$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa File: 23814664-a1e4-3868-9364-a0796ad96515.roa (raw, json) Hash identifier: G9JM1RNHRP6iDpANrVpQU4PxPvs8w9pRTAsUpPyGFkA= Subject key identifier: 57:F8:3F:12:51:01:D6:AF:FD:F9:BD:B4:51:F4:EB:EE:DA:D7:82:CA Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF9513D909F87ED3DA829A968 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 46261 IP address blocks: 104.251.80.0/24 maxlen: 24 104.251.85.0/24 maxlen: 24 104.251.89.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3d:90:9f:87:ed:3d:a8:29:a9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=1c878c8c-fd04-4c87-a2a4-a7f99d9cc5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:5a:31:28:be:ff:77:05:36:50:37:4d:8c: 36:a3:4e:b7:3a:ba:b0:ca:99:b8:8a:b9:2a:4f:9f: 7d:cb:f9:d5:59:e5:00:2a:a2:da:fb:03:db:7a:d5: f4:e8:6d:5d:a2:ef:a8:f4:82:76:74:82:e1:78:ee: 63:53:df:02:34:62:17:b5:96:ba:03:7a:37:e4:2b: e0:6d:1f:8a:7b:cb:a4:e8:2d:a6:98:31:10:c0:fb: 46:16:72:2d:4e:a9:0a:b0:87:10:0d:b4:ae:af:19: b9:8f:b9:a8:b4:d0:49:67:61:16:17:13:0c:30:83: 8c:1d:82:f6:63:fc:5d:77:8f:61:5d:ee:22:51:36: 25:82:39:0a:b1:8a:ec:3a:f6:12:2a:72:25:2a:dd: 4c:a6:02:74:5c:5f:c0:34:21:f7:60:0d:8f:be:5d: 52:be:07:3f:fd:e1:7e:53:a3:12:f8:42:57:80:44: 19:d3:50:41:9d:18:36:6d:be:c7:e3:2d:27:d1:87: 03:6d:f5:72:5b:4e:82:ce:3d:6a:d2:6d:d8:a0:6b: 77:74:6c:59:df:8b:c1:66:61:20:9d:d0:80:f9:6e: 8b:f2:e0:2d:19:f2:97:eb:f1:23:6d:63:7a:b6:9d: bb:3f:2d:65:a0:29:82:b7:3c:5a:17:70:da:51:8f: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F8:3F:12:51:01:D6:AF:FD:F9:BD:B4:51:F4:EB:EE:DA:D7:82:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.80.0/24 104.251.85.0/24 104.251.89.0/24 104.251.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b7:15:77:eb:fb:3d:d5:fa:46:26:bd:b3:51:e1:1c:c6:92: aa:e8:a5:ce:54:17:fa:14:54:1b:1a:c6:a4:dd:bf:03:92:50: e3:d2:ff:29:b8:a7:b0:2d:77:95:39:0a:1f:7d:16:57:34:33: 8a:3a:1c:4f:a2:c1:3f:8b:74:6f:f5:f1:ef:bf:2f:83:48:88: 0a:f7:30:a8:13:73:f9:4c:77:81:96:76:58:36:ff:19:64:9a: 8e:75:95:b4:41:24:28:8e:20:54:23:c0:c8:27:ce:43:51:9a: 12:f5:b1:61:03:e7:2e:66:86:e5:cf:24:04:38:05:07:74:ea: 60:c6:43:e2:85:8b:9a:ed:d6:68:58:30:94:1b:dc:e2:cf:ce: 19:c6:e3:fa:2b:74:2a:dd:c9:d0:da:40:46:82:00:66:49:81: 28:a6:8b:21:76:ac:03:37:d6:a6:2b:36:96:88:67:cb:52:c7: 4a:5e:58:5b:88:67:d7:59:86:7a:91:f1:a3:f1:55:3c:20:ae: 33:75:df:eb:e9:f2:62:6e:22:10:70:51:2d:ad:5a:50:b8:2b: 36:a4:b3:e6:76:f3:d9:5e:c1:53:77:5c:63:5c:96:81:49:69: 88:29:82:36:f9:8d:ae:8f:54:80:f0:a4:53:da:d9:b0:ac:cb: e4:7f:87:ab -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEr5UT2Qn4ftPagpqWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWM4NzhjOGMtZmQwNC00Yzg3LWEyYTQtYTdmOTlkOWNjNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtaMSi+/3cFNlA3TYw2o063Orqwypm4irkq T599y/nVWeUAKqLa+wPbetX06G1dou+o9IJ2dILheO5jU98CNGIXtZa6A3o35Cvg bR+Ke8uk6C2mmDEQwPtGFnItTqkKsIcQDbSurxm5j7motNBJZ2EWFxMMMIOMHYL2 Y/xdd49hXe4iUTYlgjkKsYrsOvYSKnIlKt1MpgJ0XF/ANCH3YA2Pvl1Svgc//eF+ U6MS+EJXgEQZ01BBnRg2bb7H4y0n0YcDbfVyW06Czj1q0m3YoGt3dGxZ34vBZmEg ndCA+W6L8uAtGfKX6/EjbWN6tp27Py1loCmCtzxaF3DaUY+RowIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFFf4PxJRAdav/fm9tFH06+7a14LKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjM4MTQ2NjQtYTFlNC0z ODY4LTkzNjQtYTA3OTZhZDk2NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaPtQAwQA aPtVAwQAaPtZAwQAaPtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGa3FXfr+z3V+kYmvbNR4RzGkqropc5U F/oUVBsaxqTdvwOSUOPS/ym4p7Atd5U5Ch99Flc0M4o6HE+iwT+LdG/18e+/L4NI iAr3MKgTc/lMd4GWdlg2/xlkmo51lbRBJCiOIFQjwMgnzkNRmhL1sWED5y5mhuXP JAQ4BQd06mDGQ+KFi5rt1mhYMJQb3OLPzhnG4/ordCrdydDaQEaCAGZJgSimiyF2 rAM31qYrNpaIZ8tSx0peWFuIZ9dZhnqR8aPxVTwgrjN13+vp8mJuIhBwUS2tWlC4 Kzaks+Z289lewVN3XGNcloFJaYgpgjb5ja6PVIDwpFPa2bCsy+R/h6s= -----END CERTIFICATE-----Generated at Tue Aug 26 12:28:54 2025 by rpki-client