$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa File: c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa (raw, json) Hash identifier: 0JLoTNmHfMS5xb+iO0NUnBdPuesNZP2MXRL2/5MMNm8= Subject key identifier: 89:59:76:17:08:27:E5:ED:F6:22:4D:D9:DA:AE:1D:A8:03:AD:CD:01 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D237A1060C8F3AD000C524480 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 104.251.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:10:60:c8:f3:ad:00:0c:52:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8094e463-f342-4508-88ad-104f4ff4b452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:07:17:f1:63:4f:8b:29:53:25:e9:3a:24: 40:7f:ef:f5:a2:82:ef:87:fc:36:07:8f:e0:c0:36: 68:c1:85:0f:91:2f:04:80:0a:f2:74:e5:9c:14:a3: e7:98:a3:ec:21:6c:ea:a8:a7:66:d6:57:6e:54:54: 9a:18:d8:2f:b3:9e:11:73:62:e6:4d:33:45:9a:98: cf:a6:54:af:ca:b5:a9:8b:ee:a1:b6:54:34:ac:fb: 2a:f7:5b:23:47:01:54:90:66:1a:55:f0:ef:b0:f7: 04:dc:94:5c:52:2b:35:a4:a7:74:42:06:d5:56:87: 40:7d:8d:c0:15:39:1c:4c:14:01:80:33:4c:a9:ef: f4:1d:9d:a6:d6:f6:93:44:04:58:8b:d1:35:23:e9: ff:14:ed:c1:c9:31:1f:62:e1:de:d7:96:ea:b7:fa: a4:af:85:cd:50:06:10:32:6b:e0:48:96:7e:58:69: 05:ea:30:15:48:d7:fa:3a:b0:f5:8f:34:0c:9e:21: 87:2b:83:9a:55:0b:8b:9b:2c:7b:e6:5f:5f:a9:0d: 8f:90:0f:03:30:fb:9b:bb:87:3a:b4:e3:8a:b8:f5: f8:b3:2f:46:82:08:1a:62:fe:0a:21:05:6a:46:e2: 84:66:21:eb:a9:9a:18:f9:bc:78:e2:ab:f9:cd:c8: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:59:76:17:08:27:E5:ED:F6:22:4D:D9:DA:AE:1D:A8:03:AD:CD:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:79:9e:89:47:cd:75:cd:af:88:16:d7:f4:e1:b1:93:ef:10: 75:d1:6b:54:63:7e:f1:13:0d:7b:1e:dc:10:07:37:7a:33:1c: 4f:7b:38:ea:09:99:22:fa:1e:57:26:13:3e:6e:75:94:63:27: 12:7d:b0:9d:dd:d9:b3:5a:de:83:89:6c:7f:3f:c0:4b:37:c5: 0e:6a:a5:a9:37:93:cb:6d:d1:1d:8e:04:42:3d:ac:53:57:5d: 88:bb:f1:30:6b:8c:da:16:b7:a1:20:b5:0c:74:4f:47:b6:b8: d1:44:52:ea:f5:f3:07:b8:a2:28:34:55:c2:52:c3:c0:83:8a: 8f:17:5f:28:26:b4:f9:bf:91:7f:0b:74:b8:83:77:33:0b:17: f0:25:8a:d0:0f:8d:6b:28:e0:2c:c1:16:4a:d3:9d:03:0d:bd: 1a:12:47:3a:74:b6:be:cc:a5:8f:14:b3:10:fd:fa:dd:f9:7c: 02:ad:e2:8c:e5:61:82:ba:18:9d:43:c3:52:df:c1:46:72:15: a2:f2:bd:7b:8c:23:fd:5f:75:c2:55:aa:c7:88:20:2e:0d:e4: 44:7f:8c:81:a6:82:f2:90:7f:79:cc:c6:75:1b:a8:26:b5:0f: 10:e9:89:36:15:0e:ca:8a:e9:f0:a5:a6:34:41:08:36:c0:96: 7d:94:ec:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehBgyPOtAAxSRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODA5NGU0NjMtZjM0Mi00NTA4LTg4YWQtMTA0ZjRmZjRiNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/oHF/FjT4spUyXpOiRAf+/1ooLvh/w2B4/g wDZowYUPkS8EgArydOWcFKPnmKPsIWzqqKdm1lduVFSaGNgvs54Rc2LmTTNFmpjP plSvyrWpi+6htlQ0rPsq91sjRwFUkGYaVfDvsPcE3JRcUis1pKd0QgbVVodAfY3A FTkcTBQBgDNMqe/0HZ2m1vaTRARYi9E1I+n/FO3ByTEfYuHe15bqt/qkr4XNUAYQ MmvgSJZ+WGkF6jAVSNf6OrD1jzQMniGHK4OaVQuLmyx75l9fqQ2PkA8DMPubu4c6 tOOKuPX4sy9GgggaYv4KIQVqRuKEZiHrqZoY+bx44qv5zciW6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlZdhcIJ+Xt9iJN2dquHagDrc0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYzgxNDI2OTEtYzY2Yy0z ZDNmLWE5MDktNTNlM2QxZWVhM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF5nolHzXXNr4gW1/ThsZPvEHXRa1RjfvETDXse3BAHN3ozHE97OOoJ mSL6HlcmEz5udZRjJxJ9sJ3d2bNa3oOJbH8/wEs3xQ5qpak3k8tt0R2OBEI9rFNX XYi78TBrjNoWt6EgtQx0T0e2uNFEUur18we4oig0VcJSw8CDio8XXygmtPm/kX8L dLiDdzMLF/AlitAPjWso4CzBFkrTnQMNvRoSRzp0tr7MpY8UsxD9+t35fAKt4ozl YYK6GJ1Dw1LfwUZyFaLyvXuMI/1fdcJVqseIIC4N5ER/jIGmgvKQf3nMxnUbqCa1 DxDpiTYVDsqK6fClpjRBCDbAln2U7I0= -----END CERTIFICATE-----Generated at Thu Mar 26 09:21:52 2026 by rpki-client