$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa File: f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json) Hash identifier: PLZ4+eF0+qW6e2FQ9DAj8OHy0jYqXugYN3VrAqRVeMo= Subject key identifier: 12:97:55:D2:06:21:01:4D:68:80:C4:9E:85:83:98:13:F9:84:E7:10 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F4975B86E53ECBE128B869600 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 104.251.80.0/24 maxlen: 24 104.251.85.0/24 maxlen: 24 104.251.89.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 158.115.224.0/24 maxlen: 24 158.115.225.0/24 maxlen: 24 158.115.226.0/24 maxlen: 24 158.115.227.0/24 maxlen: 24 158.115.248.0/24 maxlen: 24 158.115.249.0/24 maxlen: 24 158.115.250.0/24 maxlen: 24 158.115.251.0/24 maxlen: 24 172.98.185.0/24 maxlen: 24 206.127.218.0/24 maxlen: 24 207.230.96.0/23 maxlen: 23 207.230.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:b8:6e:53:ec:be:12:8b:86:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=07607b76-e3ba-4fa8-90e2-98b263610a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:e3:49:9b:1d:2b:50:11:f0:ea:52:f6:a3: 23:96:5d:af:90:d5:5b:bd:14:eb:2e:71:99:0f:8d: 27:60:2a:a7:43:4b:09:8e:89:3f:b4:2f:c6:0a:ca: 4d:cc:ce:db:35:e9:66:e9:0e:bc:56:5a:e3:0d:30: a7:1b:be:aa:ab:c6:47:c8:83:a6:ed:90:f5:9b:ff: 79:5a:8c:81:e3:98:6c:46:c9:52:7d:56:0e:98:e6: 15:b5:35:2c:7e:66:e8:80:2e:c5:28:24:8c:2f:8b: 29:f7:e2:6e:e5:06:5a:12:00:29:a8:de:aa:39:66: da:db:f4:e2:e3:61:f9:1f:ce:a0:01:9e:00:66:0a: 42:d4:df:22:83:c4:59:da:8a:ac:62:b2:54:24:2f: b1:bb:54:b4:e2:62:56:f6:e6:96:e9:24:83:54:12: ec:f3:cc:2a:ea:30:8e:8a:1e:b4:11:da:90:be:cf: 72:b9:66:2f:29:4d:43:d1:c6:8d:7f:99:ca:01:1c: 4a:21:47:cc:c3:e8:e4:37:6d:ac:5c:b5:22:37:3d: 90:04:fd:e2:c6:6f:c4:70:f5:79:b2:bb:a2:fc:54: ee:5e:d4:6c:18:be:a1:b5:36:56:6c:64:7f:e9:db: 12:2d:ab:42:6f:7e:6a:0c:7d:35:96:f6:54:dc:42: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:97:55:D2:06:21:01:4D:68:80:C4:9E:85:83:98:13:F9:84:E7:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.80.0/24 104.251.85.0/24 104.251.89.0/24 104.251.91.0/24 158.115.224.0/22 158.115.248.0/22 172.98.185.0/24 206.127.218.0/24 207.230.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:79:e4:a5:f6:09:24:70:97:14:f6:6e:d9:cb:9b:d6:b7:82: cd:8c:19:fe:e0:95:2e:25:f9:60:0a:37:6f:f8:4e:b2:50:6f: 32:66:32:3f:6a:a1:b6:aa:5f:94:fa:22:5a:50:bf:f3:ec:b6: c7:10:78:2a:59:42:ac:3b:a2:d7:20:4e:71:59:66:55:f4:d7: 46:7d:ad:4d:8b:fc:2e:f1:33:af:52:f7:7d:0f:5e:6e:4e:4c: 96:f8:a4:d8:5b:e5:1d:ca:fd:3e:d5:29:4e:6c:fd:33:cd:1d: e9:93:e6:23:86:2e:ed:4a:c2:79:e7:e7:56:40:11:1e:34:37: 3f:f4:c9:51:cc:25:28:a5:8d:74:fe:41:46:cd:da:3d:fd:36: 06:c4:56:2b:dd:b7:c2:df:9a:04:91:3a:71:0e:ba:21:06:1b: 9a:23:7d:5d:ab:a8:f4:ec:34:23:be:34:ee:9f:0b:7e:74:26: ec:d8:a5:51:f4:9c:c2:da:18:d5:70:fe:b3:f8:5d:42:d1:5f: aa:a6:d3:03:1a:86:d1:0b:c9:1a:b8:6d:81:93:46:71:fb:6f: 57:47:06:b1:78:01:bf:e3:3e:e8:52:5f:c1:92:77:dc:b3:28: 38:06:80:73:60:67:19:fb:f9:ac:33:4d:10:47:e8:2c:5c:c8: d4:c9:ca:3e -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWE9JdbhuU+y+EouGlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDc2MDdiNzYtZTNiYS00ZmE4LTkwZTItOThiMjYzNjEwYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZHjSZsdK1AR8OpS9qMjll2vkNVbvRTrLnGZ D40nYCqnQ0sJjok/tC/GCspNzM7bNelm6Q68VlrjDTCnG76qq8ZHyIOm7ZD1m/95 WoyB45hsRslSfVYOmOYVtTUsfmbogC7FKCSML4sp9+Ju5QZaEgApqN6qOWba2/Ti 42H5H86gAZ4AZgpC1N8ig8RZ2oqsYrJUJC+xu1S04mJW9uaW6SSDVBLs88wq6jCO ih60EdqQvs9yuWYvKU1D0caNf5nKARxKIUfMw+jkN22sXLUiNz2QBP3ixm/EcPV5 srui/FTuXtRsGL6htTZWbGR/6dsSLatCb35qDH01lvZU3EKouwIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFBKXVdIGIQFNaIDEnoWDmBP5hOcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjE1OWQ5NDktOWMwOS0z M2NmLThkZjItYWI5M2MyMjVhNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAaPtQAwQA aPtVAwQAaPtZAwQAaPtbAwQCnnPgAwQCnnP4AwQArGK5AwQAzn/aAwQCz+ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG955KX2CSRwlxT2btnLm9a3gs2MGf7glS4l+WAKN2/4TrJQbzJmMj9q obaqX5T6IlpQv/PstscQeCpZQqw7otcgTnFZZlX010Z9rU2L/C7xM69S930PXm5O TJb4pNhb5R3K/T7VKU5s/TPNHemT5iOGLu1Kwnnn51ZAER40Nz/0yVHMJSiljXT+ QUbN2j39NgbEVivdt8LfmgSROnEOuiEGG5ojfV2rqPTsNCO+NO6fC350JuzYpVH0 nMLaGNVw/rP4XULRX6qm0wMahtELyRq4bYGTRnH7b1dHBrF4Ab/jPuhSX8GSd9yz KDgGgHNgZxn7+awzTRBH6CxcyNTJyj4= -----END CERTIFICATE-----Generated at Sat Sep 26 13:35:18 2026 by rpki-client