$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa File: d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json) Hash identifier: DsmeX8p8+76BKPB1BymGxlH5OzZ78nJVtU5aNR7fPfA= Subject key identifier: A3:BE:55:53:DB:94:20:7C:69:E1:43:05:E5:29:AB:A8:8C:1D:77:8A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F135D438DC75A8F752A780 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 23470 IP address blocks: 104.251.85.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:35:d4:38:dc:75:a8:f7:52:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=c411370b-c7f3-46cd-a350-842536c690ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7e:0b:b4:d3:6c:a5:1b:52:e3:27:d8:62:f7: a1:36:64:d9:85:d6:b2:27:94:9c:50:c5:d2:ff:45: 5e:ab:b0:09:7f:92:1e:ac:40:f4:e6:1d:ae:e7:1e: 13:83:91:5d:e2:d5:84:27:f5:52:ba:5f:ec:b1:3a: 09:f1:39:98:eb:bd:94:53:9f:90:4b:72:f0:57:59: 57:e4:c6:d0:06:68:1e:a4:98:c6:17:0f:4c:79:98: 6a:6b:38:0f:88:cc:6f:54:a8:11:11:c1:b1:b3:81: d1:b0:b4:40:fc:30:2a:14:1b:41:1b:b1:7f:6e:c3: e0:c8:f5:22:1c:b2:dc:dd:ff:24:89:80:ad:7e:6d: 15:73:96:a2:ee:30:ad:d4:87:06:29:a2:02:25:77: 56:9a:a7:5f:b2:a6:9b:dc:0c:1e:3a:48:d5:5b:02: 5d:b0:87:bc:ef:6c:91:17:fb:30:37:cb:b2:b0:2c: 2b:e8:7c:71:23:cc:39:64:5e:24:c8:77:e5:35:52: ef:d8:22:51:7b:7b:73:b1:ea:82:c5:ee:3c:70:22: b8:3c:af:a2:f7:cb:34:c1:13:a8:d5:8b:b1:88:22: 7f:11:70:ac:03:7d:99:bc:7a:0d:6d:3e:bb:cb:23: 3a:b6:65:c5:de:bb:55:a3:72:cb:4f:c1:a6:91:47: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BE:55:53:DB:94:20:7C:69:E1:43:05:E5:29:AB:A8:8C:1D:77:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.85.0/24 104.251.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ef:c2:84:f3:cb:83:cb:b6:a3:6c:1d:cc:27:8f:67:8a:bd: 04:1d:53:f9:84:85:b1:56:c1:20:51:8f:8b:c4:1d:65:20:8e: 49:fa:ca:1a:8c:94:30:49:d2:36:78:3f:2a:f9:92:35:0c:b6: c9:8c:e8:ba:ba:79:0b:5d:5b:51:6c:3c:83:87:0a:ce:2c:80: 82:8d:3a:df:98:34:cd:01:d5:29:c1:b8:33:e6:dc:93:a1:43: bb:6a:95:4c:eb:b8:5a:4d:aa:5d:4f:2a:ad:12:52:c3:d2:f0: ed:4f:57:99:46:98:cf:7a:af:53:8a:c5:d8:53:6e:7c:53:46: be:7b:27:67:a9:59:d3:a0:76:d2:ea:05:f5:c2:e9:59:31:83: be:83:10:19:71:c9:db:43:a4:5c:61:ba:4a:73:10:67:c6:15: 61:36:37:9a:fa:58:87:12:a8:51:39:94:5c:c8:b0:cd:51:0b: 2b:dc:df:f3:01:79:22:5c:3b:33:80:a4:8b:af:8c:24:ce:29: f8:67:43:28:e8:d2:6c:81:68:3d:ab:6b:91:07:43:93:82:c3: e2:46:5d:74:39:0c:2a:66:92:e9:8b:ba:1a:e1:35:b0:a4:3b: 88:65:fa:ef:25:9a:66:65:fe:37:0d:c1:cf:d5:e6:b6:08:93: d5:18:92:41 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErw8TXUONx1qPdSp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YzQxMTM3MGItYzdmMy00NmNkLWEzNTAtODQyNTM2YzY5MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H4LtNNspRtS4yfYYvehNmTZhdayJ5ScUMXS /0Veq7AJf5IerED05h2u5x4Tg5Fd4tWEJ/VSul/ssToJ8TmY672UU5+QS3LwV1lX 5MbQBmgepJjGFw9MeZhqazgPiMxvVKgREcGxs4HRsLRA/DAqFBtBG7F/bsPgyPUi HLLc3f8kiYCtfm0Vc5ai7jCt1IcGKaICJXdWmqdfsqab3AweOkjVWwJdsIe872yR F/swN8uysCwr6HxxI8w5ZF4kyHflNVLv2CJRe3tzseqCxe48cCK4PK+i98s0wROo 1YuxiCJ/EXCsA32ZvHoNbT67yyM6tmXF3rtVo3LLT8GmkUdQNQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKO+VVPblCB8aeFDBeUpq6iMHXeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDhkYzg2Y2ItMTYxZi0z OTk1LThkOTktZGQyNDBkZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtVAwQA aPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABTvwoTzy4PLtqNsHcwnj2eKvQQdU/mEhbFWwSBRj4vEHWUg jkn6yhqMlDBJ0jZ4Pyr5kjUMtsmM6Lq6eQtdW1FsPIOHCs4sgIKNOt+YNM0B1SnB uDPm3JOhQ7tqlUzruFpNql1PKq0SUsPS8O1PV5lGmM96r1OKxdhTbnxTRr57J2ep WdOgdtLqBfXC6Vkxg76DEBlxydtDpFxhukpzEGfGFWE2N5r6WIcSqFE5lFzIsM1R Cyvc3/MBeSJcOzOApIuvjCTOKfhnQyjo0myBaD2ra5EHQ5OCw+JGXXQ5DCpmkumL uhrhNbCkO4hl+u8lmmZl/jcNwc/V5rYIk9UYkkE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:49 2025 by rpki-client