b:05:d2:22:86:b9:fa:6e: e8:64:ff:07:72:75:87:06:7a:0b:5a:53:46:0d:f1:42:7b:b7: 88:a6:4b:95:61:16:90:db:2d:99:f6:fa:a6:2c:21:ea:a2:c7: c1:43:87:fd:a0:52:66:82:dc:7a:8f:12:b8:7d:e2:c0:2d:38: 61:78:8d:ac:50:eb:36:4c:f2:73:b6:26:3e:3c:21:22:6b:2c: e7:84:50:aa:ac:1a:92:de:01:5d:55:90:2a:51:cc:a9:02:f3: 73:86:45:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pZ50QfDPovy4ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk MGU1M2Y3YWMtODI5Yy00MjYyLTk1ZWItYzMxOWQ5ZjE0MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymKeEoypaexvdHbEtDKUIhRLIHEQKQVA9o4R DvXAfv59KjUsG7txDFc6BmWiBH25DFfsIlQISoyb8+vNlHWH/X20TzH35d4tDcZO jnGP+9Yxx22G2E/ONSm6TkSbBFsQe1ec1a9hFvbBOwg7iEiMzrWJCvZ74Zl++T6W TcQyeAW5Y4NtYttkI46EqrjfjQ6+LpUP4ZetBZl7mnFxVGaQ/yQemFA14SUxseOP T5B/Nd0VOo6i9k4FaAfdXGBPbyho0zHUb0nJPgTd6xlnyG7/R3OJSd3x1s98F2ZI SGQxYnvFGIpo3gcszhOY2lKbQXHb0tBoHaW1ziexv1Nzpp/FSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWa/hqvD9KTf19ZMjZgr367HUVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWFmMzFhYWItNGI5NS0z NWE1LTg3ODUtMzNlODk0MjRlMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOogN7cSaokJR9WCqrgvU5CY0qT2WawFHhWGPo3oCHZqE10kAb+OSz/ kLB1Kyxj3IYcZecEr6LFlGvUzrd32LnMyYhz14EfXjaaugg+aKRCowlVmvUE8oqQ myaNKV8BYfOjAF02u6SfzPTMOOi74xWLgTMWUMcMiQHwmvhfSayFi6A5FSh4o0Un 1PGsqYdEJv7Gtvg75PGDIjc7BdIihrn6buhk/wdydYcGegtaU0YN8UJ7t4imS5Vh FpDbLZn2+qYsIeqix8FDh/2gUmaC3HqPErh94sAtOGF4jaxQ6zZM8nO2Jj48ISJr LOeEUKqsGpLeAV1VkCpRzKkC83OGRUU= -----END CERTIFICATE-----Generated at Sun May 3 17:56:25 2026 by rpki-client