$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa File: af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa (raw, json) Hash identifier: t1ysz3iUJ4M764nlyqdptmheiyJFErj1v4amLIbBG1E= Subject key identifier: 39:3A:9C:9C:CB:7F:5C:46:7A:F8:09:B8:C9:39:23:64:60:DF:E8:2F Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F4328584D9B8557602D3FE5D651F03470 Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 1074 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:57:60:2d:3f:e5:d6:51:f0:34:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=5cfa5230-ceed-4765-862a-90b03b27dbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:83:5a:48:b6:7e:57:45:e2:23:d2:2e:8d: ff:4f:b2:27:80:01:f7:7e:07:7f:e4:f6:9f:f0:bb: 1b:f3:0a:41:b3:e6:06:21:e5:e7:de:6a:6e:1c:cc: 6c:0f:fc:05:3f:7a:dc:c1:23:e2:6a:f8:df:ca:71: 55:3a:84:25:93:52:b4:08:82:b5:81:a3:92:4c:de: 39:45:e7:21:7a:f9:70:76:7c:bd:5e:51:03:0c:04: fe:a1:db:13:f6:2e:ac:c1:79:43:b6:38:6b:94:dd: c3:2f:c2:8d:81:cd:b2:1d:a3:24:44:d2:5f:b7:10: ad:b4:57:dd:1e:0e:03:9e:3c:25:59:d6:41:d1:88: b9:97:9e:ec:b7:49:a5:15:d1:b0:ed:b9:6c:9f:08: 38:0b:c0:a5:65:d6:39:00:97:e5:2a:09:97:ab:1a: 99:0a:ef:82:65:f8:9a:5d:32:46:4b:8f:be:03:fd: f0:e7:ea:90:c8:58:2f:9d:6e:f1:1a:9c:4c:83:4b: 0d:33:7e:07:06:6b:28:56:3c:09:f1:54:33:2c:96: af:1c:e4:94:be:0f:a3:be:aa:8d:c6:a6:26:16:3a: 43:fb:de:0e:fc:75:d2:94:98:cc:93:04:55:19:7a: dc:df:69:d9:75:ed:92:05:14:34:d5:54:2f:1e:cc: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3A:9C:9C:CB:7F:5C:46:7A:F8:09:B8:C9:39:23:64:60:DF:E8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:dc:64:3a:8e:d7:da:ba:2f:b1:7c:80:ee:e0:98:f7:14:2b: 95:b1:91:18:0f:95:8c:ba:06:80:f5:ff:15:6b:2a:c6:83:e7: fa:bb:a5:54:04:c2:42:25:5b:1e:53:6f:59:85:33:31:fb:3f: e7:fd:ce:fa:1d:57:3c:33:6c:5f:1b:ba:81:cf:01:98:ec:19: b1:fe:19:78:ef:ac:fd:5e:e7:a0:6b:ec:32:37:26:ba:dd:64: af:ae:70:10:7c:20:5a:b0:ec:23:c0:bd:72:6c:0b:ba:58:09: 7b:e6:82:b8:8c:6f:5e:f1:71:95:54:a4:a5:43:09:fe:20:3e: 4c:19:05:6b:62:93:a2:97:e3:5c:7a:6c:6d:15:90:74:2b:6e: 8c:eb:1c:53:6c:3b:94:92:63:f0:b0:e0:74:7d:02:ff:eb:93: 81:75:a9:85:46:c0:79:a4:bc:d2:d4:05:56:cc:a1:d8:7b:16: 24:7c:fb:97:35:06:12:c2:4d:15:8c:11:39:70:19:fc:d0:3a: b1:62:45:20:12:95:11:c6:68:08:4e:15:39:ba:5a:46:93:2e: 56:c2:51:9f:1e:5a:7a:6d:cb:08:be:5e:0d:7f:1e:74:9a:0c: aa:84:5d:05:52:f9:bc:e1:17:ee:39:0d:43:d9:ad:e1:09:01: a2:bc:a6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVdgLT/l1lHwNHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk NWNmYTUyMzAtY2VlZC00NzY1LTg2MmEtOTBiMDNiMjdkYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEODWki2fldF4iPSLo3/T7IngAH3fgd/5Paf 8Lsb8wpBs+YGIeXn3mpuHMxsD/wFP3rcwSPiavjfynFVOoQlk1K0CIK1gaOSTN45 Rechevlwdny9XlEDDAT+odsT9i6swXlDtjhrlN3DL8KNgc2yHaMkRNJftxCttFfd Hg4DnjwlWdZB0Yi5l57st0mlFdGw7blsnwg4C8ClZdY5AJflKgmXqxqZCu+CZfia XTJGS4++A/3w5+qQyFgvnW7xGpxMg0sNM34HBmsoVjwJ8VQzLJavHOSUvg+jvqqN xqYmFjpD+94O/HXSlJjMkwRVGXrc32nZde2SBRQ01VQvHsyEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk6nJzLf1xGevgJuMk5I2Rg3+gvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvYWYwYWExYzktMWUyYS0z MzRmLTgyMDYtOTcyZjk1YzRhYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfcZDqO19q6L7F8gO7gmPcUK5WxkRgPlYy6BoD1/xVrKsaD5/q7pVQE wkIlWx5Tb1mFMzH7P+f9zvodVzwzbF8buoHPAZjsGbH+GXjvrP1e56Br7DI3Jrrd ZK+ucBB8IFqw7CPAvXJsC7pYCXvmgriMb17xcZVUpKVDCf4gPkwZBWtik6KX41x6 bG0VkHQrbozrHFNsO5SSY/Cw4HR9Av/rk4F1qYVGwHmkvNLUBVbModh7FiR8+5c1 BhLCTRWMETlwGfzQOrFiRSASlRHGaAhOFTm6WkaTLlbCUZ8eWnptywi+Xg1/HnSa DKqEXQVS+bzhF+45DUPZreEJAaK8prw= -----END CERTIFICATE-----Generated at Wed May 13 11:38:23 2026 by rpki-client