$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa File: 28e68c3f-20e0-38e6-9057-bf4b7475db74.roa (raw, json) Hash identifier: fY28KMrFvzjKIVMwONvHgq2EdvJK5MiCHWt0IRYWNoA= Subject key identifier: 6F:8D:23:1B:D9:78:FF:93:B0:9B:7C:5E:09:00:2B:6F:6D:3C:55:40 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B41E71E9EEBB1381B3C674700 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 5650 IP address blocks: 104.251.84.0/24 maxlen: 24 104.251.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1e:9e:eb:b1:38:1b:3c:67:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=71678932-1144-41bd-a877-5156ac8bae5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:0b:45:a5:a7:07:93:e0:53:51:31:00:b5: be:b2:e7:7b:5a:21:64:4f:c5:36:76:9c:52:88:2c: 41:67:3b:9e:b7:80:66:80:52:50:52:a3:ac:00:c2: 38:79:c3:3e:2e:73:c8:a1:96:99:06:05:56:6c:ba: d3:86:bc:ef:29:cb:77:17:9f:9d:54:2c:39:46:dc: 51:3d:54:66:17:72:ef:00:b1:b8:fa:4b:7e:7b:28: f4:79:24:f1:7e:db:c9:8d:8d:2a:0d:ee:0b:f1:2d: 5b:ab:03:95:35:60:8b:ff:cf:f9:3d:b1:56:4f:77: e5:8a:22:e4:20:9f:17:b0:e6:04:0d:d6:45:14:03: 4b:2f:c0:8d:dc:dc:31:e8:05:9e:d9:e8:c8:c5:3f: b1:bc:38:57:fd:dc:ca:01:41:48:d2:d9:8b:d4:67: 29:93:60:50:94:b8:83:b0:31:dc:19:32:d1:48:ca: 9a:b1:4a:94:5a:cf:d0:9b:5c:69:8a:b6:41:12:b5: 7f:05:52:26:f9:e5:0c:1c:19:48:39:81:b7:5e:6f: ae:25:a1:a5:4e:5f:4b:d1:34:2b:3b:d3:21:55:48: 42:3f:02:77:20:89:eb:14:1a:64:f0:48:43:95:8e: 44:0a:ca:64:d2:f3:06:ff:1b:74:37:f3:44:78:5e: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8D:23:1B:D9:78:FF:93:B0:9B:7C:5E:09:00:2B:6F:6D:3C:55:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.84.0/24 104.251.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0a:06:74:9a:6c:e9:75:4d:5b:c2:23:3c:01:38:b3:8c:d4: 76:18:70:d9:07:71:2c:57:ee:97:9e:c4:95:57:de:c9:2b:9c: d6:4c:b5:78:2e:4e:65:0e:47:12:02:42:aa:a8:1f:f4:80:2a: 1e:14:57:19:28:0c:dc:c6:b9:4d:8d:92:ae:91:7f:a0:e7:a6: c8:7a:a7:56:86:39:05:04:b4:4a:e9:f9:be:a4:8c:cf:ed:78: 01:18:b4:81:1f:a1:b4:7a:59:38:e5:05:93:c5:7a:6d:bb:19: 53:1f:67:16:0c:20:8d:d0:2e:4e:d0:0c:59:36:94:6e:f8:e2: 55:5b:03:de:1a:3b:b5:ae:9a:c8:a6:1a:e6:88:40:63:fa:b7: ad:1d:ef:6d:a0:8a:2b:82:83:a4:7f:36:b7:33:3e:2b:f0:f9: be:40:f1:ef:ad:8d:6e:97:b0:d1:f0:f9:ba:20:42:2e:90:6e: b8:1c:bb:07:f6:fb:c3:5f:12:bf:ce:fd:b3:d0:01:ea:e4:ac: a5:62:e8:be:85:ba:18:a3:dd:13:b4:03:17:75:7e:e3:ad:49: cf:81:a6:9f:c9:23:93:c9:aa:a9:60:03:11:99:33:ee:52:2d: 14:15:6e:a7:39:77:94:fb:6d:a5:50:fc:de:01:bd:8a:ba:c5: c6:43:1a:77 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtB5x6e67E4GzxnRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NzE2Nzg5MzItMTE0NC00MWJkLWE4NzctNTE1NmFjOGJhZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk08LRaWnB5PgU1ExALW+sud7WiFkT8U2dpxS iCxBZzuet4BmgFJQUqOsAMI4ecM+LnPIoZaZBgVWbLrThrzvKct3F5+dVCw5RtxR PVRmF3LvALG4+kt+eyj0eSTxftvJjY0qDe4L8S1bqwOVNWCL/8/5PbFWT3fliiLk IJ8XsOYEDdZFFANLL8CN3Nwx6AWe2ejIxT+xvDhX/dzKAUFI0tmL1Gcpk2BQlLiD sDHcGTLRSMqasUqUWs/Qm1xpirZBErV/BVIm+eUMHBlIOYG3Xm+uJaGlTl9L0TQr O9MhVUhCPwJ3IInrFBpk8EhDlY5ECspk0vMG/xt0N/NEeF72AQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG+NIxvZeP+TsJt8XgkAK29tPFVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjhlNjhjM2YtMjBlMC0z OGU2LTkwNTctYmY0Yjc0NzVkYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtUAwQA aPtcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEYKBnSabOl1TVvCIzwBOLOM1HYYcNkHcSxX7peexJVX3skr nNZMtXguTmUORxICQqqoH/SAKh4UVxkoDNzGuU2Nkq6Rf6Dnpsh6p1aGOQUEtErp +b6kjM/teAEYtIEfobR6WTjlBZPFem27GVMfZxYMII3QLk7QDFk2lG744lVbA94a O7WumsimGuaIQGP6t60d722giiuCg6R/NrczPivw+b5A8e+tjW6XsNHw+bogQi6Q brgcuwf2+8NfEr/O/bPQAerkrKVi6L6Fuhij3RO0Axd1fuOtSc+Bpp/JI5PJqqlg AxGZM+5SLRQVbqc5d5T7baVQ/N4BvYq6xcZDGnc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:42:00 2025 by rpki-client