$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa File: 18fb001a-970c-3cab-8188-d1568ca51609.roa (raw, json) Hash identifier: QmRgKh+Oge3CwTDAULr6w3yRVBS7+XufyFkmxsETWQA= Subject key identifier: B2:D6:E6:42:0A:0B:7B:A5:D3:D8:7A:78:1F:C2:D4:CD:6A:37:6D:A7 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F1467950FBB4A339A0427E400 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 18978 IP address blocks: 104.218.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:95:0f:bb:4a:33:9a:04:27:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=3858409d-0ce3-471f-b526-61052afb234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:30:cc:d4:6a:19:91:ac:ba:fc:07:0e:dc:94: e3:33:69:4c:92:78:47:fe:bd:0a:ca:3a:85:d0:f0: 39:1a:f4:0e:ab:a0:25:69:d0:ec:e7:7b:4b:fb:24: af:63:ba:32:ee:7c:c3:94:53:34:5e:99:89:ac:67: 1d:35:82:b5:19:8c:70:7c:14:e6:15:97:27:de:c2: f3:39:91:bf:09:c0:64:40:06:37:ed:78:9d:b2:3c: 5a:bb:a8:2e:a3:a0:6d:cd:e8:fe:9c:fc:c8:ad:fb: 99:fa:1f:00:d2:77:6b:fa:71:0b:f0:7e:1e:c2:55: 5d:f4:12:5c:24:38:c7:1d:3e:3b:fd:d2:70:87:77: 16:61:7e:65:ab:0d:09:32:67:1a:5b:86:22:98:1f: d1:81:0d:95:c7:af:bc:fa:19:62:2b:0c:65:3b:de: de:22:d1:ac:3e:f8:28:e2:12:4f:4e:4f:91:1e:4f: 2c:e3:05:99:dd:1d:ca:80:6e:2f:ec:09:67:0d:4e: 5f:24:c7:e5:7a:7a:0f:a5:43:7b:f4:9f:60:6c:2e: e6:66:4b:6a:f8:cf:05:35:9c:12:5f:3f:cc:18:c7: 1a:7d:f4:39:6b:1f:16:41:d6:1d:68:c2:7c:c8:3c: d9:d3:79:f8:42:2a:a5:43:41:ef:a2:88:3c:15:a6: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D6:E6:42:0A:0B:7B:A5:D3:D8:7A:78:1F:C2:D4:CD:6A:37:6D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:eb:52:31:aa:68:db:12:27:f0:e4:e2:e2:d5:c3:28:cf:fd: fa:1c:8e:71:5d:de:95:90:4f:c1:80:17:46:d2:97:31:d7:70: 55:39:ab:a6:e1:cb:c2:46:df:c1:f3:c7:d2:9e:65:82:89:87: 8e:d0:78:ca:d5:94:af:35:72:a5:65:40:d6:61:b1:31:57:41: 5c:eb:43:cb:2a:5a:08:5f:ed:d9:8e:6c:75:d2:59:22:e1:9e: de:32:0c:f3:28:05:66:5c:81:64:4d:a2:9e:71:67:48:3a:9e: fe:05:c3:72:4d:79:12:6e:03:f7:e4:49:74:b4:c0:39:60:7e: 92:47:1b:2d:da:de:23:7e:cd:78:7e:c7:37:72:b0:0c:ef:82: 4a:c1:47:3d:33:a6:62:b0:eb:20:e4:5f:bb:b1:65:0b:03:36: 67:9b:fb:9d:db:68:0e:1b:d5:5f:1d:3d:f9:d9:da:cc:41:10: 81:a7:70:80:69:eb:1e:22:be:31:a3:4c:10:7d:29:c9:5b:10: cb:3e:05:af:53:fa:04:2f:ec:d6:2d:fd:0f:ce:07:a5:0c:ff: 98:a4:91:8b:85:5b:de:fd:6b:38:a1:37:89:66:a4:58:73:d2: e4:7c:db:d2:36:fe:2f:b8:e4:57:88:f3:a8:fb:e5:0f:a9:30: f7:af:37:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5UPu0ozmgQn5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Mzg1ODQwOWQtMGNlMy00NzFmLWI1MjYtNjEwNTJhZmIyMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTDM1GoZkay6/AcO3JTjM2lMknhH/r0KyjqF 0PA5GvQOq6AladDs53tL+ySvY7oy7nzDlFM0XpmJrGcdNYK1GYxwfBTmFZcn3sLz OZG/CcBkQAY37Xidsjxau6guo6Btzej+nPzIrfuZ+h8A0ndr+nEL8H4ewlVd9BJc JDjHHT47/dJwh3cWYX5lqw0JMmcaW4YimB/RgQ2Vx6+8+hliKwxlO97eItGsPvgo 4hJPTk+RHk8s4wWZ3R3KgG4v7AlnDU5fJMflenoPpUN79J9gbC7mZktq+M8FNZwS Xz/MGMcaffQ5ax8WQdYdaMJ8yDzZ03n4QiqlQ0Hvoog8FaaOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLW5kIKC3ul09h6eB/C1M1qN22nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMThmYjAwMWEtOTcwYy0z Y2FiLTgxODgtZDE1NjhjYTUxNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnrUjGqaNsSJ/Dk4uLVwyjP/focjnFd3pWQT8GAF0bSlzHXcFU5q6bh y8JG38Hzx9KeZYKJh47QeMrVlK81cqVlQNZhsTFXQVzrQ8sqWghf7dmObHXSWSLh nt4yDPMoBWZcgWRNop5xZ0g6nv4Fw3JNeRJuA/fkSXS0wDlgfpJHGy3a3iN+zXh+ xzdysAzvgkrBRz0zpmKw6yDkX7uxZQsDNmeb+53baA4b1V8dPfnZ2sxBEIGncIBp 6x4ivjGjTBB9KclbEMs+Ba9T+gQv7NYt/Q/OB6UM/5ikkYuFW979azihN4lmpFhz 0uR829I2/i+45FeI86j75Q+pMPevN1E= -----END CERTIFICATE-----Generated at Tue Sep 22 17:42:19 2026 by rpki-client