$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa File: 9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa (raw, json) Hash identifier: GEAmPXGy0b1bsudjAi2f8oEv6zfDWWiSqOpuPlRCvgk= Subject key identifier: D7:75:77:9B:A9:E0:0D:96:CC:21:A9:DF:AA:D7:D6:E9:DD:5A:7A:5D Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AD9364F1C0C5BBABA4549DA80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 104.251.82.0/24 maxlen: 24 104.251.90.0/24 maxlen: 24 207.230.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:4f:1c:0c:5b:ba:ba:45:49:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=a1ccc956-fc5c-42a7-b285-bbc40e3af261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:9d:81:62:74:29:b4:26:81:91:92:46:1b: 8c:be:ac:51:c5:3e:ff:b7:ec:2e:1b:de:2f:a9:37: 83:45:40:dc:59:ff:00:c6:a6:04:14:73:05:2a:c1: 26:82:e4:45:97:ab:d3:d0:96:2f:2e:40:ec:74:a8: 60:0e:98:84:60:e1:ac:82:66:87:f9:b2:f5:81:70: 0e:14:47:d1:c1:bc:b3:40:77:7d:df:03:d2:37:90: 72:6b:d3:7e:7f:de:ca:dc:00:b9:60:88:10:f0:c4: dd:aa:6a:e2:bb:ae:4a:5e:8c:38:1d:a7:16:12:23: 43:64:e5:4e:b3:8d:64:18:11:45:d1:fa:76:96:55: 8f:b8:e8:d7:c3:f0:f7:57:f0:98:87:9f:5e:29:0a: 6c:e0:98:c1:e4:1e:8e:2b:c1:bd:e5:b4:37:69:71: 32:02:45:57:e5:87:a9:fe:60:67:e9:24:e9:8d:b6: a2:90:f0:2f:88:fc:ab:b8:94:3f:bb:a2:6b:4d:df: db:b8:d1:a2:7b:7b:1a:85:95:cb:4b:35:52:29:f8: 2d:f6:f3:a7:b6:c2:92:29:2b:0f:e2:43:51:b5:4f: b3:94:c9:3a:01:ae:d3:f8:47:ba:9c:06:59:44:43: 77:79:9b:84:2e:eb:55:b5:17:be:5d:fa:1d:ee:b5: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:75:77:9B:A9:E0:0D:96:CC:21:A9:DF:AA:D7:D6:E9:DD:5A:7A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9886f4c2-2c6c-312e-9503-deb0a91deaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.82.0/24 104.251.90.0/24 207.230.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:42:41:42:0a:f3:de:8b:02:ce:f5:7c:ee:50:72:42:49:dd: 8d:66:62:58:77:34:77:47:51:ca:c7:05:0e:c7:67:eb:4d:99: cf:8c:e1:a8:38:ca:83:f8:4f:15:8e:ec:7c:ca:4c:ed:be:c0: 9b:86:05:34:21:08:05:a3:4b:c5:26:c2:36:69:c1:bd:84:6a: 02:a8:4d:2a:1d:d6:7f:bf:bb:be:01:9b:a8:91:78:c1:c3:2f: 13:4b:19:1a:41:eb:4b:1f:52:53:0d:17:29:4e:49:d8:27:b0: 4d:6e:30:42:a8:6e:b2:66:02:17:60:a8:ec:ef:74:53:5d:85: dc:31:b0:bb:b7:98:fb:77:5d:e3:79:af:0a:58:f6:2f:20:5d: 6e:ab:a7:1f:65:8c:d1:48:2d:8b:8c:50:76:02:c3:79:0c:5c: a2:14:ef:9d:ab:51:93:d7:0e:59:21:32:ea:47:73:10:f5:c0: f1:f4:1f:5b:ff:4c:41:83:88:71:fa:a2:a6:59:88:55:8a:c2: 15:d3:79:1f:a7:3c:c2:b3:42:2c:cc:7e:4a:f3:ad:01:10:2e: a8:88:b6:b2:e7:83:a6:ec:a8:09:0b:b8:b7:58:15:94:5a:9e: 82:d9:73:a1:9f:97:dd:0b:3e:05:13:31:9b:20:ff:ee:dd:cd: 38:20:cc:2f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErZNk8cDFu6ukVJ2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YTFjY2M5NTYtZmM1Yy00MmE3LWIyODUtYmJjNDBlM2FmMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomOdgWJ0KbQmgZGSRhuMvqxRxT7/t+wuG94v qTeDRUDcWf8AxqYEFHMFKsEmguRFl6vT0JYvLkDsdKhgDpiEYOGsgmaH+bL1gXAO FEfRwbyzQHd93wPSN5Bya9N+f97K3AC5YIgQ8MTdqmriu65KXow4HacWEiNDZOVO s41kGBFF0fp2llWPuOjXw/D3V/CYh59eKQps4JjB5B6OK8G95bQ3aXEyAkVX5Yep /mBn6STpjbaikPAviPyruJQ/u6JrTd/buNGie3sahZXLSzVSKfgt9vOntsKSKSsP 4kNRtU+zlMk6Aa7T+Ee6nAZZREN3eZuELutVtRe+Xfod7rVzdQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNd1d5up4A2WzCGp36rX1undWnpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOTg4NmY0YzItMmM2Yy0z MTJlLTk1MDMtZGViMGE5MWRlYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaPtSAwQA aPtaAwQCz+ZoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH5CQUIK896LAs71fO5QckJJ3Y1mYlh3NHdHUcrH BQ7HZ+tNmc+M4ag4yoP4TxWO7HzKTO2+wJuGBTQhCAWjS8UmwjZpwb2EagKoTSod 1n+/u74Bm6iReMHDLxNLGRpB60sfUlMNFylOSdgnsE1uMEKobrJmAhdgqOzvdFNd hdwxsLu3mPt3XeN5rwpY9i8gXW6rpx9ljNFILYuMUHYCw3kMXKIU752rUZPXDlkh MupHcxD1wPH0H1v/TEGDiHH6oqZZiFWKwhXTeR+nPMKzQizMfkrzrQEQLqiItrLn g6bsqAkLuLdYFZRanoLZc6Gfl90LPgUTMZsg/+7dzTggzC8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:18:46 2025 by rpki-client