$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1eee4c65-0c74-314b-b00e-38be39219370.roa File: 1eee4c65-0c74-314b-b00e-38be39219370.roa (raw, json) Hash identifier: 7Am4uqi/dm/vHpvo3tM+82kk5u8fjrt/AKGseM/uQ/8= Subject key identifier: 8D:17:57:62:EC:E6:F0:C5:2C:9D:C0:40:66:3A:E6:DA:BA:A3:A7:60 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D237A13A535BAD9199D887024 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1eee4c65-0c74-314b-b00e-38be39219370.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 104.251.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:13:a5:35:ba:d9:19:9d:88:70:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=43a68a8e-cf1c-4d95-a80b-e708f4fe81d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:ef:2f:64:5a:ac:b5:12:8e:b7:e3:91:7f: 54:d2:77:94:41:5c:5f:4d:8a:40:58:37:fa:3a:04: 04:2c:f8:6c:87:7f:f8:86:37:8e:d7:8f:ba:e0:b4: 24:4a:70:8a:cb:2b:01:89:65:2f:1a:3a:41:6c:10: 10:9c:33:69:9c:ba:6d:41:a1:00:fe:b3:fa:19:3a: 94:7d:64:81:4e:43:8b:0b:18:5b:9d:18:09:25:7e: bf:44:e0:f6:27:57:3f:61:98:24:2e:67:a3:4e:28: d3:62:ff:fe:98:1d:cd:9c:84:d8:0f:a0:7c:d4:7a: 35:2f:cb:24:d5:71:00:b4:d7:48:fc:93:8b:67:c8: 8c:e5:25:c4:c2:76:5b:44:5f:7b:f2:5e:f7:86:bc: d0:9d:00:dc:cb:a7:39:bf:40:67:55:cc:5c:aa:51: f9:38:17:a6:9d:cc:d7:ec:b6:81:9b:30:44:03:13: 06:f2:b1:2f:60:f8:46:f5:45:b0:dc:14:b0:23:c2: 65:f9:07:27:c4:ae:1d:e5:68:c6:0e:36:2e:b3:24: 45:b1:63:b5:2b:27:23:11:50:4e:96:92:0f:21:39: 0f:08:cc:4f:9d:e5:c2:3a:91:c1:1a:b0:41:d9:6e: 35:1b:2b:37:56:7a:3b:ab:53:72:33:14:75:9b:9d: fb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:17:57:62:EC:E6:F0:C5:2C:9D:C0:40:66:3A:E6:DA:BA:A3:A7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1eee4c65-0c74-314b-b00e-38be39219370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6e:4e:9c:91:57:a6:ef:ed:b7:b4:35:29:39:f4:ec:1e:91: 36:ed:9c:2b:66:b0:80:5a:f5:93:05:97:f8:ad:b9:fe:54:f8: 69:b3:74:8c:dc:e5:a5:44:7d:d8:6b:0a:22:16:e7:75:93:68: ec:54:c8:46:d4:38:bc:b1:46:ad:69:f4:29:84:42:c9:b1:0c: b3:2f:4a:12:0f:36:36:c2:a9:5b:2f:dd:54:17:be:07:24:ef: fc:9e:0e:0e:13:d2:26:28:a9:39:e6:3d:e4:a7:51:55:1d:c6: 02:ab:d7:53:65:9b:4c:aa:0e:a5:26:b4:2b:b3:35:61:dd:83: f5:1d:7a:fa:7e:7d:ae:5a:4c:36:50:9a:61:54:aa:0d:15:a3: 65:41:01:76:52:8f:f7:8b:63:e5:d8:e4:5e:50:42:15:78:64: 2d:21:d1:50:7e:57:34:4d:38:ee:fc:09:ee:76:68:a5:74:af: 28:23:12:6d:c2:a4:5d:fe:5a:95:17:6a:13:4a:fc:00:56:2b: 67:53:ef:e0:c4:17:8d:6d:27:db:62:e8:6d:9f:15:a1:27:83: 6a:99:5d:49:19:ff:8d:34:aa:7f:b1:02:a6:b1:0a:2c:4d:b0: 6c:ec:0a:74:68:79:10:00:80:da:e3:54:30:24:7a:e1:7f:36: d5:7e:2f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehOlNbrZGZ2IcCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDNhNjhhOGUtY2YxYy00ZDk1LWE4MGItZTcwOGY0ZmU4MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz7vL2RarLUSjrfjkX9U0neUQVxfTYpAWDf6 OgQELPhsh3/4hjeO14+64LQkSnCKyysBiWUvGjpBbBAQnDNpnLptQaEA/rP6GTqU fWSBTkOLCxhbnRgJJX6/ROD2J1c/YZgkLmejTijTYv/+mB3NnITYD6B81Ho1L8sk 1XEAtNdI/JOLZ8iM5SXEwnZbRF978l73hrzQnQDcy6c5v0BnVcxcqlH5OBemnczX 7LaBmzBEAxMG8rEvYPhG9UWw3BSwI8Jl+QcnxK4d5WjGDjYusyRFsWO1KycjEVBO lpIPITkPCMxPneXCOpHBGrBB2W41Gys3Vno7q1NyMxR1m537dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0XV2Ls5vDFLJ3AQGY65tq6o6dgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMWVlZTRjNjUtMGM3NC0z MTRiLWIwMGUtMzhiZTM5MjE5MzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVuTpyRV6bv7be0NSk59OwekTbtnCtmsIBa9ZMFl/ituf5U+GmzdIzc 5aVEfdhrCiIW53WTaOxUyEbUOLyxRq1p9CmEQsmxDLMvShIPNjbCqVsv3VQXvgck 7/yeDg4T0iYoqTnmPeSnUVUdxgKr11Nlm0yqDqUmtCuzNWHdg/Udevp+fa5aTDZQ mmFUqg0Vo2VBAXZSj/eLY+XY5F5QQhV4ZC0h0VB+VzRNOO78Ce52aKV0rygjEm3C pF3+WpUXahNK/ABWK2dT7+DEF41tJ9ti6G2fFaEng2qZXUkZ/400qn+xAqaxCixN sGzsCnRoeRAAgNrjVDAkeuF/NtV+L1g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:20 2026 by rpki-client