$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa File: fba7741f-d7cd-3d32-850c-1efffef1bce5.roa (raw, json) Hash identifier: tS6ppIMkLybGezTMJXNLYETs/KmZUp8vT7DyCWYjDZM= Subject key identifier: 4A:ED:E8:45:B4:42:9E:4D:F6:41:B8:F6:1E:75:0A:F9:13:16:9C:DF Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AE8912DB375A4A3355308B5A0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 1239 IP address blocks: 104.218.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2d:b3:75:a4:a3:35:53:08:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=1f7c2851-dc3e-4e34-acce-f7d7a3988fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:9f:42:2b:9a:31:d2:1a:05:50:c6:4a:ed: 6d:30:d1:69:e7:b1:85:a1:da:f3:b9:76:23:b3:ed: e7:43:91:80:ae:d5:9d:24:38:f2:0b:26:54:b8:c8: dd:fd:c6:79:78:8a:65:d1:a9:d5:7c:a1:8e:1b:b7: dc:b9:0d:42:7e:f2:64:ec:78:a6:02:09:82:86:10: 3a:27:78:f9:c6:94:84:29:de:1e:66:9b:38:1c:59: 99:e8:cb:66:7e:cd:eb:fa:62:75:cd:72:99:53:48: 5d:48:30:f7:0c:f2:45:64:6a:04:c2:3e:2a:08:00: 8d:e0:e9:06:90:48:8b:13:3b:98:8c:f8:5d:36:b8: b3:2b:2c:3f:01:81:67:35:7a:2c:00:34:b3:57:17: fd:6a:91:d5:f2:70:a3:27:63:74:d3:10:88:ed:60: be:ea:4b:f5:35:2b:6e:8d:68:3c:90:98:d5:ab:af: 70:65:4f:ab:a7:ef:10:bc:00:1c:27:c4:98:c4:46: 5d:91:d4:60:6c:7b:b1:c4:c5:bb:d4:9d:65:6b:1d: 13:1e:32:73:55:03:82:69:bb:86:df:dd:05:95:75: 5c:23:1f:5e:48:e5:77:73:ab:2e:a4:0d:54:bc:61: 78:31:b3:bb:71:ac:db:34:ff:88:a6:82:f5:56:c0: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:E8:45:B4:42:9E:4D:F6:41:B8:F6:1E:75:0A:F9:13:16:9C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e3:b3:c8:83:98:14:78:ed:f4:4d:02:5f:80:a1:2f:fd:d8: f1:34:8b:02:77:b7:e1:87:45:a6:54:5e:b2:9b:fe:3f:9e:ac: e3:74:06:78:8c:12:94:15:d2:83:1c:19:f9:d0:1f:5c:36:c0: 70:55:b1:95:82:d3:5e:fc:8b:98:de:d7:9b:12:25:22:4a:ca: e3:a3:fa:cf:40:a7:e8:02:7b:e5:17:ed:40:66:a9:6a:fe:d1: de:44:ed:f2:ee:7c:d1:e2:34:19:a2:36:1f:73:a4:0d:b1:e4: 8e:cb:dc:5d:be:01:2c:35:d5:cf:3d:5a:01:f0:61:43:93:7c: ff:97:2e:09:26:f0:8a:c9:a6:21:da:eb:a0:38:28:d3:3a:4e: b7:45:1e:2d:75:7d:b5:db:f1:6c:01:5a:66:63:77:16:ad:ab: 34:2c:6f:e8:a3:57:16:ce:a3:58:d0:e9:0d:d1:59:0d:0b:1c: fc:ee:e8:3d:11:3c:59:d8:af:71:63:66:43:6f:56:53:a6:6f: 34:2f:ba:17:65:a1:4a:ce:d3:3a:f5:95:85:2a:a3:00:4d:75: 6f:9e:44:ab:95:c7:69:3d:c4:3c:c6:44:b3:85:e6:5a:63:1b: af:62:23:d8:59:0c:e2:ca:f1:fd:20:33:fd:30:15:2a:ca:ef: e0:b9:e5:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS2zdaSjNVMItaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MWY3YzI4NTEtZGMzZS00ZTM0LWFjY2UtZjdkN2EzOTg4ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ufQiuaMdIaBVDGSu1tMNFp57GFodrzuXYj s+3nQ5GArtWdJDjyCyZUuMjd/cZ5eIpl0anVfKGOG7fcuQ1CfvJk7HimAgmChhA6 J3j5xpSEKd4eZps4HFmZ6Mtmfs3r+mJ1zXKZU0hdSDD3DPJFZGoEwj4qCACN4OkG kEiLEzuYjPhdNrizKyw/AYFnNXosADSzVxf9apHV8nCjJ2N00xCI7WC+6kv1NStu jWg8kJjVq69wZU+rp+8QvAAcJ8SYxEZdkdRgbHuxxMW71J1lax0THjJzVQOCabuG 390FlXVcIx9eSOV3c6supA1UvGF4MbO7cazbNP+IpoL1VsBkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErt6EW0Qp5N9kG49h51CvkTFpzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZmJhNzc0MWYtZDdjZC0z ZDMyLTg1MGMtMWVmZmZlZjFiY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvjs8iDmBR47fRNAl+AoS/92PE0iwJ3t+GHRaZUXrKb/j+erON0BniM EpQV0oMcGfnQH1w2wHBVsZWC0178i5je15sSJSJKyuOj+s9Ap+gCe+UX7UBmqWr+ 0d5E7fLufNHiNBmiNh9zpA2x5I7L3F2+ASw11c89WgHwYUOTfP+XLgkm8IrJpiHa 66A4KNM6TrdFHi11fbXb8WwBWmZjdxatqzQsb+ijVxbOo1jQ6Q3RWQ0LHPzu6D0R PFnYr3FjZkNvVlOmbzQvuhdloUrO0zr1lYUqowBNdW+eRKuVx2k9xDzGRLOF5lpj G69iI9hZDOLK8f0gM/0wFSrK7+C55fg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:07:31 2025 by rpki-client