$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa File: bf34a922-0471-34af-bb29-1cebd856cee0.roa (raw, json) Hash identifier: OtqEpIOCP0a5jvnYgtGtI++m0fGYK/yTh9Zd3ORzOLE= Subject key identifier: 0E:17:74:60:37:4E:75:A5:2E:5E:66:D3:FE:11:84:69:D1:BB:5A:BA Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F4328584BBE403C7441166322D50B7A40 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 62533 IP address blocks: 104.219.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3c:74:41:16:63:22:d5:0b:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=9d80a292-fb15-4a01-bf70-6864039a12f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:90:d3:32:c5:02:e5:ca:51:27:6b:ff:45: f1:c7:00:36:55:1e:9c:11:fe:b8:80:dc:93:7a:62: d3:96:19:57:81:d7:42:06:8e:93:a9:0b:e6:3d:7a: aa:02:59:16:6f:af:7e:56:31:bd:d3:dd:17:f5:ac: 55:60:a6:df:8d:a6:9d:af:df:73:2a:69:71:23:2b: 9f:88:b9:08:27:06:3f:3d:d4:19:07:66:14:2f:d7: da:65:f3:20:51:9f:6a:59:e0:b8:72:9a:49:27:2c: 73:8a:5d:c9:47:bf:81:a7:c7:5c:d7:32:8d:04:61: 79:c1:b8:0f:1b:a3:54:44:a7:59:58:e5:3b:44:7a: fe:4e:e8:72:2a:c7:ce:38:bf:0e:c5:16:92:96:39: c8:10:9d:4f:d3:c1:7e:dc:76:72:8c:83:1f:a4:4e: 1b:f5:75:fc:50:bd:e5:dc:9f:1e:f2:41:be:15:e6: 80:14:4a:10:0d:d1:14:22:99:1f:44:59:6f:d9:06: 40:9a:26:24:ff:e0:62:83:da:07:d8:f8:2d:f2:42: cb:35:b3:a9:36:c5:55:e2:4e:09:97:b9:c5:dd:18: e2:6f:18:db:7b:be:df:a7:c1:63:9e:e2:48:7f:82: 5e:e7:f4:e7:e0:a7:4c:20:65:3a:69:f1:e3:59:7f: b3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:74:60:37:4E:75:A5:2E:5E:66:D3:FE:11:84:69:D1:BB:5A:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c9:0d:b9:f6:72:a8:68:b3:ab:cc:a4:33:72:1c:b7:96:00: 26:66:46:78:f6:c5:c6:72:68:28:21:4d:57:6a:36:01:cc:68: 8c:7e:bb:34:32:c3:80:22:32:9a:71:1a:81:7e:04:7d:9c:35: 58:ae:e4:a4:e8:c0:9a:7e:2b:09:4b:da:2d:70:03:70:1a:b4: 57:c2:00:7e:f6:61:da:f9:f8:e6:57:40:65:f8:d4:63:8c:6f: 98:16:c5:3a:42:14:78:79:27:a8:09:6e:69:13:b3:53:29:2f: 9c:64:50:42:9e:4f:c9:0f:a9:32:3f:f0:6d:2a:9d:b2:39:ca: 02:2e:ac:58:9b:1e:0c:94:98:7c:e8:3d:b6:1f:71:08:7f:06: 19:66:64:3c:f0:76:4a:3a:63:34:02:72:36:7f:d9:bb:b3:cd: c8:d4:6d:5a:dd:3b:d0:03:7d:2b:7b:0f:b4:6f:1c:cd:fb:45: dc:bf:5c:da:0e:4a:ae:40:b0:eb:37:2d:f1:1e:9f:bc:4e:fa: f6:46:5e:15:b3:c3:3a:fb:50:3b:e4:4d:3d:0b:b0:c5:1d:1f: 99:16:2c:2d:2f:ab:34:13:33:3c:3b:64:66:70:54:11:96:26: d9:50:e3:58:06:ad:61:32:27:66:49:c6:c5:da:27:e2:0d:34: da:30:a5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDx0QRZjItULekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWQ4MGEyOTItZmIxNS00YTAxLWJmNzAtNjg2NDAzOWExMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUGQ0zLFAuXKUSdr/0XxxwA2VR6cEf64gNyT emLTlhlXgddCBo6TqQvmPXqqAlkWb69+VjG9090X9axVYKbfjaadr99zKmlxIyuf iLkIJwY/PdQZB2YUL9faZfMgUZ9qWeC4cppJJyxzil3JR7+Bp8dc1zKNBGF5wbgP G6NURKdZWOU7RHr+TuhyKsfOOL8OxRaSljnIEJ1P08F+3HZyjIMfpE4b9XX8UL3l 3J8e8kG+FeaAFEoQDdEUIpkfRFlv2QZAmiYk/+Big9oH2Pgt8kLLNbOpNsVV4k4J l7nF3Rjibxjbe77fp8FjnuJIf4Je5/Tn4KdMIGU6afHjWX+zzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4XdGA3TnWlLl5m0/4RhGnRu1q6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvYmYzNGE5MjItMDQ3MS0z NGFmLWJiMjktMWNlYmQ4NTZjZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/JDbn2cqhos6vMpDNyHLeWACZmRnj2xcZyaCghTVdqNgHMaIx+uzQy w4AiMppxGoF+BH2cNViu5KTowJp+KwlL2i1wA3AatFfCAH72Ydr5+OZXQGX41GOM b5gWxTpCFHh5J6gJbmkTs1MpL5xkUEKeT8kPqTI/8G0qnbI5ygIurFibHgyUmHzo PbYfcQh/BhlmZDzwdko6YzQCcjZ/2buzzcjUbVrdO9ADfSt7D7RvHM37Rdy/XNoO Sq5AsOs3LfEen7xO+vZGXhWzwzr7UDvkTT0LsMUdH5kWLC0vqzQTMzw7ZGZwVBGW JtlQ41gGrWEyJ2ZJxsXaJ+INNNowpeI= -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:01 2025 by rpki-client