$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa File: cf1a0411-affa-31be-a610-7a5e46691069.roa (raw, json) Hash identifier: IpS6d7sPDrAtf3zG59CUffHSfuMp3HGBaGqy+8xLupE= Subject key identifier: BB:8B:7F:94:F6:A0:BC:49:32:E6:CD:9A:3D:BF:3D:5C:65:88:B4:7D Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AE8912DC44975C721A8F25680 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 174 IP address blocks: 104.218.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2d:c4:49:75:c7:21:a8:f2:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=99a90c26-23bb-4da5-8449-aacd777064e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:42:da:99:d0:50:4d:7f:82:de:79:4e:b1: ec:95:fe:eb:ee:a7:73:f2:d2:cb:a6:4b:0c:5d:3e: 5b:f4:4e:96:b4:5a:e2:45:45:d3:ac:43:89:5d:63: a5:02:22:11:1c:c4:fd:7e:2e:01:4d:ac:4b:92:f2: 18:0d:75:d0:5d:44:85:55:ad:c7:b5:49:fb:41:d5: f5:89:bb:4b:88:5a:3f:17:4c:5a:f4:a1:07:1a:7b: 43:a9:41:6f:94:57:eb:91:a3:39:86:a3:6b:2f:68: d6:9d:99:43:cf:84:3a:74:36:97:e3:80:f6:e7:3c: 99:b1:45:7c:80:0e:2b:c6:a4:71:89:fa:eb:b9:42: da:25:55:95:e2:c4:b3:50:6d:26:4e:ac:cf:8a:7f: 36:bb:65:03:e5:a0:8c:2e:3b:68:7f:e3:5e:78:c8: d4:62:2e:8f:c8:d7:b3:0f:fa:ef:c4:5c:4e:1d:60: 08:ec:95:ca:3c:71:a3:f1:5b:d9:c2:95:03:15:3a: c7:46:80:08:b8:69:73:2c:a9:71:81:f9:a2:23:9e: 14:d2:cc:fa:4b:3b:cc:c7:67:c0:66:b8:8a:5d:96: e2:43:f2:26:ab:8b:69:bb:d9:88:b0:53:e1:a3:ab: f3:47:3b:90:ec:bd:61:d8:0f:dd:b9:33:70:2a:3c: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:7F:94:F6:A0:BC:49:32:E6:CD:9A:3D:BF:3D:5C:65:88:B4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cf1a0411-affa-31be-a610-7a5e46691069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5a:fa:91:ff:51:58:ed:e2:5d:da:34:0e:b6:3c:d8:9a:e0: f2:dd:db:ff:38:87:13:26:e9:9b:a5:aa:59:b6:08:1d:3e:33: b5:80:be:dc:2f:45:33:d8:a5:78:75:22:6c:c1:23:b5:d8:dd: b4:0c:94:fc:82:a5:6c:83:d9:30:18:ab:4d:7d:23:20:23:ad: 60:c4:1a:ae:81:7a:1d:c6:56:b7:06:eb:2e:b7:f6:ae:96:7f: c8:59:0e:07:ff:c1:85:bc:29:26:dc:6d:6e:84:81:25:c1:ca: 3b:e5:e4:9f:0f:6c:4a:f7:ef:74:77:a9:97:a5:32:b8:e4:f8: 8c:09:55:5a:32:6f:b9:75:fe:72:db:24:2f:03:7e:8e:d8:97: c0:45:20:bc:76:14:74:83:f4:22:f5:88:d8:e5:0f:4e:22:1f: 2c:72:e2:c2:49:63:00:fb:7b:e6:09:8f:69:dd:b6:ca:f1:56: 58:88:e9:ac:70:b9:af:86:47:b3:82:ba:e8:33:97:60:0d:c5: bc:fa:8a:0f:f3:4d:e9:d7:3a:ad:40:d8:51:47:9d:0f:c2:78: c0:51:36:a2:7c:52:3e:7d:d8:ba:54:55:13:8b:d5:70:ff:33: 7c:eb:24:b7:d6:83:02:59:4e:18:e5:25:85:e2:99:91:26:4b: 0a:4b:29:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS3ESXXHIajyVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OTlhOTBjMjYtMjNiYi00ZGE1LTg0NDktYWFjZDc3NzA2NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJC2pnQUE1/gt55TrHslf7r7qdz8tLLpksM XT5b9E6WtFriRUXTrEOJXWOlAiIRHMT9fi4BTaxLkvIYDXXQXUSFVa3HtUn7QdX1 ibtLiFo/F0xa9KEHGntDqUFvlFfrkaM5hqNrL2jWnZlDz4Q6dDaX44D25zyZsUV8 gA4rxqRxifrruULaJVWV4sSzUG0mTqzPin82u2UD5aCMLjtof+NeeMjUYi6PyNez D/rvxFxOHWAI7JXKPHGj8VvZwpUDFTrHRoAIuGlzLKlxgfmiI54U0sz6SzvMx2fA ZriKXZbiQ/Imq4tpu9mIsFPho6vzRzuQ7L1h2A/duTNwKjwvmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuLf5T2oLxJMubNmj2/PVxliLR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2YxYTA0MTEtYWZmYS0z MWJlLWE2MTAtN2E1ZTQ2NjkxMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFta+pH/UVjt4l3aNA62PNia4PLd2/84hxMm6Zulqlm2CB0+M7WAvtwv RTPYpXh1ImzBI7XY3bQMlPyCpWyD2TAYq019IyAjrWDEGq6Beh3GVrcG6y639q6W f8hZDgf/wYW8KSbcbW6EgSXByjvl5J8PbEr373R3qZelMrjk+IwJVVoyb7l1/nLb JC8Dfo7Yl8BFILx2FHSD9CL1iNjlD04iHyxy4sJJYwD7e+YJj2ndtsrxVliI6axw ua+GR7OCuugzl2ANxbz6ig/zTenXOq1A2FFHnQ/CeMBRNqJ8Uj592LpUVROL1XD/ M3zrJLfWgwJZThjlJYXimZEmSwpLKRc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:10 2025 by rpki-client