$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa File: 3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json) Hash identifier: 3W0tnliiXqHQh664trBntjXn2H9NsOWHHEDhW8QFqPA= Subject key identifier: CC:BF:03:A6:53:A0:CF:37:9C:27:E1:0F:B0:D0:0D:1C:DC:13:C4:3B Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D316F701082DEAE8D9CB40780 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 24.235.20.0/24 maxlen: 24 24.235.21.0/24 maxlen: 24 158.115.240.0/24 maxlen: 24 158.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:70:10:82:de:ae:8d:9c:b4:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=c209526d-2099-4b4c-8979-7669e58a9780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:0d:70:c6:5f:07:d8:cc:8e:f4:f0:e6:f7: e6:c3:cc:50:b0:e0:0d:48:44:76:d8:f9:a2:45:fd: ec:98:6f:94:00:ab:ca:04:2f:fc:80:09:74:21:c8: 92:a9:e4:5c:f2:a0:d0:97:bb:bf:4f:91:f0:26:9a: 21:2c:7f:d8:9a:17:b9:d6:65:13:ff:d0:fb:24:a6: 85:a9:ee:8b:1b:76:fc:47:32:03:56:e4:00:31:76: e6:87:61:da:ab:1c:e1:e9:79:8f:a5:de:8a:cf:e4: 34:37:d0:77:9c:e0:e1:bc:11:23:ba:cf:89:a9:79: 42:30:8c:68:0d:6f:83:f2:07:d6:2f:0f:f9:47:f3: 66:1f:ce:8b:c3:56:6d:a4:97:57:67:77:02:8c:e4: 36:0c:77:de:dc:6b:fd:4f:d2:31:33:0f:ca:90:ea: 4e:28:fd:2e:5c:e0:73:0e:03:25:c5:18:49:b9:86: 84:48:d1:f6:80:59:2f:ca:5a:33:12:91:f9:53:7d: a2:c0:cf:d5:e9:d9:a9:aa:b6:e2:fc:ac:bc:f9:57: 0b:de:01:02:5b:06:1e:4e:c5:49:ad:83:d9:33:e1: 77:8b:28:6a:5e:f5:fa:c8:95:2f:ab:75:1b:3a:b9: 63:dc:89:04:f9:89:7b:1e:9e:3e:3f:85:0c:f2:22: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BF:03:A6:53:A0:CF:37:9C:27:E1:0F:B0:D0:0D:1C:DC:13:C4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 24.235.20.0/23 158.115.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b6:6d:16:dd:c1:42:73:f6:ed:09:91:c3:5b:66:35:ac:a1: 3e:e9:b1:08:1b:36:12:e2:1c:db:66:04:41:e5:3c:17:d4:e0: 98:a7:bc:b7:7b:72:89:e5:21:64:25:cc:25:d5:ea:97:a5:4a: 21:69:5d:98:29:6c:5b:c1:f2:b6:ef:c9:d1:58:eb:cc:a7:50: b3:08:88:7a:9a:08:74:35:67:b2:a1:be:27:ee:29:e4:5c:79: f4:4c:71:86:b4:a9:59:9f:9c:69:83:82:6f:89:39:eb:6b:85: 47:63:79:f2:4b:d1:97:cd:48:8f:b0:35:1d:e5:9e:3d:2b:5f: 0b:ce:ac:66:7f:90:f5:05:39:98:9f:65:7b:cd:dd:35:82:c8: 9a:f6:73:5a:02:b5:d4:d5:34:9c:fc:3b:63:0e:69:ee:33:9a: 0c:53:95:7a:b2:91:83:37:ca:3b:39:e3:4b:b4:fe:73:47:e2: 43:21:e8:da:61:62:3d:29:28:89:fe:f3:45:bd:8b:9e:66:45: e4:9e:81:6f:f5:0b:4e:4f:bc:b7:df:7a:20:2f:64:60:7c:7b: db:6f:95:38:e7:ef:f4:b0:67:ed:18:61:dd:e9:48:44:2d:31: 30:0e:59:7f:e8:45:c9:c3:a6:c1:a4:c8:16:4c:cd:75:0a:c4: e3:ca:33:c1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0xb3AQgt6ujZy0B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk YzIwOTUyNmQtMjA5OS00YjRjLTg5NzktNzY2OWU1OGE5NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSoNcMZfB9jMjvTw5vfmw8xQsOANSER22Pmi Rf3smG+UAKvKBC/8gAl0IciSqeRc8qDQl7u/T5HwJpohLH/Ymhe51mUT/9D7JKaF qe6LG3b8RzIDVuQAMXbmh2Haqxzh6XmPpd6Kz+Q0N9B3nODhvBEjus+JqXlCMIxo DW+D8gfWLw/5R/NmH86Lw1ZtpJdXZ3cCjOQ2DHfe3Gv9T9IxMw/KkOpOKP0uXOBz DgMlxRhJuYaESNH2gFkvylozEpH5U32iwM/V6dmpqrbi/Ky8+VcL3gECWwYeTsVJ rYPZM+F3iyhqXvX6yJUvq3UbOrlj3IkE+Yl7Hp4+P4UM8iLDsQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMy/A6ZToM83nCfhD7DQDRzcE8Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2FlNWFmZDEtNGIyOC0z ODU1LWFlNmItOWJhNzE5MTU4ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBGOsUAwQB nnPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGm2bRbdwUJz9u0JkcNbZjWsoT7psQgbNhLiHNtmBEHlPBfU 4JinvLd7conlIWQlzCXV6pelSiFpXZgpbFvB8rbvydFY68ynULMIiHqaCHQ1Z7Kh vifuKeRcefRMcYa0qVmfnGmDgm+JOetrhUdjefJL0ZfNSI+wNR3lnj0rXwvOrGZ/ kPUFOZifZXvN3TWCyJr2c1oCtdTVNJz8O2MOae4zmgxTlXqykYM3yjs540u0/nNH 4kMh6NphYj0pKIn+80W9i55mReSegW/1C05PvLffeiAvZGB8e9tvlTjn7/SwZ+0Y Yd3pSEQtMTAOWX/oRcnDpsGkyBZMzXUKxOPKM8E= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:42 2026 by rpki-client