$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa File: 85660311-3e9d-3819-9743-e8455877eb55.roa (raw, json) Hash identifier: CqXlVV/XodGwgf+KTHubHA0CrXO97YNh2Z6v0N04Fy8= Subject key identifier: 87:DD:7D:DD:DD:8F:57:52:00:74:AB:1D:DD:61:8D:72:8C:A0:C0:FC Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D9E5005971DDA435EE4166D00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 46261 IP address blocks: 104.218.195.0/24 maxlen: 24 104.251.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:05:97:1d:da:43:5e:e4:16:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=fdbb1a44-92d0-4a41-bda3-7f939f0419be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d3:d4:15:ad:b9:7d:f2:dd:40:ee:6a:45:48: 79:46:54:22:b0:0d:7c:1e:01:74:a3:02:f2:52:40: 4a:5d:20:d7:c5:1d:84:43:18:ca:7d:ad:12:7b:bc: 85:ab:3c:9a:cb:c8:9c:37:6c:13:6f:0b:26:95:a4: 0b:e2:8f:cb:0b:ec:c2:f9:83:13:c4:1d:8f:e1:1f: 6a:a9:65:70:80:1a:64:ce:5c:8b:88:14:bf:df:c9: 27:41:6a:b6:80:1a:f6:d7:c4:cb:2a:5a:4f:6a:10: b8:1b:1f:19:63:77:ca:89:60:c9:78:62:b5:9f:be: 4c:87:d8:02:ae:de:1c:a3:85:9f:87:96:cf:76:41: ff:21:b4:53:e2:5f:03:df:3f:ba:ca:d9:2e:12:4a: d5:11:b7:0f:5a:b4:d8:5e:1f:80:e2:67:f5:95:0d: 39:65:9e:8a:19:8b:af:c9:49:d8:f8:10:a1:3a:31: d9:8e:fa:2e:5c:df:ef:21:f1:ee:97:8f:b9:2e:9c: 66:51:1b:d3:08:45:ba:e7:d5:ae:a3:ab:9d:b7:e3: da:33:8d:1a:5e:d0:4a:2e:17:b8:c3:9a:4c:aa:d9: 31:2a:a4:e9:5e:3c:e0:f0:5a:d0:4a:2b:55:0f:ea: 3e:06:37:1f:1c:e1:ec:24:0a:fa:f7:e9:17:67:78: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DD:7D:DD:DD:8F:57:52:00:74:AB:1D:DD:61:8D:72:8C:A0:C0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.195.0/24 104.251.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:77:c5:c6:ca:63:38:79:b2:c6:5b:7c:1b:1f:0a:00:c7:c5: f3:8e:87:83:d9:c0:ec:90:2f:c8:dc:08:c8:40:6c:75:a8:7e: 42:e8:b2:25:56:04:81:86:db:6a:06:fb:3b:bd:fd:25:bf:2c: 2f:f2:cd:04:29:86:36:92:87:b1:fc:e4:40:ec:b5:17:59:b2: b5:cf:f2:c9:f5:8f:be:75:14:e9:fc:88:b4:3d:2d:60:0c:10: 4b:22:6e:4a:64:fb:e2:d7:34:8d:f0:89:36:8c:4e:81:7a:e2: 1a:10:21:9d:4c:d2:f6:50:c5:f3:77:e4:81:0e:64:a9:f4:e3: 4f:3a:83:c3:62:38:08:bc:30:e8:c4:58:77:0d:29:91:be:00: 4b:6b:d7:ea:a7:f5:95:c8:30:2a:80:63:0d:03:0a:b4:c4:27: 49:1a:39:a3:b2:c0:cd:97:df:dc:af:3c:00:ce:34:2d:38:04: 51:1e:30:11:7d:ac:ad:c7:fc:bf:d8:b4:49:49:f9:36:78:44: f8:b0:f6:b2:42:e7:b4:2e:f4:e2:4d:3c:1c:e7:00:90:bf:ba: 7f:df:f7:23:4f:f8:a5:cf:76:8f:31:99:9e:03:4d:d5:3b:a3: 30:af:7a:72:53:b0:d6:b5:98:7d:25:9b:de:4d:b7:0f:b0:2e: 99:09:d6:b6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2eUAWXHdpDXuQWbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZmRiYjFhNDQtOTJkMC00YTQxLWJkYTMtN2Y5MzlmMDQxOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktPUFa25ffLdQO5qRUh5RlQisA18HgF0owLy UkBKXSDXxR2EQxjKfa0Se7yFqzyay8icN2wTbwsmlaQL4o/LC+zC+YMTxB2P4R9q qWVwgBpkzlyLiBS/38knQWq2gBr218TLKlpPahC4Gx8ZY3fKiWDJeGK1n75Mh9gC rt4co4Wfh5bPdkH/IbRT4l8D3z+6ytkuEkrVEbcPWrTYXh+A4mf1lQ05ZZ6KGYuv yUnY+BChOjHZjvouXN/vIfHul4+5LpxmURvTCEW659Wuo6udt+PaM40aXtBKLhe4 w5pMqtkxKqTpXjzg8FrQSitVD+o+BjcfHOHsJAr69+kXZ3hdxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIfdfd3dj1dSAHSrHd1hjXKMoMD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU2NjAzMTEtM2U5ZC0z ODE5LTk3NDMtZTg0NTU4NzdlYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrDAwQA aPtWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACF3xcbKYzh5ssZbfBsfCgDHxfOOh4PZwOyQL8jcCMhAbHWo fkLosiVWBIGG22oG+zu9/SW/LC/yzQQphjaSh7H85EDstRdZsrXP8sn1j751FOn8 iLQ9LWAMEEsibkpk++LXNI3wiTaMToF64hoQIZ1M0vZQxfN35IEOZKn04086g8Ni OAi8MOjEWHcNKZG+AEtr1+qn9ZXIMCqAYw0DCrTEJ0kaOaOywM2X39yvPADONC04 BFEeMBF9rK3H/L/YtElJ+TZ4RPiw9rJC57Qu9OJNPBznAJC/un/f9yNP+KXPdo8x mZ4DTdU7ozCvenJTsNa1mH0lm95Ntw+wLpkJ1rY= -----END CERTIFICATE-----Generated at Wed May 13 04:59:01 2026 by rpki-client