$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa File: 18fb001a-970c-3cab-8188-d1568ca51609.roa (raw, json) Hash identifier: 8Fg8lM4BMxW6A8YtSk+nADSuNGccJOIhuFzdP8MxjBc= Subject key identifier: 5A:AF:D6:E6:C9:9C:67:21:1F:AE:74:54:97:6C:82:5F:3D:B9:5C:76 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D91C0047EA5390FB74C0FAC80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 18978 IP address blocks: 104.218.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:04:7e:a5:39:0f:b7:4c:0f:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=9b3e9f54-d9c1-43c4-a486-d667fa3002f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:28:12:f2:d4:46:b1:4c:05:34:85:bd:e4: 84:4d:c2:25:74:23:58:d0:27:b5:91:3f:39:54:fe: 8e:3e:c2:14:b2:5a:5a:f2:63:cd:75:75:9a:e2:2a: 8a:31:f8:33:ad:a7:6e:8a:ec:56:c5:b5:5e:32:d4: e9:66:fa:84:07:b5:99:24:99:5f:20:88:91:90:bc: 52:ed:4a:e7:05:9a:39:0d:c5:69:4b:97:57:2e:3a: 4f:c3:b0:26:d0:22:30:bb:30:65:aa:db:0e:7e:65: c2:36:d4:5a:02:50:40:29:43:3e:4b:7d:28:c5:26: 36:f2:92:e1:6a:c2:0b:84:cf:d1:0c:e0:1d:22:93: 83:35:9e:bb:19:48:d2:9a:7c:6b:d5:13:bf:7b:ce: cb:a6:8c:ee:ed:52:7d:a8:35:ba:c7:68:81:66:c6: 8d:4c:2f:e3:4f:b3:0b:0c:86:d5:2e:b1:09:17:73: d3:4e:d6:e4:1a:9a:c2:59:bc:0f:ea:fe:92:55:94: 72:4a:7e:fe:7c:cc:84:97:60:b7:8e:b1:49:7f:49: ec:60:9f:c4:a5:1b:29:e0:1d:27:c4:eb:b5:4d:cb: 46:46:2f:8b:2b:86:a0:6f:d0:33:5c:53:0a:d8:2e: 4e:e7:ff:a8:37:82:32:c0:89:bb:79:2b:68:81:88: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AF:D6:E6:C9:9C:67:21:1F:AE:74:54:97:6C:82:5F:3D:B9:5C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d9:d7:31:d9:fb:fe:57:07:1e:6c:3d:77:b7:d5:fb:4a:4b: 9e:40:1e:23:e5:66:3c:77:5c:d2:59:77:f1:dc:3d:64:98:df: ef:8d:77:21:cb:ab:47:6d:2d:a7:06:5f:13:7b:12:61:e9:18: 8f:6b:44:ca:d0:10:9c:43:a1:02:f1:8e:87:ac:58:f1:7e:ec: 48:10:e3:cd:a6:af:6d:86:1f:f6:31:fb:18:4f:af:68:56:07: f6:74:ab:2d:2b:77:1c:79:11:1b:8b:bb:21:36:fd:22:0e:fa: 0a:87:81:6c:57:ba:19:ce:af:a0:82:93:0f:52:b0:bd:fa:b9: 74:ac:a8:b9:73:24:dc:35:01:27:10:54:88:08:4b:7e:c5:d8: 9d:94:7a:1a:ca:88:5a:4a:3b:f2:72:06:dd:27:06:77:5b:66: a8:53:f4:c1:90:8c:9e:e4:f3:9c:98:88:47:ae:c4:48:2a:85: 08:8f:ef:bd:38:4a:b5:c2:57:c9:05:e9:2e:bd:6f:b5:2b:99: c9:85:66:3e:0e:90:ee:55:ba:54:df:2b:83:59:59:17:0f:1a: 11:fb:83:2e:ac:0e:77:ff:1a:c1:74:a0:0b:6a:15:df:52:c2: e4:ec:3c:3a:15:ae:14:e8:6f:91:df:ac:52:64:4e:d1:a1:1f: b6:fd:c1:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAR+pTkPt0wPrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OWIzZTlmNTQtZDljMS00M2M0LWE0ODYtZDY2N2ZhMzAwMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokgoEvLURrFMBTSFveSETcIldCNY0Ce1kT85 VP6OPsIUslpa8mPNdXWa4iqKMfgzraduiuxWxbVeMtTpZvqEB7WZJJlfIIiRkLxS 7UrnBZo5DcVpS5dXLjpPw7Am0CIwuzBlqtsOfmXCNtRaAlBAKUM+S30oxSY28pLh asILhM/RDOAdIpODNZ67GUjSmnxr1RO/e87Lpozu7VJ9qDW6x2iBZsaNTC/jT7ML DIbVLrEJF3PTTtbkGprCWbwP6v6SVZRySn7+fMyEl2C3jrFJf0nsYJ/EpRsp4B0n xOu1TctGRi+LK4agb9AzXFMK2C5O5/+oN4IywIm7eStogYhMXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqv1ubJnGchH650VJdsgl89uVx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMThmYjAwMWEtOTcwYy0z Y2FiLTgxODgtZDE1NjhjYTUxNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzZ1zHZ+/5XBx5sPXe31ftKS55AHiPlZjx3XNJZd/HcPWSY3++NdyHL q0dtLacGXxN7EmHpGI9rRMrQEJxDoQLxjoesWPF+7EgQ482mr22GH/Yx+xhPr2hW B/Z0qy0rdxx5ERuLuyE2/SIO+gqHgWxXuhnOr6CCkw9SsL36uXSsqLlzJNw1AScQ VIgIS37F2J2UehrKiFpKO/JyBt0nBndbZqhT9MGQjJ7k85yYiEeuxEgqhQiP7704 SrXCV8kF6S69b7UrmcmFZj4OkO5VulTfK4NZWRcPGhH7gy6sDnf/GsF0oAtqFd9S wuTsPDoVrhTob5HfrFJkTtGhH7b9wV0= -----END CERTIFICATE-----Generated at Wed May 13 10:17:40 2026 by rpki-client