$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa File: 85660311-3e9d-3819-9743-e8455877eb55.roa (raw, json) Hash identifier: c9z9sB4Qqn+5tSQefJCMWPs26nWC8i6eFHfut8p2DS0= Subject key identifier: 52:AF:FD:BD:48:06:12:F8:BB:37:E8:F1:93:8E:D6:0A:E0:45:B0:F1 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AFC1BF2240D5CE8DF1F24B280 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 46261 IP address blocks: 104.218.195.0/24 maxlen: 24 104.251.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f2:24:0d:5c:e8:df:1f:24:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=72d0a6d0-40f4-4d34-966b-2e7de9cf323f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:fd:e6:08:81:9d:d5:94:0f:77:9a:81:c7: 2c:3b:15:5d:0c:c8:ef:c3:95:b3:ef:c3:ba:87:e5: b2:2f:91:cd:83:75:6e:84:76:12:c7:8a:75:e3:13: c4:62:cd:07:ed:cb:4b:25:f4:47:95:78:aa:29:df: 76:d9:76:2d:92:70:fd:5c:cc:d3:9d:61:3e:7a:85: 17:e9:6e:b9:f2:3e:db:54:39:06:5f:c5:77:5b:b1: 63:af:85:0c:5d:72:3b:c8:79:92:ca:12:0e:60:14: 3b:dd:37:50:23:08:db:6c:58:2f:e9:5d:09:a8:49: b4:fc:c4:75:65:ed:73:7d:40:01:e9:0c:ba:4d:e6: c7:69:4e:8b:c3:33:79:8f:45:f2:27:a2:cf:46:71: 69:13:fe:0e:62:33:aa:fb:91:56:77:63:27:df:ca: 5a:b9:0d:6b:0e:32:01:84:11:0d:67:06:b6:56:fe: e3:1d:62:c0:07:6a:c6:8c:62:7a:db:b5:50:d1:8b: 0e:35:9d:40:e5:ce:19:c3:fa:4b:c9:e8:88:ea:c2: 90:67:4a:4a:0f:50:42:87:81:48:09:a5:b5:5d:30: c8:4d:77:5c:00:c3:da:48:d1:e0:9d:b1:99:4d:d9: 3a:5d:fc:3e:ee:33:37:0c:92:ba:ab:78:ef:97:c6: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AF:FD:BD:48:06:12:F8:BB:37:E8:F1:93:8E:D6:0A:E0:45:B0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.195.0/24 104.251.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b1:57:88:e7:b7:c6:9a:1b:51:e0:9a:a4:c2:e7:af:c7:4b: 54:71:6e:13:b2:77:7e:67:36:0f:75:43:51:de:66:84:e7:b5: 54:37:e7:21:60:4f:df:ac:7a:97:4e:85:81:02:83:2a:34:8a: db:e1:04:b0:e5:b9:ed:d6:14:41:59:ff:76:79:90:bb:3e:a9: 17:82:94:47:06:1c:3c:78:5b:ca:24:82:7b:81:3f:87:25:fc: a3:77:59:b6:94:7b:b2:7f:68:41:2e:d5:22:33:b7:f2:2e:f9: 53:2e:43:16:69:55:98:8f:93:bc:85:4b:80:10:b7:b0:2c:57: 41:62:8c:3c:8e:8a:59:c5:e5:6e:4d:bf:d7:d2:2c:fe:aa:74: 06:7f:5d:e3:dd:e6:a1:a7:28:fa:89:1e:46:fd:c8:88:1b:4e: d0:4b:df:83:5e:af:6e:56:63:ae:b3:0b:ab:88:98:39:5f:75: a5:4b:f6:d7:98:af:a4:0d:2d:11:68:d2:f6:30:d7:5e:f9:4e: 55:3b:a5:61:cd:11:29:d8:39:cc:29:7d:e4:5a:bc:8b:38:fa: f3:fc:02:12:a8:ad:36:93:15:9e:b3:28:a8:7a:af:b5:db:0d: 69:57:62:4f:5b:4e:e2:71:f3:29:bf:6a:09:a7:9d:21:40:88: fb:ad:3b:36 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr8G/IkDVzo3x8ksoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NzJkMGE2ZDAtNDBmNC00ZDM0LTk2NmItMmU3ZGU5Y2YzMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS/95giBndWUD3eagccsOxVdDMjvw5Wz78O6 h+WyL5HNg3VuhHYSx4p14xPEYs0H7ctLJfRHlXiqKd922XYtknD9XMzTnWE+eoUX 6W658j7bVDkGX8V3W7Fjr4UMXXI7yHmSyhIOYBQ73TdQIwjbbFgv6V0JqEm0/MR1 Ze1zfUAB6Qy6TebHaU6LwzN5j0XyJ6LPRnFpE/4OYjOq+5FWd2Mn38pauQ1rDjIB hBENZwa2Vv7jHWLAB2rGjGJ627VQ0YsONZ1A5c4Zw/pLyeiI6sKQZ0pKD1BCh4FI CaW1XTDITXdcAMPaSNHgnbGZTdk6Xfw+7jM3DJK6q3jvl8YqlQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFKv/b1IBhL4uzfo8ZOO1grgRbDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU2NjAzMTEtM2U5ZC0z ODE5LTk3NDMtZTg0NTU4NzdlYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrDAwQA aPtWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAKxV4jnt8aaG1HgmqTC56/HS1RxbhOyd35nNg91Q1HeZoTn tVQ35yFgT9+sepdOhYECgyo0itvhBLDlue3WFEFZ/3Z5kLs+qReClEcGHDx4W8ok gnuBP4cl/KN3WbaUe7J/aEEu1SIzt/Iu+VMuQxZpVZiPk7yFS4AQt7AsV0FijDyO ilnF5W5Nv9fSLP6qdAZ/XePd5qGnKPqJHkb9yIgbTtBL34Ner25WY66zC6uImDlf daVL9teYr6QNLRFo0vYw1175TlU7pWHNESnYOcwpfeRavIs4+vP8AhKorTaTFZ6z KKh6r7XbDWlXYk9bTuJx8ym/agmnnSFAiPutOzY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:43:54 2025 by rpki-client