$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa File: f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json) Hash identifier: 444dKPjG5n/Qf63TXW01JJnZTSxxXTr8W5hqtX+3st0= Subject key identifier: 11:B0:83:5E:86:65:98:23:06:D8:73:97:2E:4D:2C:B8:56:2A:0F:8B Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B33F1A40E4C2B49FF74261540 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 5650 IP address blocks: 104.251.80.0/24 maxlen: 24 104.251.85.0/24 maxlen: 24 104.251.89.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 158.115.224.0/24 maxlen: 24 158.115.225.0/24 maxlen: 24 158.115.226.0/24 maxlen: 24 158.115.227.0/24 maxlen: 24 158.115.248.0/24 maxlen: 24 158.115.249.0/24 maxlen: 24 158.115.250.0/24 maxlen: 24 158.115.251.0/24 maxlen: 24 172.98.185.0/24 maxlen: 24 206.127.218.0/24 maxlen: 24 207.230.96.0/23 maxlen: 23 207.230.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a4:0e:4c:2b:49:ff:74:26:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=b44a8293-85f7-409a-8352-32ebab328999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:8e:f0:26:64:4d:d4:3d:86:75:fe:e8:44: 59:b8:f3:e8:a6:85:e4:6f:c5:17:78:a9:f9:25:a9: 9c:54:dc:7b:8c:2f:af:e3:eb:42:a3:25:42:c1:e0: a8:f8:e9:02:ea:c0:9d:f8:89:1b:f9:8b:76:bf:f1: 26:d5:3f:b4:e8:30:9d:74:c1:0d:7b:6d:1e:59:af: bd:16:a4:41:b6:1a:13:33:57:2b:52:23:c3:4e:cc: fb:39:01:3b:47:f0:1d:cc:6e:69:25:53:34:7f:ef: 2c:40:e3:f6:ae:12:de:f3:ff:9c:00:7a:9f:4a:5c: e4:6a:ec:2b:ee:0c:84:a0:f2:89:fd:e4:2b:1e:3c: 62:6e:58:1c:38:9f:f4:42:31:22:e8:65:c9:1f:2f: 58:31:3c:2a:7d:53:b5:0c:60:a6:b0:12:06:4f:17: 67:be:17:46:e5:76:06:15:b0:5b:88:59:ef:91:e7: de:68:7e:cd:8a:e0:a2:00:53:51:96:9e:01:58:97: 81:f8:7b:72:d8:ba:ab:5f:a8:c8:a3:eb:8b:e5:75: 39:79:1d:dd:72:12:c8:50:27:39:b2:02:02:e8:40: 7e:28:72:09:c5:52:80:c2:84:46:33:6c:43:17:4f: 34:f3:f3:6a:04:db:80:3b:da:fd:9c:1e:f9:ca:42: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B0:83:5E:86:65:98:23:06:D8:73:97:2E:4D:2C:B8:56:2A:0F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.80.0/24 104.251.85.0/24 104.251.89.0/24 104.251.91.0/24 158.115.224.0/22 158.115.248.0/22 172.98.185.0/24 206.127.218.0/24 207.230.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:03:6c:06:2d:29:af:e2:b3:50:5f:3a:54:b6:7b:d3:bd:dd: 86:6b:76:e3:20:d7:36:73:e8:0a:b6:dc:70:08:96:82:f2:58: 63:e8:5d:84:2e:a0:cb:4b:ce:3a:40:c4:1b:26:3f:bc:ec:70: a6:f9:4f:b1:ef:7e:d2:3e:fa:57:57:80:e3:ac:a8:02:ba:20: b2:b1:a5:1e:2e:cd:1d:df:69:43:b7:65:37:70:2a:65:55:00: 46:ac:76:69:89:7e:44:88:23:fa:45:f3:1a:3a:5c:d0:11:ae: 38:9b:f8:31:d4:58:42:a9:cc:07:d2:85:99:53:5f:00:ff:ce: 57:32:db:ea:52:25:f2:f2:eb:a6:a6:5f:b3:00:d5:6f:de:e4: b8:13:dd:4e:00:cb:07:1a:85:e4:64:59:10:6b:bd:d6:e6:40: 96:85:f0:50:85:bd:d0:d1:ff:c2:2c:68:6c:ca:55:ac:4e:6c: af:b2:93:ac:fc:eb:ad:0c:b3:f5:8e:60:41:24:b5:58:60:6c: a7:6a:ba:cb:b2:65:9c:af:85:65:a4:72:c3:a8:a5:bd:74:09: bb:81:33:58:40:85:1e:de:95:be:53:36:68:c0:05:42:8d:27: 23:77:90:25:27:53:92:ba:50:fb:9a:11:32:a8:91:42:4a:af: 96:38:f3:85 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEsz8aQOTCtJ/3QmFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YjQ0YTgyOTMtODVmNy00MDlhLTgzNTItMzJlYmFiMzI4OTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI6O8CZkTdQ9hnX+6ERZuPPopoXkb8UXeKn5 JamcVNx7jC+v4+tCoyVCweCo+OkC6sCd+Ikb+Yt2v/Em1T+06DCddMENe20eWa+9 FqRBthoTM1crUiPDTsz7OQE7R/AdzG5pJVM0f+8sQOP2rhLe8/+cAHqfSlzkauwr 7gyEoPKJ/eQrHjxiblgcOJ/0QjEi6GXJHy9YMTwqfVO1DGCmsBIGTxdnvhdG5XYG FbBbiFnvkefeaH7NiuCiAFNRlp4BWJeB+Hty2LqrX6jIo+uL5XU5eR3dchLIUCc5 sgIC6EB+KHIJxVKAwoRGM2xDF0808/NqBNuAO9r9nB75ykJQMQIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFBGwg16GZZgjBthzly5NLLhWKg+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjE1OWQ5NDktOWMwOS0z M2NmLThkZjItYWI5M2MyMjVhNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAaPtQAwQA aPtVAwQAaPtZAwQAaPtbAwQCnnPgAwQCnnP4AwQArGK5AwQAzn/aAwQCz+ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwDbAYtKa/is1BfOlS2e9O93YZrduMg1zZz6Aq23HAIloLyWGPoXYQu oMtLzjpAxBsmP7zscKb5T7HvftI++ldXgOOsqAK6ILKxpR4uzR3faUO3ZTdwKmVV AEasdmmJfkSII/pF8xo6XNARrjib+DHUWEKpzAfShZlTXwD/zlcy2+pSJfLy66am X7MA1W/e5LgT3U4AywcaheRkWRBrvdbmQJaF8FCFvdDR/8IsaGzKVaxObK+yk6z8 660Ms/WOYEEktVhgbKdqusuyZZyvhWWkcsOopb10CbuBM1hAhR7elb5TNmjABUKN JyN3kCUnU5K6UPuaETKokUJKr5Y484U= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:04 2025 by rpki-client