$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json) Hash identifier: 4tGHGbACvJFsWvjjAMLeVc81aqMHfoxjAUUJHd5dKT8= Subject key identifier: 82:27:42:64:8D:E6:79:22:2E:43:F4:2D:FD:F7:9F:20:5F:24:F7:53 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D60E5059E468D3BAF71891880 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 212238 IP address blocks: 158.115.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:05:9e:46:8d:3b:af:71:89:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=bec47ca8-c98d-408d-b612-e4aa44e1bb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:f9:14:7a:5d:32:7f:36:1d:95:40:37:f7: cb:1c:a5:de:bc:f8:dc:10:a8:ac:71:aa:fb:2a:49: 79:fe:87:52:9e:53:5a:2a:20:2f:2f:34:46:c0:8a: 41:b2:db:71:4c:ed:93:ec:56:e1:e3:b3:39:ba:ee: 97:e9:a6:05:b0:94:2b:55:98:74:6c:31:e4:7e:ac: 65:d7:89:54:54:44:0f:d2:b3:a1:11:72:3d:c0:f1: 7f:98:04:df:b7:79:8f:ac:70:a6:0e:aa:a1:c2:c6: 71:d3:80:f3:84:78:ec:f2:07:5e:a7:55:ff:6e:44: bc:d2:95:55:40:a1:f7:9c:40:d2:b9:12:f5:1c:f5: 17:69:e1:82:1b:d6:f0:ca:23:94:0b:40:d4:01:9b: e4:45:71:b9:0b:29:bb:c1:2b:d3:f4:6e:98:1b:f4: 97:01:3c:42:72:d9:e9:7a:cb:04:fe:32:c9:a4:71: 39:cd:78:f5:37:fb:3a:fc:e0:06:12:b0:da:a0:be: c3:b8:44:7d:73:86:c5:78:3f:e9:66:8d:89:e1:17: a7:9c:4c:e7:4b:69:f1:d4:92:9e:bf:f9:b3:63:48: 6c:bc:20:91:93:b8:04:86:69:91:8c:b5:51:fd:d6: b2:0b:f5:72:28:92:cc:49:e2:76:70:e8:b7:ae:3b: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:27:42:64:8D:E6:79:22:2E:43:F4:2D:FD:F7:9F:20:5F:24:F7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9b:77:97:0e:5f:5f:af:54:2f:9b:94:7b:2e:3a:9d:cc:9c: ee:18:03:ce:a0:de:81:d1:d6:37:0f:8d:d1:c2:c5:7a:1e:07: ff:3c:19:37:c7:05:7f:40:0c:a1:c3:50:a9:0b:78:b4:8d:07: 4f:cf:4d:3e:1b:43:61:4b:e3:7f:9d:83:47:5a:52:ae:6e:69: 2d:a7:b0:04:62:44:45:e4:27:71:41:20:4c:36:a9:c5:c1:96: 68:8c:35:bc:04:70:54:ae:f3:09:9c:0c:c5:3e:eb:8d:e6:8b: 84:a9:ce:7a:f9:81:c9:28:c9:42:4f:69:bc:90:e5:a9:6d:8b: b8:a7:7f:21:cc:9e:d8:63:76:d3:3a:18:7f:ec:e2:d8:51:b2: 02:70:0a:83:d5:d3:75:f8:f2:25:73:30:c0:33:70:71:f2:ff: 29:30:91:7a:14:04:df:2e:8a:79:99:c5:b9:2a:96:c5:f7:00: b8:4a:d1:70:a3:a1:d2:b3:c8:9d:59:32:c1:81:af:2c:d7:5d: 91:a5:57:4b:e6:63:22:3f:3a:80:d8:90:a1:62:47:b5:71:62: c4:a0:86:45:a7:c1:af:2f:7b:6b:52:0b:57:8b:c2:56:66:a0: 6f:00:66:e4:22:96:5c:f2:d1:28:8c:ea:1a:79:00:95:3a:cb: 6e:ea:cd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QWeRo07r3GJGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YmVjNDdjYTgtYzk4ZC00MDhkLWI2MTItZTRhYTQ0ZTFiYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+n5FHpdMn82HZVAN/fLHKXevPjcEKiscar7 Kkl5/odSnlNaKiAvLzRGwIpBsttxTO2T7Fbh47M5uu6X6aYFsJQrVZh0bDHkfqxl 14lUVEQP0rOhEXI9wPF/mATft3mPrHCmDqqhwsZx04DzhHjs8gdep1X/bkS80pVV QKH3nEDSuRL1HPUXaeGCG9bwyiOUC0DUAZvkRXG5Cym7wSvT9G6YG/SXATxCctnp essE/jLJpHE5zXj1N/s6/OAGErDaoL7DuER9c4bFeD/pZo2J4RennEznS2nx1JKe v/mzY0hsvCCRk7gEhmmRjLVR/dayC/VyKJLMSeJ2cOi3rjuJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIInQmSN5nkiLkP0Lf33nyBfJPdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU3MjA3YWEtMzNiYS0z NTE3LWJhOTItZGJlYWU3NTZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFubd5cOX1+vVC+blHsuOp3MnO4YA86g3oHR1jcPjdHCxXoeB/88GTfH BX9ADKHDUKkLeLSNB0/PTT4bQ2FL43+dg0daUq5uaS2nsARiREXkJ3FBIEw2qcXB lmiMNbwEcFSu8wmcDMU+643mi4Spznr5gckoyUJPabyQ5alti7infyHMnthjdtM6 GH/s4thRsgJwCoPV03X48iVzMMAzcHHy/ykwkXoUBN8uinmZxbkqlsX3ALhK0XCj odKzyJ1ZMsGBryzXXZGlV0vmYyI/OoDYkKFiR7VxYsSghkWnwa8ve2tSC1eLwlZm oG8AZuQillzy0SiM6hp5AJU6y27qzdQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:24:31 2026 by rpki-client