$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa File: 22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa (raw, json) Hash identifier: +LQQqS4wxDphOAUZqAfAGdIXPMpBlGfmewzJS/jvWSg= Subject key identifier: 23:43:CE:44:63:88:01:C2:19:50:BC:EE:57:E8:8B:36:88:56:EA:D8 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F135AC13CF4455E2735480 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 46261 IP address blocks: 104.218.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:35:ac:13:cf:44:55:e2:73:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=7ed6b333-36ae-4e4c-947f-8730e6cf5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:9e:ab:cb:1a:41:9d:59:11:ea:83:18:a4: 73:11:c1:3e:55:d9:b5:73:72:db:09:4c:0a:fb:38: 08:34:28:54:a1:ea:78:9a:a4:9f:60:59:52:62:93: e3:93:82:a0:2a:24:31:96:73:24:d6:1c:3a:d4:39: b3:71:5e:87:9a:f4:62:14:f9:73:c0:37:4f:85:25: 68:9c:bd:0a:76:08:b2:eb:bd:cc:4e:d3:30:b6:1c: 82:6b:82:61:f1:d0:73:b6:42:27:2c:c0:93:ee:55: 97:24:81:93:94:ec:08:d6:91:b3:74:6b:1c:08:54: a1:55:99:fd:c5:83:a0:ed:80:0d:f8:2d:26:eb:2e: 94:f4:f5:c1:ad:52:1f:b3:49:e0:24:cd:c8:ae:4d: ca:04:e8:bb:64:31:44:c6:11:b3:72:1d:5f:df:8d: 07:eb:63:12:bf:88:a1:1d:4d:15:65:ea:a9:29:7f: 2b:8a:40:34:8b:f4:bb:59:a9:1a:2a:ce:1f:8f:fb: ee:ff:04:81:bb:e6:65:d7:52:a3:cf:70:e3:fa:47: 63:b5:03:68:6b:11:d1:44:3f:ca:5e:ed:6d:6d:a4: db:37:57:f7:bd:78:40:6b:1c:a9:7d:22:01:3a:6d: 81:75:72:a0:e8:46:c9:1f:70:6f:1e:1c:22:9c:37: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:CE:44:63:88:01:C2:19:50:BC:EE:57:E8:8B:36:88:56:EA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7c:07:75:25:28:a9:03:0e:0f:f8:85:20:61:20:a7:c4:d3: 77:8c:f0:9f:fa:83:c9:5d:02:ab:2b:db:29:8f:e7:02:88:65: df:0a:f0:53:83:21:2e:a6:ca:a9:6d:f7:c2:32:42:eb:77:ef: 7a:48:3a:01:23:c2:5c:48:95:2f:53:46:8b:0c:9a:de:e4:17: c2:13:81:5e:2e:d2:09:be:a0:7f:49:b8:aa:7a:bd:5e:2d:88: e2:6b:38:2c:8a:e3:28:c6:25:87:4b:b0:df:10:56:ec:01:c4: 30:76:66:a1:11:b8:bb:40:56:0d:ca:49:4c:37:9e:a1:9f:61: 52:88:51:34:ba:85:02:f1:28:60:8c:7f:79:72:03:6b:a5:70: f5:eb:c5:8a:59:04:ed:d1:f3:03:1c:0d:87:a6:e8:61:66:0e: 2f:cf:c5:4c:7d:16:6f:82:72:80:f8:de:54:6c:0b:33:b8:c1: b6:7b:b9:97:a8:46:21:21:97:f7:55:c0:f6:25:5a:9a:63:13: 6d:ef:d1:4e:be:b1:68:23:0f:2e:35:d5:3b:60:d0:36:41:ff: a5:77:b1:10:21:8a:58:08:9d:eb:ba:9e:77:b8:d1:78:8e:b0: 77:9b:c6:65:2d:c0:f9:87:4a:78:98:3d:e5:35:94:12:3c:94: 40:a7:74:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TWsE89EVeJzVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk N2VkNmIzMzMtMzZhZS00ZTRjLTk0N2YtODczMGU2Y2Y1NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS2eq8saQZ1ZEeqDGKRzEcE+Vdm1c3LbCUwK +zgINChUoep4mqSfYFlSYpPjk4KgKiQxlnMk1hw61DmzcV6HmvRiFPlzwDdPhSVo nL0Kdgiy673MTtMwthyCa4Jh8dBztkInLMCT7lWXJIGTlOwI1pGzdGscCFShVZn9 xYOg7YAN+C0m6y6U9PXBrVIfs0ngJM3Irk3KBOi7ZDFExhGzch1f340H62MSv4ih HU0VZeqpKX8rikA0i/S7WakaKs4fj/vu/wSBu+Zl11Kjz3Dj+kdjtQNoaxHRRD/K Xu1tbaTbN1f3vXhAaxypfSIBOm2BdXKg6EbJH3BvHhwinDefZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNDzkRjiAHCGVC87lfoizaIVurYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjJkZDc2MWUtZDBiMi0z YzYxLWIzZDItYjg2MTdjMGZhMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN8B3UlKKkDDg/4hSBhIKfE03eM8J/6g8ldAqsr2ymP5wKIZd8K8FOD IS6myqlt98IyQut373pIOgEjwlxIlS9TRosMmt7kF8ITgV4u0gm+oH9JuKp6vV4t iOJrOCyK4yjGJYdLsN8QVuwBxDB2ZqERuLtAVg3KSUw3nqGfYVKIUTS6hQLxKGCM f3lyA2ulcPXrxYpZBO3R8wMcDYem6GFmDi/PxUx9Fm+CcoD43lRsCzO4wbZ7uZeo RiEhl/dVwPYlWppjE23v0U6+sWgjDy411Ttg0DZB/6V3sRAhilgIneu6nne40XiO sHebxmUtwPmHSniYPeU1lBI8lECndJQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:25 2025 by rpki-client