$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa File: fba7741f-d7cd-3d32-850c-1efffef1bce5.roa (raw, json) Hash identifier: R6PbLltlY4Hfe+d1a2JEmtP+bEeeAOieqGK3e+llCfo= Subject key identifier: A9:A6:C9:35:00:1C:EF:63:4D:66:57:D1:EE:25:F5:F5:6E:81:F7:97 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584FAF589B2D94309FAC6E819880 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 1239 IP address blocks: 104.218.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:9b:2d:94:30:9f:ac:6e:81:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=7036971b-07a7-4484-aa56-8ee3c3384cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:b1:8d:59:68:6e:a3:7a:83:39:f1:0a:1b: 0d:e4:e8:f5:55:b7:91:c2:2c:51:ae:eb:96:64:42: cd:21:45:09:84:ce:8e:19:40:08:18:eb:07:b1:20: 96:38:26:f1:70:06:83:98:96:1a:5e:1a:02:14:7c: 7b:90:93:a1:38:6e:79:89:44:86:7d:ea:75:26:1f: be:3b:03:af:d8:d5:14:35:ee:ee:46:a3:43:04:ef: a8:10:77:f6:73:47:66:2b:c4:03:2d:00:4e:34:1f: f4:f6:d6:73:53:c1:d7:56:70:3c:5e:cd:e4:4e:f5: ba:47:c1:b4:5e:06:07:d1:27:ed:7b:a8:46:3d:e5: c0:ab:a2:35:86:b8:6c:4e:13:0d:d9:d1:0c:71:8f: ca:41:7f:36:6e:4a:e5:08:67:e3:c1:9d:c7:a9:a7: 89:93:44:3e:78:9c:a3:04:35:11:67:16:62:7a:28: e1:26:7a:58:62:a5:28:90:b9:88:59:a6:59:44:31: 38:61:1e:6f:ed:f9:53:44:3b:9a:1b:af:1f:9a:ef: 1d:3d:f5:05:e2:5c:4a:5b:fe:0e:ad:1c:53:07:a0: a9:42:d3:1b:05:09:c5:fb:8e:e7:33:6e:61:8b:e0: 0f:92:31:7d:a9:32:b5:02:f9:2e:c1:86:c3:16:09: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:C9:35:00:1C:EF:63:4D:66:57:D1:EE:25:F5:F5:6E:81:F7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8d:02:bd:d0:f7:40:96:51:c6:28:7d:3a:3d:42:ea:55:5c: 2f:e9:33:60:4c:8d:91:cd:a6:03:bd:17:90:dc:14:9c:bd:32: 07:4e:d9:7b:65:14:d5:7a:55:12:c7:0a:da:a0:c1:25:19:15: 5b:1e:98:90:21:94:13:38:a8:be:65:a4:16:10:72:62:b5:50: 31:41:a5:c6:a4:bd:ef:20:c4:84:76:73:ef:dc:12:29:14:8f: 00:03:82:36:8c:6e:d9:b3:8f:f2:e8:25:07:f6:45:0b:c2:51: 85:b2:c7:1d:b5:84:ba:c2:af:51:71:a8:d7:ee:a4:0f:c1:4b: 62:79:7a:46:0b:a7:99:2d:fe:ee:ea:83:2e:2a:a2:56:94:84: 55:6b:4e:c1:f2:cd:b1:c0:36:7c:15:45:c7:8d:91:e0:ee:5a: 2c:75:a0:f0:23:a9:83:93:9d:db:30:68:05:f7:af:19:4e:03: dd:25:de:d0:0e:4c:32:45:29:a8:68:39:9b:88:db:c2:2a:a8: 8e:30:e5:8e:07:7a:94:7a:1d:6f:87:41:4b:65:17:64:d6:79: fd:6a:58:11:e6:2a:f2:78:87:af:a1:1e:f8:af:53:a6:51:e2: 18:78:72:6a:3c:0b:19:4a:11:59:ff:40:8a:64:9d:54:2a:7e: 30:62:78:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWJstlDCfrG6BmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk NzAzNjk3MWItMDdhNy00NDg0LWFhNTYtOGVlM2MzMzg0Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk86xjVlobqN6gznxChsN5Oj1VbeRwixRruuW ZELNIUUJhM6OGUAIGOsHsSCWOCbxcAaDmJYaXhoCFHx7kJOhOG55iUSGfep1Jh++ OwOv2NUUNe7uRqNDBO+oEHf2c0dmK8QDLQBONB/09tZzU8HXVnA8Xs3kTvW6R8G0 XgYH0Sfte6hGPeXAq6I1hrhsThMN2dEMcY/KQX82bkrlCGfjwZ3HqaeJk0Q+eJyj BDURZxZieijhJnpYYqUokLmIWaZZRDE4YR5v7flTRDuaG68fmu8dPfUF4lxKW/4O rRxTB6CpQtMbBQnF+47nM25hi+APkjF9qTK1AvkuwYbDFgmyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmmyTUAHO9jTWZX0e4l9fVugfeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZmJhNzc0MWYtZDdjZC0z ZDMyLTg1MGMtMWVmZmZlZjFiY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2NAr3Q90CWUcYofTo9QupVXC/pM2BMjZHNpgO9F5DcFJy9MgdO2Xtl FNV6VRLHCtqgwSUZFVsemJAhlBM4qL5lpBYQcmK1UDFBpcakve8gxIR2c+/cEikU jwADgjaMbtmzj/LoJQf2RQvCUYWyxx21hLrCr1FxqNfupA/BS2J5ekYLp5kt/u7q gy4qolaUhFVrTsHyzbHANnwVRceNkeDuWix1oPAjqYOTndswaAX3rxlOA90l3tAO TDJFKahoOZuI28IqqI4w5Y4HepR6HW+HQUtlF2TWef1qWBHmKvJ4h6+hHvivU6ZR 4hh4cmo8CxlKEVn/QIpknVQqfjBieDA= -----END CERTIFICATE-----Generated at Thu Nov 5 14:05:56 2026 by rpki-client