$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa File: cf1a0411-affa-31be-a610-7a5e46691069.roa (raw, json) Hash identifier: ryv4vxUqrMjFoHk+VKGBRTOkj+apchZfLGAcvfVcweQ= Subject key identifier: 0A:0C:3F:C7:5F:3E:05:E2:41:C4:BB:AB:9C:AD:50:FF:15:5C:25:51 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D8AC543D2AFA962209FE9F480 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 174 IP address blocks: 104.218.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:43:d2:af:a9:62:20:9f:e9:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=92b8eff4-7d9c-47ad-b5d1-4974ddc17b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:2d:e1:94:a0:08:44:ac:b2:d2:dd:b5:8c: 64:2c:ed:11:13:21:6d:2a:fe:c7:85:44:ad:a7:61: ae:b2:08:b3:3d:d2:44:a7:f3:33:7b:24:c7:64:f8: eb:3d:e2:a8:ea:b1:a5:7d:79:fa:a7:e7:27:66:fd: ed:50:ad:7f:8e:f7:a9:df:b8:cd:b8:3e:bc:33:f8: 89:01:21:09:db:6e:4f:41:3d:41:6c:e7:f6:75:66: 4d:95:35:2d:a4:d7:2d:6a:ad:32:3a:37:98:97:50: e4:cb:d0:12:07:ae:9a:e9:c3:8f:25:9c:ad:d9:d7: 4c:58:dc:6c:fc:d5:8f:9d:a9:8e:34:fd:56:f7:c5: 93:8d:fe:c2:39:6e:6b:be:76:5d:9d:02:e3:80:62: 2d:97:87:b3:82:99:56:49:64:88:57:44:cd:83:46: be:33:5f:29:57:d1:cc:73:1a:5a:f7:e2:34:63:a6: cc:fb:99:15:fe:5c:f8:90:07:c1:8a:86:9d:48:63: 1f:8d:8b:08:55:5f:b6:e5:81:fe:bc:8b:7e:b8:20: 61:c5:07:61:3d:fe:5d:43:e2:7d:e7:c2:53:7a:5d: ed:8e:e8:0e:27:bb:18:60:ea:2e:22:bf:68:04:9a: 0a:25:71:f0:fa:f1:6f:32:d7:36:9c:40:da:ab:ff: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:3F:C7:5F:3E:05:E2:41:C4:BB:AB:9C:AD:50:FF:15:5C:25:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:37:d2:f8:40:30:ab:ad:23:c3:24:3b:fc:d7:5a:61:c3:c5: 47:2f:41:47:dc:29:f9:b5:2e:6a:b2:be:54:98:8d:ae:ba:a8: 59:99:77:dc:45:06:fc:0a:16:ca:a7:47:6c:e1:cb:b3:e7:b5: 63:a6:c2:e1:89:58:ac:cf:2e:0e:b4:56:44:53:60:c5:a1:ac: c0:c3:b4:65:5b:e0:62:33:fa:1b:e0:40:2b:ce:06:b4:94:ee: 7e:77:94:6b:6d:79:1d:64:d2:19:d8:56:8b:39:91:fc:a7:a4: 10:95:f1:5c:11:0c:e5:d8:ad:28:d0:c0:29:cd:6e:7f:39:5c: 8f:4b:e1:b0:11:30:2d:01:d9:45:86:5b:37:13:39:ea:70:94: ab:75:9e:c2:1b:db:5d:ba:00:b0:84:fe:cb:3d:33:79:82:e2: 43:5e:2b:b2:85:b1:50:95:f8:7a:78:4d:eb:83:55:fd:02:41: 13:b2:9b:ba:bd:04:b1:ce:67:1e:c9:fc:71:56:dd:45:c2:ea: 8a:6a:16:fb:a5:a6:ef:57:3b:08:c6:18:04:69:6a:82:34:49: a6:17:f2:7e:af:41:83:4b:73:47:7a:9d:cc:8e:45:98:2b:a0: ad:c0:e4:1d:30:2f:89:a1:d7:36:5b:9b:91:59:ee:9a:c3:35: a0:b6:f9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUPSr6liIJ/p9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk OTJiOGVmZjQtN2Q5Yy00N2FkLWI1ZDEtNDk3NGRkYzE3YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWQt4ZSgCESsstLdtYxkLO0REyFtKv7HhUSt p2GusgizPdJEp/MzeyTHZPjrPeKo6rGlfXn6p+cnZv3tUK1/jvep37jNuD68M/iJ ASEJ225PQT1BbOf2dWZNlTUtpNctaq0yOjeYl1Dky9ASB66a6cOPJZyt2ddMWNxs /NWPnamONP1W98WTjf7COW5rvnZdnQLjgGItl4ezgplWSWSIV0TNg0a+M18pV9HM cxpa9+I0Y6bM+5kV/lz4kAfBioadSGMfjYsIVV+25YH+vIt+uCBhxQdhPf5dQ+J9 58JTel3tjugOJ7sYYOouIr9oBJoKJXHw+vFvMtc2nEDaq/8bnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoMP8dfPgXiQcS7q5ytUP8VXCVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2YxYTA0MTEtYWZmYS0z MWJlLWE2MTAtN2E1ZTQ2NjkxMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY30vhAMKutI8MkO/zXWmHDxUcvQUfcKfm1LmqyvlSYja66qFmZd9xF BvwKFsqnR2zhy7PntWOmwuGJWKzPLg60VkRTYMWhrMDDtGVb4GIz+hvgQCvOBrSU 7n53lGtteR1k0hnYVos5kfynpBCV8VwRDOXYrSjQwCnNbn85XI9L4bARMC0B2UWG WzcTOepwlKt1nsIb2126ALCE/ss9M3mC4kNeK7KFsVCV+Hp4TeuDVf0CQROym7q9 BLHOZx7J/HFW3UXC6opqFvulpu9XOwjGGARpaoI0SaYX8n6vQYNLc0d6ncyORZgr oK3A5B0wL4mh1zZbm5FZ7prDNaC2+fI= -----END CERTIFICATE-----Generated at Wed May 13 05:10:44 2026 by rpki-client