$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa File: d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json) Hash identifier: Lhy4KKLRBfSyIOQjqWLWTbVhCkaeaCYJBQAlA1nYNl4= Subject key identifier: E2:70:03:88:7D:72:9F:C7:61:63:A7:B0:55:DC:F3:0A:92:59:D5:60 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A10353DA8977F0D3334796300 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 23470 IP address blocks: 104.251.85.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3d:a8:97:7f:0d:33:34:79:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=48e2a22c-7a7a-4ddc-bddc-25d63d4db23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:ee:0c:e9:99:54:8c:7f:7f:e0:86:9a:f3: 98:ec:be:d8:89:60:9d:27:f9:c4:3e:10:50:0e:eb: aa:14:67:11:58:1a:90:15:c4:b1:e3:84:af:fb:2c: 3e:cb:1d:6f:90:44:54:fd:c4:4c:a3:89:f9:13:73: ce:0a:e6:aa:d9:0b:b5:ab:5e:b8:55:b3:2e:d2:02: 62:bc:40:d9:de:98:6e:55:68:5e:4b:c1:9e:7a:b0: 86:3b:1a:e4:61:01:63:67:35:09:a8:9d:ca:f0:56: b7:59:92:14:f0:e9:ec:07:53:51:20:e4:21:79:e0: 94:f3:02:6f:78:a4:81:3e:66:01:fd:24:ed:8b:35: 38:fd:bf:54:fd:ec:f4:1c:6a:42:f1:14:a1:5f:28: 09:53:05:c6:7c:ac:25:eb:fb:7c:f0:54:3c:ec:81: d0:c1:50:2a:f4:c3:ae:a3:35:d8:ae:57:d0:d4:b5: b6:2e:23:33:22:63:73:a9:9e:2f:91:80:08:53:21: 1c:91:ae:c6:6c:10:f9:08:4e:a1:8f:57:a7:56:86: 7d:da:28:de:8a:81:52:e4:91:4e:68:75:65:53:41: c0:68:42:eb:1e:f8:b5:23:75:fc:68:2c:4f:b1:1e: 4f:fe:5b:78:5a:06:de:d9:f1:ab:57:94:3f:b1:f4: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:03:88:7D:72:9F:C7:61:63:A7:B0:55:DC:F3:0A:92:59:D5:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.85.0/24 104.251.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0e:c4:45:9d:6a:d4:87:ae:8f:7a:a7:15:94:01:08:c5:66: 43:a4:ff:93:95:99:02:5a:db:1f:4e:f6:bc:ac:a0:63:6a:fc: f1:70:ef:be:07:40:94:fd:5f:4b:90:dd:2f:3b:15:9c:44:16: d9:8a:57:37:4d:05:57:0d:35:8e:6a:fe:15:06:f9:1c:f0:11: d6:c6:11:ea:67:8b:8b:30:4b:8e:c4:f6:28:50:94:bf:43:e5: 64:22:aa:e4:3f:3c:51:ef:eb:4a:e8:e0:4e:7a:e5:18:09:8a: 5a:de:32:43:19:db:4b:c4:d5:ea:ca:2a:dd:6c:13:28:00:47: da:dc:9f:40:66:f6:8d:73:0b:49:06:5d:ca:bb:72:69:a9:3e: c7:b3:34:93:e4:e9:e0:98:a2:55:66:e8:2b:61:5e:77:d5:76: f8:b3:87:26:38:a7:59:49:bb:83:9e:2d:76:60:f9:ad:21:78: 95:a4:34:13:ec:33:29:09:f1:bf:c1:ef:4f:ea:b2:85:b0:71: e4:6b:e8:ac:6b:00:0e:f5:25:87:69:90:1b:13:7e:87:37:2c: a5:c8:ba:5c:2b:f3:d8:6f:ea:36:a7:5a:ae:0a:27:83:63:24: f7:3c:1c:44:8d:11:8e:78:0b:3b:a1:1e:fd:90:cf:01:7a:b8: 1e:66:7a:bc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoQNT2ol38NMzR5YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NDhlMmEyMmMtN2E3YS00ZGRjLWJkZGMtMjVkNjNkNGRiMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnonuDOmZVIx/f+CGmvOY7L7YiWCdJ/nEPhBQ DuuqFGcRWBqQFcSx44Sv+yw+yx1vkERU/cRMo4n5E3POCuaq2Qu1q164VbMu0gJi vEDZ3phuVWheS8GeerCGOxrkYQFjZzUJqJ3K8Fa3WZIU8OnsB1NRIOQheeCU8wJv eKSBPmYB/STtizU4/b9U/ez0HGpC8RShXygJUwXGfKwl6/t88FQ87IHQwVAq9MOu ozXYrlfQ1LW2LiMzImNzqZ4vkYAIUyEcka7GbBD5CE6hj1enVoZ92ijeioFS5JFO aHVlU0HAaELrHvi1I3X8aCxPsR5P/lt4Wgbe2fGrV5Q/sfSlNQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOJwA4h9cp/HYWOnsFXc8wqSWdVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDhkYzg2Y2ItMTYxZi0z OTk1LThkOTktZGQyNDBkZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtVAwQA aPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIQOxEWdatSHro96pxWUAQjFZkOk/5OVmQJa2x9O9rysoGNq /PFw774HQJT9X0uQ3S87FZxEFtmKVzdNBVcNNY5q/hUG+RzwEdbGEepni4swS47E 9ihQlL9D5WQiquQ/PFHv60ro4E565RgJilreMkMZ20vE1erKKt1sEygAR9rcn0Bm 9o1zC0kGXcq7cmmpPsezNJPk6eCYolVm6CthXnfVdvizhyY4p1lJu4OeLXZg+a0h eJWkNBPsMykJ8b/B70/qsoWwceRr6KxrAA71JYdpkBsTfoc3LKXIulwr89hv6jan Wq4KJ4NjJPc8HESNEY54CzuhHv2QzwF6uB5merw= -----END CERTIFICATE-----Generated at Sun Jun 15 11:59:46 2025 by rpki-client