$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa File: bf485a80-ca0b-337a-ab13-dda71416c121.roa (raw, json) Hash identifier: rTkHPdcatFnSpdQz2WeVmEjr9P5MqyFnASoWTLDTC+8= Subject key identifier: D0:42:81:1B:CE:22:84:25:72:4F:1B:1B:37:51:2C:D5:2C:C2:4F:DE Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584CD2A1EBDCE856CD81333D79D8 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa Signing time: Wed 11 Feb 2026 02:00:32 +0000 ROA not before: Wed 11 Feb 2026 02:00:32 +0000 ROA not after: Tue 12 May 2026 01:00:32 +0000 asID: 9009 IP address blocks: 207.230.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:a1:eb:dc:e8:56:cd:81:33:3d:79:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 11 02:00:32 2026 GMT Not After : May 12 01:00:32 2026 GMT Subject: CN=748f3b0a-c6ab-41aa-bc1d-2a7da321b0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:e5:f3:5f:f0:5c:57:67:a6:a5:ec:42:bc: 76:c6:9a:0e:20:2e:0e:2d:1d:37:24:0f:03:44:23: 27:5a:01:97:14:97:ca:dc:87:4f:d3:78:b7:a5:0c: b7:d4:5b:10:f2:0d:62:5e:ae:67:2c:ab:99:28:02: b6:e6:51:5f:14:95:b3:0a:e4:de:1c:f0:aa:48:9c: a9:cc:00:3a:22:ad:1d:f1:1b:ad:00:9f:1a:47:a7: 14:8b:47:e0:31:00:84:65:ce:3f:65:e7:41:c2:00: 9b:d4:06:ee:f4:37:4b:e8:15:f6:62:70:2d:b0:2c: ad:3d:9d:9c:24:66:7c:0a:58:40:05:e9:ca:d7:1c: a3:ea:82:71:f3:65:6e:0b:53:2b:02:1c:45:77:8d: 7f:d3:f5:2f:f0:99:af:86:9b:b1:90:b6:91:b2:78: b2:ab:c0:14:5b:e8:f0:34:bf:e5:7f:41:b1:fd:0a: 55:70:74:24:7c:46:60:96:8c:b7:6c:7c:f8:b1:e2: 04:dc:f8:3a:60:74:a9:b4:0a:42:7f:91:35:c2:98: 6e:24:d1:33:d6:d9:6b:18:64:73:60:ce:97:62:99: dd:2d:06:53:46:10:d0:b6:ce:11:b1:57:0f:70:42: 08:b9:c6:4a:82:76:79:ad:a8:ee:2a:ff:7f:cc:63: c0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:42:81:1B:CE:22:84:25:72:4F:1B:1B:37:51:2C:D5:2C:C2:4F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1c:2d:ab:ce:ee:e7:6d:70:22:fd:72:86:02:1a:c3:3d:5d: 1a:18:ea:b4:ff:ce:cd:7f:0d:a7:13:3f:e0:c7:e7:78:fc:65: c0:cd:f3:6a:ee:93:20:da:ec:4f:30:95:e1:f1:ec:ee:c6:b7: 3e:5d:86:a0:4b:8c:6f:07:a6:4c:fe:d4:fe:ba:5c:7a:03:ce: 8a:88:df:e7:51:9a:a3:dc:07:c3:1d:04:37:31:2e:5f:dd:40: 64:11:5b:4f:80:87:e0:d7:8e:f7:85:54:29:20:69:ea:7c:49: 66:cb:7b:72:ab:d2:f1:9a:e8:e9:72:e5:34:09:d3:f7:85:bf: fc:d1:cc:47:02:d6:2c:72:10:90:57:48:83:f1:bd:7a:0d:5d: 5c:82:aa:88:56:34:77:b2:e8:70:4f:af:3d:06:31:8f:a3:29: 05:d9:0e:00:31:38:24:3a:84:dc:46:4a:da:48:5c:b0:bc:d7: 83:9d:67:ef:ce:c9:d4:60:98:4f:f3:da:16:29:7a:c9:f2:49: 9b:0d:b0:2d:3f:f5:4f:09:0a:74:40:16:3f:5c:be:d4:7b:e2: e0:44:31:31:b1:d4:c9:e9:68:31:44:71:c8:23:3a:50:46:0f: e6:22:11:69:50:51:82:9b:d0:8a:03:a0:7e:7d:3d:06:76:6c: 07:0c:48:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoevc6FbNgTM9edgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk NzQ4ZjNiMGEtYzZhYi00MWFhLWJjMWQtMmE3ZGEzMjFiMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkbl81/wXFdnpqXsQrx2xpoOIC4OLR03JA8D RCMnWgGXFJfK3IdP03i3pQy31FsQ8g1iXq5nLKuZKAK25lFfFJWzCuTeHPCqSJyp zAA6Iq0d8RutAJ8aR6cUi0fgMQCEZc4/ZedBwgCb1Abu9DdL6BX2YnAtsCytPZ2c JGZ8ClhABenK1xyj6oJx82VuC1MrAhxFd41/0/Uv8JmvhpuxkLaRsniyq8AUW+jw NL/lf0Gx/QpVcHQkfEZgloy3bHz4seIE3Pg6YHSptApCf5E1wphuJNEz1tlrGGRz YM6XYpndLQZTRhDQts4RsVcPcEIIucZKgnZ5rajuKv9/zGPAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBCgRvOIoQlck8bGzdRLNUswk/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmY0ODVhODAtY2EwYi0z MzdhLWFiMTMtZGRhNzE0MTZjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz+Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIccLavO7udtcCL9coYCGsM9XRoY6rT/zs1/DacTP+DH53j8ZcDN82ru kyDa7E8wleHx7O7Gtz5dhqBLjG8Hpkz+1P66XHoDzoqI3+dRmqPcB8MdBDcxLl/d QGQRW0+Ah+DXjveFVCkgaep8SWbLe3Kr0vGa6Oly5TQJ0/eFv/zRzEcC1ixyEJBX SIPxvXoNXVyCqohWNHey6HBPrz0GMY+jKQXZDgAxOCQ6hNxGStpIXLC814OdZ+/O ydRgmE/z2hYpesnySZsNsC0/9U8JCnRAFj9cvtR74uBEMTGx1MnpaDFEccgjOlBG D+YiEWlQUYKb0IoDoH59PQZ2bAcMSL0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:04:34 2026 by rpki-client