$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa File: bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa (raw, json) Hash identifier: sU02JsnXbKT1Y0UEaIwRZQkq/KRc6ZKXQ0mpRm1dJTw= Subject key identifier: 8C:68:EE:AB:12:1D:10:6E:34:8E:C8:F6:9F:42:A7:8D:15:ED:6D:28 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B76F2555C81618169CA3B34E0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 104.218.198.0/24 maxlen: 24 104.251.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:55:5c:81:61:81:69:ca:3b:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f9085043-ccea-41d3-8158-09c5a0bb7515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:4a:c3:a6:ae:eb:19:88:52:b9:18:07:77: bc:9b:02:dd:9d:48:de:fa:0f:55:d5:6c:7b:b0:53: 36:d0:5f:b4:9d:b4:33:38:28:d3:90:a6:a9:64:57: 39:9b:92:c6:2f:af:97:fb:ea:b6:a5:ca:aa:4b:6e: 12:ba:6e:e0:2e:8f:9f:53:2b:f8:36:c9:fd:25:4d: 7a:f2:ca:f3:a2:2b:77:12:32:3a:f0:30:c9:a4:74: c8:6d:45:1d:42:ed:5e:c7:85:72:2d:35:fe:3c:81: 3a:b6:f6:bb:2d:c1:35:a4:a0:d0:5a:28:6a:02:ab: db:07:4a:cc:f9:3d:08:30:65:88:91:d0:3c:0d:63: b6:5f:d8:48:df:62:8c:7d:c5:b7:ac:2c:7d:53:0d: 9a:2f:56:3b:d7:c0:c5:15:6e:b2:e9:46:e2:33:15: 8e:3c:ec:bc:d5:59:65:aa:13:18:d2:48:7a:8a:8d: 29:2b:c5:72:ff:c1:6d:d2:0c:7c:37:4c:66:fc:bd: 3b:68:e5:6a:72:e1:9a:73:d3:06:28:db:0c:0d:0d: 50:02:bd:c5:cc:61:f0:31:de:ac:73:85:1f:34:98: 69:8d:16:db:e4:3a:be:4c:fd:f3:f7:06:66:3f:21: 48:d7:43:83:8f:8b:e9:04:f7:0e:00:a8:9b:ec:1e: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:EE:AB:12:1D:10:6E:34:8E:C8:F6:9F:42:A7:8D:15:ED:6D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.198.0/24 104.251.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fb:3d:88:d8:59:ab:69:41:4b:03:6c:2a:0a:e5:ad:41:12: 5e:82:1e:4d:09:66:08:b5:20:70:57:15:ad:f9:07:16:cb:03: 0e:f2:fe:20:11:34:b3:70:77:df:ad:2d:cc:6f:d4:88:bd:02: 24:64:d7:ce:e6:60:57:e9:ad:7d:30:7a:20:59:2c:f7:16:07: 5c:a2:01:78:2b:32:c4:dc:2f:dd:0e:93:e1:0d:0d:f3:24:05: e2:86:08:55:39:38:dc:d1:b1:88:20:b5:b6:95:e0:ee:f8:92: 0c:d0:60:00:3b:10:74:e0:ec:e9:cb:93:fe:49:51:1b:80:74: 9e:81:68:ee:23:59:82:0a:92:66:86:2b:fc:68:3b:66:08:7c: 10:c9:a9:01:bb:7e:63:bd:7d:f7:c3:a1:a3:42:66:6f:fa:01: a9:c4:e5:3c:7d:45:c6:f2:15:0d:00:ea:d2:40:3f:8e:52:4b: 8a:6b:11:c8:93:d2:5d:50:4c:84:89:06:8a:d2:0d:1d:0c:12: 5f:57:df:60:9b:82:0b:0c:66:bc:e8:82:27:7e:66:1b:f8:35: 84:8d:77:b5:a9:2f:9e:aa:3b:37:09:9c:c1:1d:ba:39:ed:78: bb:c6:52:a2:af:65:32:cb:57:2e:9b:c7:bc:ca:dd:55:b8:e8: 38:1c:92:7c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt28lVcgWGBaco7NOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjkwODUwNDMtY2NlYS00MWQzLTgxNTgtMDljNWEwYmI3NTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu09Kw6au6xmIUrkYB3e8mwLdnUje+g9V1Wx7 sFM20F+0nbQzOCjTkKapZFc5m5LGL6+X++q2pcqqS24Sum7gLo+fUyv4Nsn9JU16 8srzoit3EjI68DDJpHTIbUUdQu1ex4VyLTX+PIE6tva7LcE1pKDQWihqAqvbB0rM +T0IMGWIkdA8DWO2X9hI32KMfcW3rCx9Uw2aL1Y718DFFW6y6UbiMxWOPOy81Vll qhMY0kh6io0pK8Vy/8Ft0gx8N0xm/L07aOVqcuGac9MGKNsMDQ1QAr3FzGHwMd6s c4UfNJhpjRbb5Dq+TP3z9wZmPyFI10ODj4vpBPcOAKib7B4wAwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIxo7qsSHRBuNI7I9p9Cp40V7W0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmZjNDdjYzctMTI5Yi0z MDY4LTg1ZGYtNmRlZDJkYmUyZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrGAwQA aPteMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAID7PYjYWatpQUsDbCoK5a1BEl6CHk0JZgi1IHBXFa35BxbL Aw7y/iARNLNwd9+tLcxv1Ii9AiRk187mYFfprX0weiBZLPcWB1yiAXgrMsTcL90O k+ENDfMkBeKGCFU5ONzRsYggtbaV4O74kgzQYAA7EHTg7OnLk/5JURuAdJ6BaO4j WYIKkmaGK/xoO2YIfBDJqQG7fmO9fffDoaNCZm/6AanE5Tx9RcbyFQ0A6tJAP45S S4prEciT0l1QTISJBorSDR0MEl9X32CbggsMZrzogid+Zhv4NYSNd7WpL56qOzcJ nMEdujnteLvGUqKvZTLLVy6bx7zK3VW46Dgcknw= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:05 2025 by rpki-client