$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa File: f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json) Hash identifier: H6RL3fosZReJSX1HQLRje8hA1LKnfxZQXFlKv6TXaFk= Subject key identifier: F7:97:7C:5D:1A:03:48:52:48:B8:A7:19:B0:9F:A0:E5:C4:5D:8B:0C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584CF4222D9D3B4449B210906B00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 5650 IP address blocks: 104.251.80.0/24 maxlen: 24 104.251.85.0/24 maxlen: 24 104.251.89.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 158.115.224.0/24 maxlen: 24 158.115.225.0/24 maxlen: 24 158.115.226.0/24 maxlen: 24 158.115.227.0/24 maxlen: 24 158.115.248.0/24 maxlen: 24 158.115.249.0/24 maxlen: 24 158.115.250.0/24 maxlen: 24 158.115.251.0/24 maxlen: 24 172.98.185.0/24 maxlen: 24 206.127.218.0/24 maxlen: 24 207.230.96.0/23 maxlen: 23 207.230.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:2d:9d:3b:44:49:b2:10:90:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=ba8bd6c8-e2d2-47e3-9bd2-cbb7805a3e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:17:37:ee:22:0e:01:60:d0:fd:f7:51:06: 82:84:51:28:74:d0:3e:6d:f8:24:2d:9f:c4:03:5f: 4e:96:4a:4d:53:0f:45:d0:b4:e0:a0:d8:34:66:98: cc:9a:0d:3d:0a:ea:b3:98:f0:b0:b6:64:81:ef:14: 82:fe:2d:d6:20:57:12:17:1e:41:1f:c7:f2:3f:5f: c0:f2:32:fb:aa:c6:a5:84:6f:ce:7d:6c:f9:1a:1b: d7:09:42:57:9b:8d:98:dc:fb:93:31:a0:d4:4d:17: 3e:3e:80:93:e7:88:85:1b:a6:eb:ac:15:e8:b1:1d: 49:a5:34:40:dc:96:8c:83:af:22:37:86:38:58:bb: f0:79:1b:80:d9:fd:54:6e:f6:28:bc:57:dd:ab:6d: d6:3d:9a:8c:ce:4c:7b:68:5a:d8:8d:82:75:a2:2f: d0:bb:e5:c4:05:b7:a9:08:8c:65:94:07:af:49:2e: b7:a8:33:94:c1:6a:53:ff:a4:c9:15:d3:e6:87:4e: 0d:32:6f:a8:d6:d9:1e:c6:dd:dc:b4:20:ef:3e:ad: 2d:4f:35:a6:34:43:19:dd:3f:48:66:a2:45:e0:23: 2b:74:29:44:e6:ee:3d:99:3d:4d:63:f2:d7:5a:a7: f2:0a:f8:a0:5e:e6:54:b3:8b:1a:57:11:60:99:bd: cf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:7C:5D:1A:03:48:52:48:B8:A7:19:B0:9F:A0:E5:C4:5D:8B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.80.0/24 104.251.85.0/24 104.251.89.0/24 104.251.91.0/24 158.115.224.0/22 158.115.248.0/22 172.98.185.0/24 206.127.218.0/24 207.230.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d0:b2:2c:c1:eb:2f:81:da:7e:cd:2d:01:ef:20:95:41:45: 39:f5:e0:f9:fa:67:c9:92:9b:b8:69:63:85:88:06:7a:2a:e3: f1:2f:99:44:7d:c7:5c:9e:36:96:61:1b:07:2c:9e:ba:93:ae: 7d:14:62:a8:e3:76:4d:22:76:7a:ee:40:63:37:02:0f:3b:18: 95:28:4b:a8:47:87:75:74:62:b1:0b:52:33:9c:38:4e:11:86: 37:28:6e:a3:75:2f:5f:b0:6d:cf:17:50:50:ee:c8:0a:23:b0: 2a:d5:4a:30:a6:41:b6:63:b6:7d:d7:93:71:68:f2:90:c1:fc: 61:1d:6b:8d:e1:da:f7:0b:68:b0:5e:e0:79:e4:c5:d0:56:21: b7:8e:5f:72:66:ab:06:86:ec:35:aa:fe:e6:96:7b:e9:98:62: 77:0e:f4:b3:aa:22:8b:35:a7:0f:e8:d4:bf:1f:b8:6c:a8:ab: e0:95:67:80:f5:bb:d2:93:ba:d1:10:ae:46:43:22:b6:ad:ca: 0f:2a:bb:de:d9:f1:7a:19:a0:18:47:1a:90:b3:7c:88:70:2a: 57:43:8d:27:29:16:05:78:f7:d2:3f:a6:b9:c2:f3:44:a8:4a: 41:9f:bb:de:4f:5c:fe:bf:99:6c:d9:01:bc:9c:8f:c3:19:d6: 37:12:c4:88 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEz0Ii2dO0RJshCQawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk YmE4YmQ2YzgtZTJkMi00N2UzLTliZDItY2JiNzgwNWEzZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxugXN+4iDgFg0P33UQaChFEodNA+bfgkLZ/E A19OlkpNUw9F0LTgoNg0ZpjMmg09CuqzmPCwtmSB7xSC/i3WIFcSFx5BH8fyP1/A 8jL7qsalhG/OfWz5GhvXCUJXm42Y3PuTMaDUTRc+PoCT54iFG6brrBXosR1JpTRA 3JaMg68iN4Y4WLvweRuA2f1UbvYovFfdq23WPZqMzkx7aFrYjYJ1oi/Qu+XEBbep CIxllAevSS63qDOUwWpT/6TJFdPmh04NMm+o1tkext3ctCDvPq0tTzWmNEMZ3T9I ZqJF4CMrdClE5u49mT1NY/LXWqfyCvigXuZUs4saVxFgmb3PKwIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFPeXfF0aA0hSSLinGbCfoOXEXYsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjE1OWQ5NDktOWMwOS0z M2NmLThkZjItYWI5M2MyMjVhNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAaPtQAwQA aPtVAwQAaPtZAwQAaPtbAwQCnnPgAwQCnnP4AwQArGK5AwQAzn/aAwQCz+ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHQsizB6y+B2n7NLQHvIJVBRTn14Pn6Z8mSm7hpY4WIBnoq4/EvmUR9 x1yeNpZhGwcsnrqTrn0UYqjjdk0idnruQGM3Ag87GJUoS6hHh3V0YrELUjOcOE4R hjcobqN1L1+wbc8XUFDuyAojsCrVSjCmQbZjtn3Xk3Fo8pDB/GEda43h2vcLaLBe 4HnkxdBWIbeOX3JmqwaG7DWq/uaWe+mYYncO9LOqIos1pw/o1L8fuGyoq+CVZ4D1 u9KTutEQrkZDIratyg8qu97Z8XoZoBhHGpCzfIhwKldDjScpFgV499I/prnC80So SkGfu95PXP6/mWzZAbycj8MZ1jcSxIg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:57:15 2026 by rpki-client