$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa File: bf485a80-ca0b-337a-ab13-dda71416c121.roa (raw, json) Hash identifier: sVcV17g6OvoLyivbs4XY+SZrGjz3C4q5Za8iWpsh6I0= Subject key identifier: 52:4F:CC:54:B0:29:88:AD:09:53:09:01:A5:0D:0B:E0:7A:A5:82:BC Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584DB340331796A44710F5D4D0C8 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa Signing time: Sat 02 May 2026 13:00:31 +0000 ROA not before: Sat 02 May 2026 13:00:31 +0000 ROA not after: Fri 31 Jul 2026 13:00:31 +0000 asID: 9009 IP address blocks: 207.230.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b3:40:33:17:96:a4:47:10:f5:d4:d0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 2 13:00:31 2026 GMT Not After : Jul 31 13:00:31 2026 GMT Subject: CN=4218389c-4909-417b-91ca-3f17e9dcd10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:66:43:e6:f6:e6:d1:3d:e4:6d:41:16:ed: f8:8c:f1:01:a3:8a:6e:2f:f4:2e:72:e9:62:5a:2c: ab:77:f2:5d:a2:fc:5d:b2:09:07:ad:af:02:94:8c: 0d:0f:0b:a3:e5:4b:e6:50:9a:3e:b9:bb:42:28:43: 46:91:c6:51:78:cd:d7:db:e6:f7:c8:3f:94:99:b1: c5:1b:78:00:f6:4b:d5:39:65:5b:ca:1b:78:8d:50: 3b:b1:19:2b:c1:14:c2:b7:7d:88:5a:52:55:f5:23: 6b:2a:01:9c:72:4b:52:6c:53:ea:1a:eb:73:c6:cf: a7:40:90:48:79:3a:aa:2b:48:60:57:87:07:f9:13: f4:b9:9a:09:6f:67:21:1a:c2:1d:1b:cc:55:52:06: 1d:c8:b0:33:ae:a0:2e:ca:1f:8b:20:bc:fe:fa:0e: 59:77:83:8e:dd:0b:c9:dc:ea:2a:59:f7:11:53:9a: 84:07:ea:cc:63:35:78:60:51:a9:b9:27:fe:85:35: 53:5b:4b:f9:be:f3:e0:5e:46:77:e5:06:ee:76:e7: 46:93:3c:cc:e1:13:d5:bb:8c:6c:ce:b1:53:ea:a4: c6:89:4e:de:fb:89:50:dd:08:fc:b6:3d:76:6b:38: b9:29:14:c5:a1:08:72:f7:98:b8:cf:81:b9:06:92: e9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4F:CC:54:B0:29:88:AD:09:53:09:01:A5:0D:0B:E0:7A:A5:82:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:af:14:34:a4:4e:13:a3:76:09:54:e8:b0:c3:12:99:4e:b8: 88:8d:72:f9:31:3a:68:13:c2:78:9d:98:02:f5:1c:b4:5d:48: 45:c8:9b:89:2e:3b:38:a9:3b:91:2b:10:48:06:31:10:29:8f: f4:b2:2a:d0:67:73:28:94:41:58:92:7e:a1:d4:cb:4f:71:d9: 98:50:8e:a1:a2:38:2f:8d:51:1d:b3:4e:03:d1:8f:01:67:68: 2e:19:eb:21:d7:28:e2:2e:21:d9:c1:bc:38:22:ac:99:b8:73: fc:a2:40:d4:83:ca:54:e2:68:00:63:dd:b0:cb:c4:87:36:db: 78:79:07:f6:5b:a6:03:94:d5:69:53:ba:3d:29:11:fb:c6:74: d0:ad:80:be:95:a9:b8:ac:e0:73:5f:b6:81:43:1f:70:af:17: 23:9f:39:2d:0e:26:32:a8:49:7a:6f:55:6f:63:a2:f6:ee:69: ae:09:cf:ff:bb:49:8f:e8:0e:58:06:c7:cb:94:cd:72:a8:ba: 8b:7f:79:51:fd:87:37:14:82:40:2a:13:c9:17:4b:bb:bd:24: 81:2b:20:49:ba:96:1d:03:e5:a1:76:96:fe:94:6a:76:0a:d0: 63:6a:ef:96:1e:ac:ce:4b:50:ff:52:50:d0:ef:a6:6b:9a:6f: 66:48:69:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2zQDMXlqRHEPXU0MgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDUwMjEzMDAzMVoXDTI2MDczMTEzMDAzMVowLzEtMCsGA1UEAxMk NDIxODM4OWMtNDkwOS00MTdiLTkxY2EtM2YxN2U5ZGNkMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXJmQ+b25tE95G1BFu34jPEBo4puL/Quculi Wiyrd/JdovxdsgkHra8ClIwNDwuj5UvmUJo+ubtCKENGkcZReM3X2+b3yD+UmbHF G3gA9kvVOWVbyht4jVA7sRkrwRTCt32IWlJV9SNrKgGccktSbFPqGutzxs+nQJBI eTqqK0hgV4cH+RP0uZoJb2chGsIdG8xVUgYdyLAzrqAuyh+LILz++g5Zd4OO3QvJ 3OoqWfcRU5qEB+rMYzV4YFGpuSf+hTVTW0v5vvPgXkZ35QbududGkzzM4RPVu4xs zrFT6qTGiU7e+4lQ3Qj8tj12azi5KRTFoQhy95i4z4G5BpLpiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJPzFSwKYitCVMJAaUNC+B6pYK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmY0ODVhODAtY2EwYi0z MzdhLWFiMTMtZGRhNzE0MTZjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz+Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyvFDSkThOjdglU6LDDEplOuIiNcvkxOmgTwnidmAL1HLRdSEXIm4ku OzipO5ErEEgGMRApj/SyKtBncyiUQViSfqHUy09x2ZhQjqGiOC+NUR2zTgPRjwFn aC4Z6yHXKOIuIdnBvDgirJm4c/yiQNSDylTiaABj3bDLxIc223h5B/ZbpgOU1WlT uj0pEfvGdNCtgL6Vqbis4HNftoFDH3CvFyOfOS0OJjKoSXpvVW9jovbuaa4Jz/+7 SY/oDlgGx8uUzXKouot/eVH9hzcUgkAqE8kXS7u9JIErIEm6lh0D5aF2lv6UanYK 0GNq75YerM5LUP9SUNDvpmuab2ZIaao= -----END CERTIFICATE-----Generated at Wed May 13 07:17:42 2026 by rpki-client