$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa File: 3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json) Hash identifier: SFk3VAvbuCeLlGNLGkc8sKEexVyHb9PzqxKiuM4bwVM= Subject key identifier: BC:3E:68:CF:91:78:74:B0:71:C5:2A:D8:9A:15:88:BC:68:D5:79:92 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E11B430BDFC0B8681F5481E80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 9009 IP address blocks: 24.235.20.0/24 maxlen: 24 24.235.21.0/24 maxlen: 24 158.115.240.0/24 maxlen: 24 158.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:30:bd:fc:0b:86:81:f5:48:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=e5361b7a-b145-4bd5-b218-ce6a469ab9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:a1:1d:2e:d6:46:b0:cd:0d:07:9f:3c:57: 6e:77:ca:c7:a7:e4:bf:91:00:4a:be:29:dd:f4:bc: af:82:14:69:9d:35:d3:0a:10:e7:a5:c9:6f:e4:ec: b0:f6:4b:29:23:e9:85:39:3e:e6:5e:c2:fe:43:85: ec:34:bc:29:bf:a1:18:91:c1:29:bf:1c:ce:73:e8: 09:fb:2c:85:aa:a6:74:80:b4:e5:bd:b9:74:1b:71: 0b:27:4d:3a:c3:29:5c:56:0f:39:35:77:ab:e5:3a: f1:97:f2:70:3c:a2:80:66:59:cc:46:9b:c7:ac:de: 2b:be:b3:12:26:5c:0e:9f:3c:59:c6:c7:d9:c2:4d: 62:97:63:66:ff:d5:01:ad:f3:7f:e8:7a:92:33:2b: 9c:b7:36:b3:e9:a4:d3:9c:9b:0c:e0:f4:49:66:fd: 84:5b:9f:d1:49:0d:e4:43:d8:1b:4e:16:06:2e:ad: ba:99:0d:c0:97:34:51:9a:6c:51:63:46:f2:53:11: 06:bc:6b:4d:75:06:e5:f1:ef:0b:5c:30:02:1e:e0: 4e:6f:ae:6e:b4:03:e3:ca:b2:dc:95:3b:d6:08:be: b4:33:2c:8d:38:2f:bb:de:a0:c2:5b:52:9e:71:9f: 63:db:5b:e5:04:23:91:82:fe:0a:4f:fc:8b:88:99: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:68:CF:91:78:74:B0:71:C5:2A:D8:9A:15:88:BC:68:D5:79:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 24.235.20.0/23 158.115.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9e:ff:bd:af:cb:e2:6a:56:c9:5b:5c:95:68:c2:ca:d3:ec: 07:41:d1:6b:15:00:37:24:f8:65:af:c6:f6:7f:b7:fd:14:9d: e3:ea:8f:f5:e7:ca:04:f0:64:8d:1a:aa:5c:b7:75:66:0b:33: 52:c2:bb:22:47:59:74:45:cb:e5:34:7a:55:fb:4c:56:5f:81: be:ac:25:2d:e1:2a:c1:97:86:74:89:94:d5:cd:de:2c:ff:4e: ce:37:a6:ca:76:41:7c:4b:8e:28:63:06:4b:24:d0:5f:62:c7: 6e:bd:75:70:05:3b:ed:ca:0e:37:43:3c:5d:c4:a3:8c:69:55: b7:6a:b4:42:76:91:7e:3a:e9:c7:df:98:0a:e8:34:a1:47:a0: 7e:fd:80:dd:be:a9:8a:ad:a0:21:e4:3b:18:3e:64:0e:61:db: b3:6b:3c:6b:60:1c:d0:11:ae:ef:3b:1c:82:b3:fa:f9:1e:d0: 94:1f:b9:2d:a4:39:c3:ec:63:3c:bf:e1:b9:2e:a5:0d:2c:b3: 6b:b9:05:dd:77:e4:35:a8:10:44:a4:af:d8:88:b5:c7:86:2f: a1:61:84:c7:68:46:69:69:fa:f1:9d:cd:51:d4:9c:e7:24:bd: a8:1f:a0:bc:c8:7b:e2:86:e0:a0:67:5b:db:98:b6:a2:7d:48: d9:94:48:55 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4RtDC9/AuGgfVIHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk ZTUzNjFiN2EtYjE0NS00YmQ1LWIyMTgtY2U2YTQ2OWFiOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIOhHS7WRrDNDQefPFdud8rHp+S/kQBKvind 9LyvghRpnTXTChDnpclv5Oyw9kspI+mFOT7mXsL+Q4XsNLwpv6EYkcEpvxzOc+gJ +yyFqqZ0gLTlvbl0G3ELJ006wylcVg85NXer5Trxl/JwPKKAZlnMRpvHrN4rvrMS JlwOnzxZxsfZwk1il2Nm/9UBrfN/6HqSMyuctzaz6aTTnJsM4PRJZv2EW5/RSQ3k Q9gbThYGLq26mQ3AlzRRmmxRY0byUxEGvGtNdQbl8e8LXDACHuBOb65utAPjyrLc lTvWCL60MyyNOC+73qDCW1KecZ9j21vlBCORgv4KT/yLiJm5/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLw+aM+ReHSwccUq2JoViLxo1XmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2FlNWFmZDEtNGIyOC0z ODU1LWFlNmItOWJhNzE5MTU4ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBGOsUAwQB nnPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADue/72vy+JqVslbXJVowsrT7AdB0WsVADck+GWvxvZ/t/0U nePqj/XnygTwZI0aqly3dWYLM1LCuyJHWXRFy+U0elX7TFZfgb6sJS3hKsGXhnSJ lNXN3iz/Ts43psp2QXxLjihjBksk0F9ix269dXAFO+3KDjdDPF3Eo4xpVbdqtEJ2 kX466cffmAroNKFHoH79gN2+qYqtoCHkOxg+ZA5h27NrPGtgHNARru87HIKz+vke 0JQfuS2kOcPsYzy/4bkupQ0ss2u5Bd135DWoEESkr9iItceGL6FhhMdoRmlp+vGd zVHUnOckvagfoLzIe+KG4KBnW9uYtqJ9SNmUSFU= -----END CERTIFICATE-----Generated at Sat Jun 13 07:26:29 2026 by rpki-client