$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa File: 573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa (raw, json) Hash identifier: lOHxuW451kgARDB4y7OE1Zi+KZ+5EBYaHZYAd4l/45c= Subject key identifier: AF:15:11:17:A7:5F:27:F9:C6:89:55:5A:F1:1E:CE:DE:35:A4:E4:61 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A07D52EF2F98961BE6C0268C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 46261 IP address blocks: 104.218.197.0/24 maxlen: 24 104.251.87.0/24 maxlen: 24 172.98.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2e:f2:f9:89:61:be:6c:02:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=08c9051e-d834-4aad-b78b-c4b03bdf72a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:7b:76:70:5e:30:ca:10:f2:72:6b:2e:be: ad:fe:a4:45:92:52:a8:03:3c:9e:42:69:66:aa:83: 27:7a:9b:07:7a:6e:ca:ae:34:bb:5b:72:3b:a5:a8: 1b:43:c8:f0:e0:bb:9e:03:84:76:45:ff:6c:0d:00: 13:74:52:d2:d7:12:f9:1d:de:9c:94:2c:54:33:65: 83:7f:6a:7e:ef:97:a9:27:a1:57:e5:19:14:db:c6: 75:9f:18:96:bd:19:fb:3a:01:07:03:c7:1f:15:9a: e9:52:83:f0:e2:c1:7a:3c:fc:92:9c:ae:a7:4f:0f: 11:63:1a:07:d3:ca:b1:87:6a:5a:21:c3:07:20:ad: 31:8a:e7:b1:86:24:f7:ce:ba:57:ae:6e:a2:ac:2c: 39:37:0d:f0:a2:69:c5:df:f9:66:83:31:4c:7c:e7: 4f:9b:83:85:8c:74:7f:0f:60:c5:44:a3:eb:0c:70: 81:80:6e:50:d3:0b:8b:27:ec:6b:d9:1e:2c:c1:70: 67:13:c0:a6:ef:62:3b:d3:f4:a4:3e:77:9f:f1:00: 92:c5:45:56:24:cb:ca:b6:bb:4b:c9:d6:9e:cb:ac: 53:d1:4f:a2:bc:12:77:cf:39:b0:ea:fb:85:00:87: 9d:d9:76:b7:e6:75:c7:f8:e7:9a:43:98:fb:91:3a: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:11:17:A7:5F:27:F9:C6:89:55:5A:F1:1E:CE:DE:35:A4:E4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.197.0/24 104.251.87.0/24 172.98.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a7:6f:ac:ca:e3:91:12:9d:55:26:58:31:17:2f:e2:14:04: 4f:4f:6f:7a:20:13:40:2f:96:1c:b6:5c:1a:34:f3:d9:fc:08: 37:06:e5:fb:34:91:5b:cd:b3:93:43:78:3a:96:a2:7c:ac:8e: b8:eb:60:a5:e9:87:d7:7c:75:f5:09:78:20:10:d4:6f:fa:f7: 9b:53:0a:59:a6:08:74:40:87:b7:03:e4:89:4c:ad:1f:67:0e: dd:3f:fa:8e:48:a8:59:7b:fc:64:e7:3d:dc:8b:fa:e8:b9:94: 52:ed:80:fe:12:b7:be:be:26:84:15:2e:31:11:91:cd:c2:ea: 32:a1:96:ce:a0:cd:1f:1b:d6:5f:89:95:91:dd:32:88:d7:c6: 0f:3f:29:7c:86:4f:f1:36:60:7f:d9:c0:88:0b:87:ed:2f:59: 0c:61:9e:fc:46:10:2d:3f:75:dd:01:fb:f0:b7:05:8b:de:22: 26:61:89:a6:d3:10:e3:1d:e1:bf:0a:72:ba:0b:94:70:68:bb: 8b:d3:58:b8:46:34:5e:e8:71:d5:50:63:3c:dc:68:7c:15:37: 7b:7b:60:5c:4e:b2:46:ea:04:2b:05:75:79:4a:7b:7f:5b:7b: 42:1a:68:78:6c:51:ae:6c:34:b1:3d:1c:0e:35:fe:24:c7:8b: cd:10:f3:fb -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEoH1S7y+YlhvmwCaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MDhjOTA1MWUtZDgzNC00YWFkLWI3OGItYzRiMDNiZGY3MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJh7dnBeMMoQ8nJrLr6t/qRFklKoAzyeQmlm qoMnepsHem7KrjS7W3I7pagbQ8jw4LueA4R2Rf9sDQATdFLS1xL5Hd6clCxUM2WD f2p+75epJ6FX5RkU28Z1nxiWvRn7OgEHA8cfFZrpUoPw4sF6PPySnK6nTw8RYxoH 08qxh2paIcMHIK0xiuexhiT3zrpXrm6irCw5Nw3womnF3/lmgzFMfOdPm4OFjHR/ D2DFRKPrDHCBgG5Q0wuLJ+xr2R4swXBnE8Cm72I70/SkPnef8QCSxUVWJMvKtrtL ydaey6xT0U+ivBJ3zzmw6vuFAIed2Xa35nXH+OeaQ5j7kTqk1QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFK8VERenXyf5xolVWvEezt41pORhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTczY2QwMzEtZmY2Yi0z ZDUzLWI2MmItZGJkNWJjMTc3YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaNrFAwQA aPtXAwQArGKoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAD+nb6zK45ESnVUmWDEXL+IUBE9Pb3ogE0Avlhy2 XBo089n8CDcG5fs0kVvNs5NDeDqWonysjrjrYKXph9d8dfUJeCAQ1G/695tTClmm CHRAh7cD5IlMrR9nDt0/+o5IqFl7/GTnPdyL+ui5lFLtgP4St76+JoQVLjERkc3C 6jKhls6gzR8b1l+JlZHdMojXxg8/KXyGT/E2YH/ZwIgLh+0vWQxhnvxGEC0/dd0B +/C3BYveIiZhiabTEOMd4b8KcroLlHBou4vTWLhGNF7ocdVQYzzcaHwVN3t7YFxO skbqBCsFdXlKe39be0IaaHhsUa5sNLE9HA41/iTHi80Q8/s= -----END CERTIFICATE-----Generated at Sun Jun 29 12:21:46 2025 by rpki-client