$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa File: 28e68c3f-20e0-38e6-9057-bf4b7475db74.roa (raw, json) Hash identifier: qDhjPmdpvTR3SxP/4zKPHemgxfOmGnocVAha30fH85A= Subject key identifier: 57:B5:15:44:7F:39:02:CD:42:BE:E5:54:71:E9:2C:59:6D:A7:66:0E Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584EA7901E3669152E9E3CAD4F80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 5650 IP address blocks: 104.251.84.0/24 maxlen: 24 104.251.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:1e:36:69:15:2e:9e:3c:ad:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cda2353a-4071-46a7-95ef-08dbaccaebc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c0:1e:ee:37:cc:e4:d1:56:6f:bf:7a:0b:ae: c4:73:7d:74:a7:bd:60:88:84:cd:39:4a:35:90:da: af:ab:26:86:3a:53:de:c4:37:99:4f:65:35:9b:48: 83:ee:e8:d6:0d:42:a2:bc:3b:3b:43:82:89:b7:0c: 3c:d4:d6:02:ee:23:de:71:23:1b:f1:a1:c1:6d:d9: 3c:ca:f0:68:56:26:d0:e8:79:d7:36:02:0c:a5:27: 3b:45:d6:e3:30:52:bd:47:8a:e0:20:4b:55:25:28: 24:5e:04:24:72:0c:51:f0:4b:ce:6a:48:65:99:0f: 77:11:c7:49:22:82:fc:be:15:34:f7:d8:36:39:fb: eb:20:7b:c5:4a:57:9c:bc:4e:bf:7e:4b:f1:fe:b8: be:52:e0:b2:c8:70:70:c0:c9:6b:57:96:db:8c:54: 4b:5a:6c:d9:6b:b9:1c:90:f8:63:ca:cb:0e:4b:6e: 35:98:b6:71:3c:7c:94:31:06:4e:ef:da:ba:1b:b2: db:31:ff:a9:09:ca:62:88:8c:db:54:07:5f:a7:9e: 70:92:bd:95:3c:b8:7e:de:02:b3:d7:5d:9b:17:c7: f8:6a:f0:94:c3:8a:8b:84:5d:0e:f5:14:6c:dd:a4: 44:14:6f:f5:35:ab:db:90:03:37:d3:7d:a7:59:d8: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B5:15:44:7F:39:02:CD:42:BE:E5:54:71:E9:2C:59:6D:A7:66:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.84.0/24 104.251.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0f:b2:c2:e9:e9:b4:81:f9:1e:f9:cf:a1:c5:95:91:4b:dc: 0f:47:e6:06:71:0b:b9:78:14:ef:e2:a1:87:1c:d9:5e:87:56: 60:6f:68:46:10:75:c5:87:4f:16:ca:b4:a1:b3:03:76:d2:12: dd:b2:58:8e:96:ea:2e:c4:75:b6:f6:48:ab:e5:4f:a5:24:b1: b5:8e:5d:9c:f9:0f:04:d7:05:14:b8:48:fb:2e:f3:47:81:cb: bf:fb:4d:b2:53:1f:a8:ed:3b:f9:db:db:0b:6a:00:94:cf:f2: 99:2d:fb:d1:30:91:72:c8:07:7d:f7:85:5e:9c:48:23:3e:2a: 8f:c3:93:d5:b9:e1:f2:3d:56:cf:59:cf:a4:83:f1:5a:f5:45: 69:28:c4:17:49:16:6d:2b:4a:39:fb:9a:c8:4d:7f:16:a3:58: 4b:a4:b2:53:a2:13:27:b5:6d:04:0c:3e:b1:7d:13:fb:2c:3b: cf:45:17:72:fb:5d:58:46:a2:90:f0:af:61:4d:52:18:bc:f4: 6b:c6:08:6f:08:37:60:be:a1:2c:e1:b1:c3:9e:da:39:ce:df: 56:a9:a9:f8:ce:b9:77:19:54:b5:b0:5f:1d:71:52:13:cb:cc: a0:dd:b1:b8:c0:3d:e4:49:b6:26:5f:57:d7:37:96:9c:4e:cb: 74:b7:57:57 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nkB42aRUunjytT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2RhMjM1M2EtNDA3MS00NmE3LTk1ZWYtMDhkYmFjY2FlYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMAe7jfM5NFWb796C67Ec310p71giITNOUo1 kNqvqyaGOlPexDeZT2U1m0iD7ujWDUKivDs7Q4KJtww81NYC7iPecSMb8aHBbdk8 yvBoVibQ6HnXNgIMpSc7RdbjMFK9R4rgIEtVJSgkXgQkcgxR8EvOakhlmQ93EcdJ IoL8vhU099g2OfvrIHvFSlecvE6/fkvx/ri+UuCyyHBwwMlrV5bbjFRLWmzZa7kc kPhjyssOS241mLZxPHyUMQZO79q6G7LbMf+pCcpiiIzbVAdfp55wkr2VPLh+3gKz 112bF8f4avCUw4qLhF0O9RRs3aREFG/1NavbkAM3032nWdj8AwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFe1FUR/OQLNQr7lVHHpLFltp2YOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjhlNjhjM2YtMjBlMC0z OGU2LTkwNTctYmY0Yjc0NzVkYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtUAwQA aPtcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIgPssLp6bSB+R75z6HFlZFL3A9H5gZxC7l4FO/ioYcc2V6H VmBvaEYQdcWHTxbKtKGzA3bSEt2yWI6W6i7Edbb2SKvlT6UksbWOXZz5DwTXBRS4 SPsu80eBy7/7TbJTH6jtO/nb2wtqAJTP8pkt+9EwkXLIB333hV6cSCM+Ko/Dk9W5 4fI9Vs9Zz6SD8Vr1RWkoxBdJFm0rSjn7mshNfxajWEukslOiEye1bQQMPrF9E/ss O89FF3L7XVhGopDwr2FNUhi89GvGCG8IN2C+oSzhscOe2jnO31apqfjOuXcZVLWw Xx1xUhPLzKDdsbjAPeRJtiZfV9c3lpxOy3S3V1c= -----END CERTIFICATE-----Generated at Thu Sep 24 04:06:24 2026 by rpki-client