$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa File: d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json) Hash identifier: qhCiywmOvuTJ4wF2ZXoVDVLW+YXmkG3M1LFQxITyNck= Subject key identifier: 69:EC:AD:1A:3D:CE:3F:01:0E:9A:3E:8E:52:FE:63:49:38:44:CC:43 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584FB6710BD229B247B7061BAB20 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 23470 IP address blocks: 104.251.85.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:0b:d2:29:b2:47:b7:06:1b:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=d82955d1-d4e9-446b-84b2-1c329317ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:d7:1f:f9:1b:5e:1f:9e:6a:e4:b1:ba:d6: 48:66:e9:2a:fd:20:c0:60:b0:bc:8e:76:19:4c:98: 98:d4:62:5f:e8:91:1e:16:67:28:0b:70:df:55:d3: 5a:8f:9d:fd:a7:ae:8e:8a:e7:76:b4:d9:ca:92:ee: e8:5b:43:2f:ab:7a:3a:08:6d:fd:ad:56:aa:71:54: 96:29:00:da:1a:20:2f:e8:48:1e:78:d6:a4:de:8a: b3:fc:a5:f7:6d:81:bf:07:18:4a:4b:d7:55:ce:d4: 8d:9d:01:7b:41:41:2d:58:56:3d:cb:99:89:d1:b4: 13:0d:3c:20:56:3a:5a:81:ce:98:e6:d4:cd:3e:67: 7d:9b:e0:32:37:17:55:9c:10:a2:4d:b2:17:b2:65: 16:16:ea:4c:fd:0e:d2:e8:0f:9c:64:b0:27:8e:60: 81:5a:64:5b:d4:8a:26:28:29:1f:d0:8f:ad:d1:f2: d2:00:2c:ee:3c:91:87:6e:19:ea:dd:42:ed:b5:ac: 5b:08:76:e9:a6:17:68:52:d0:d3:dc:ff:79:9b:e2: 56:e4:82:82:b5:f1:dd:96:f4:3c:b9:dc:ff:ee:f4: 1b:74:01:68:46:ea:45:f8:06:35:cd:25:0f:f4:ea: 6c:f5:fe:1b:73:bf:b5:c0:f5:ea:c7:3c:86:a7:50: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:AD:1A:3D:CE:3F:01:0E:9A:3E:8E:52:FE:63:49:38:44:CC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.85.0/24 104.251.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e9:fd:2a:52:09:e7:0f:e3:65:c6:5c:87:95:7a:18:5f:36: f2:32:ed:c6:a9:2f:1c:67:f9:42:c7:64:6f:68:35:66:08:4c: 5a:fa:0a:0d:e5:fa:f9:4a:32:08:cf:14:4c:aa:6c:9f:1e:82: 0e:0b:e7:2b:bb:4b:f4:9f:b6:80:86:f6:43:ef:31:e5:74:31: b4:14:99:16:62:f2:dc:a2:fa:c3:ff:b6:87:30:c6:28:00:e9: 4b:d3:2a:6a:b0:f1:31:2f:2b:98:4b:cc:a1:43:40:8c:ac:b0: b7:18:6f:c9:88:28:b1:c1:1a:e8:90:60:b6:c3:5e:c7:56:33: d0:02:1f:06:39:6d:3c:fd:65:79:68:f2:41:06:89:6f:3d:50: 18:28:16:b5:29:cc:29:c8:00:10:dd:f4:23:81:cf:31:aa:c5: 60:00:24:89:a5:a6:75:d4:2f:10:9c:9c:a8:17:fd:af:4e:b2: 32:47:dc:ac:e8:7c:f3:26:51:41:fe:5e:0b:af:22:eb:36:9f: 25:2c:71:6c:e2:b7:56:17:6f:3f:d9:20:f1:3d:0b:8f:26:af: d3:d0:2a:e8:27:f7:f0:cd:87:bb:fc:40:a3:d9:1b:c6:8a:b0: 51:ad:55:15:6c:79:71:49:3f:08:9f:d2:77:de:59:80:2e:7d: 31:98:27:5d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+2cQvSKbJHtwYbqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZDgyOTU1ZDEtZDRlOS00NDZiLTg0YjItMWMzMjkzMTdmZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1/XH/kbXh+eauSxutZIZukq/SDAYLC8jnYZ TJiY1GJf6JEeFmcoC3DfVdNaj539p66Oiud2tNnKku7oW0Mvq3o6CG39rVaqcVSW KQDaGiAv6EgeeNak3oqz/KX3bYG/BxhKS9dVztSNnQF7QUEtWFY9y5mJ0bQTDTwg Vjpagc6Y5tTNPmd9m+AyNxdVnBCiTbIXsmUWFupM/Q7S6A+cZLAnjmCBWmRb1Iom KCkf0I+t0fLSACzuPJGHbhnq3ULttaxbCHbpphdoUtDT3P95m+JW5IKCtfHdlvQ8 udz/7vQbdAFoRupF+AY1zSUP9Ops9f4bc7+1wPXqxzyGp1BlvQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGnsrRo9zj8BDpo+jlL+Y0k4RMxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDhkYzg2Y2ItMTYxZi0z OTk1LThkOTktZGQyNDBkZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtVAwQA aPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABjp/SpSCecP42XGXIeVehhfNvIy7capLxxn+ULHZG9oNWYI TFr6Cg3l+vlKMgjPFEyqbJ8egg4L5yu7S/SftoCG9kPvMeV0MbQUmRZi8tyi+sP/ tocwxigA6UvTKmqw8TEvK5hLzKFDQIyssLcYb8mIKLHBGuiQYLbDXsdWM9ACHwY5 bTz9ZXlo8kEGiW89UBgoFrUpzCnIABDd9COBzzGqxWAAJImlpnXULxCcnKgX/a9O sjJH3KzofPMmUUH+XguvIus2nyUscWzit1YXbz/ZIPE9C48mr9PQKugn9/DNh7v8 QKPZG8aKsFGtVRVseXFJPwif0nfeWYAufTGYJ10= -----END CERTIFICATE-----Generated at Thu Nov 5 15:16:27 2026 by rpki-client