$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/52ac95f8-c487-31f5-9f02-2e212018ddb0.roa File: 52ac95f8-c487-31f5-9f02-2e212018ddb0.roa (raw, json) Hash identifier: ua4XFmTb8My8sWYtOk7QFxxTxUEKm7fIVmhxNNlLwGI= Subject key identifier: 10:85:6F:4F:23:3D:FF:64:1B:C1:9D:7C:30:02:AB:02:B2:4C:EE:3A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F135C1BF860B10B19B2208 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/52ac95f8-c487-31f5-9f02-2e212018ddb0.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 20454 IP address blocks: 104.218.198.0/24 maxlen: 24 104.218.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:35:c1:bf:86:0b:10:b1:9b:22:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=d4c2c3fb-e75a-46bf-89d4-a348e9316955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:43:5a:72:ad:49:7d:33:70:fc:05:2a:17: 41:87:fe:88:79:79:a2:c8:30:18:6b:a3:4b:88:ca: 91:17:fa:fd:bf:40:f3:74:0e:20:22:a0:64:31:c9: 6d:af:81:93:a2:03:1f:2d:b3:0b:57:8c:b6:50:9e: 64:f6:8a:0b:88:43:c6:ad:14:96:bb:c9:89:c8:59: be:93:ba:d9:87:e0:f3:11:72:71:63:45:6f:23:95: 0e:f9:65:6e:e4:71:3b:d2:06:33:7b:73:41:3f:8c: fb:e8:b6:d3:53:9d:b1:4e:3f:7e:8a:8d:6e:16:02: 3f:53:e5:ee:92:42:70:20:92:eb:97:0d:4d:cd:d9: b7:bc:51:7a:ec:1c:02:c2:78:18:dc:e8:ad:bf:c0: 20:94:aa:40:32:8a:ab:d3:8c:f5:24:59:2d:71:54: ac:8d:27:f1:30:e8:69:3e:7b:6d:9e:da:d6:49:04: 5f:da:58:b3:4f:3f:5f:7a:5e:2a:e4:57:e2:f0:1e: b7:41:46:df:81:a3:af:18:da:95:d2:b7:9c:88:bc: ae:0c:68:7b:17:62:08:6c:da:d6:9e:9b:db:91:77: 86:93:64:12:03:95:dd:87:79:21:5b:65:47:09:f5: f3:47:25:4b:97:53:dd:5a:e0:d4:ed:8a:7f:c7:f8: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:85:6F:4F:23:3D:FF:64:1B:C1:9D:7C:30:02:AB:02:B2:4C:EE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/52ac95f8-c487-31f5-9f02-2e212018ddb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fb:9f:a2:14:fa:69:e9:eb:7c:07:99:61:42:47:24:6e:aa: 1c:15:e3:40:6c:b4:6d:43:91:4a:1e:33:f2:36:a4:d8:30:55: 4f:c3:fc:9e:79:17:f9:c4:a6:bf:25:f2:c9:3d:04:fd:ef:14: a9:d3:7a:8d:08:c1:65:cd:2b:f5:0f:09:b3:cc:43:50:0b:29: 28:04:17:d3:39:0f:b5:2a:f9:df:2a:0a:53:dd:77:44:46:4d: 50:2e:3e:3a:63:0e:85:7b:e9:75:67:aa:8c:0c:9e:90:cd:23: e3:83:ce:0b:c0:f8:bb:74:40:83:55:f2:46:70:e6:3c:d9:4e: 0d:de:30:e7:f3:4e:41:ef:5d:b2:e7:f8:08:6e:19:f2:c7:40: d5:6e:57:be:44:b6:a9:8d:31:8c:d5:99:40:92:50:9b:c4:6c: 23:e9:ef:b9:24:17:3b:56:12:1e:19:01:7e:bb:5a:2b:0c:ee: fb:76:e9:c3:1c:c0:06:a4:62:cc:04:f9:96:47:fc:f6:1c:9f: 0d:80:ac:d8:ca:61:14:cf:9e:ac:a7:32:73:d1:a9:80:9d:b5: e4:32:62:79:0d:b5:24:04:ee:af:d6:4e:09:c5:a4:d0:9a:ae: 47:5f:be:12:b6:7d:e1:13:d2:29:95:d9:1a:f8:81:78:17:5e: 9d:69:f6:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TXBv4YLELGbIggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDRjMmMzZmItZTc1YS00NmJmLTg5ZDQtYTM0OGU5MzE2OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8lDWnKtSX0zcPwFKhdBh/6IeXmiyDAYa6NL iMqRF/r9v0DzdA4gIqBkMcltr4GTogMfLbMLV4y2UJ5k9ooLiEPGrRSWu8mJyFm+ k7rZh+DzEXJxY0VvI5UO+WVu5HE70gYze3NBP4z76LbTU52xTj9+io1uFgI/U+Xu kkJwIJLrlw1Nzdm3vFF67BwCwngY3Oitv8AglKpAMoqr04z1JFktcVSsjSfxMOhp PnttntrWSQRf2lizTz9fel4q5Ffi8B63QUbfgaOvGNqV0reciLyuDGh7F2IIbNrW npvbkXeGk2QSA5Xdh3khW2VHCfXzRyVLl1PdWuDU7Yp/x/imBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCFb08jPf9kG8GdfDACqwKyTO46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTJhYzk1ZjgtYzQ4Ny0z MWY1LTlmMDItMmUyMTIwMThkZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNrGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH7n6IU+mnp63wHmWFCRyRuqhwV40BstG1DkUoeM/I2pNgwVU/D/J55 F/nEpr8l8sk9BP3vFKnTeo0IwWXNK/UPCbPMQ1ALKSgEF9M5D7Uq+d8qClPdd0RG TVAuPjpjDoV76XVnqowMnpDNI+ODzgvA+Lt0QINV8kZw5jzZTg3eMOfzTkHvXbLn +AhuGfLHQNVuV75EtqmNMYzVmUCSUJvEbCPp77kkFztWEh4ZAX67WisM7vt26cMc wAakYswE+ZZH/PYcnw2ArNjKYRTPnqynMnPRqYCdteQyYnkNtSQE7q/WTgnFpNCa rkdfvhK2feET0imV2Rr4gXgXXp1p9s8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:46:13 2025 by rpki-client