$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa File: bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa (raw, json) Hash identifier: d46j4fCO5xKd2joGErthq4naRzoZaR7Tpzzmh3H1ETM= Subject key identifier: 99:00:43:45:39:D3:E3:F6:2A:DA:41:AC:BE:B5:86:35:5B:AD:D0:76 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584EB8473DD461E3171EAF0D17C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 104.218.198.0/24 maxlen: 24 104.251.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:3d:d4:61:e3:17:1e:af:0d:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=e272228a-dd00-4906-bc5c-f1976a2ef2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:7f:57:45:33:83:d9:37:e2:ee:e8:45:ca: e9:48:ab:fc:76:a5:8d:86:a5:6c:44:7c:4d:8a:53: be:42:51:ff:38:c0:ae:cc:7d:22:bb:9e:f4:72:85: 70:fd:80:84:55:00:8c:37:ef:fb:4a:73:dd:62:65: 39:f7:38:1c:6b:d4:af:72:3e:94:a6:d8:81:c0:ac: 74:44:74:0e:60:cb:8e:b9:5e:06:1a:24:92:ea:80: c1:c2:80:12:72:17:96:fe:d0:7c:96:d0:c8:d6:8e: 90:96:00:6f:f7:5c:7a:4c:7b:9c:18:41:57:25:07: 17:75:c7:96:49:6b:89:8f:6f:21:aa:de:7b:b2:5a: 91:1a:50:5f:9d:18:22:81:83:11:d1:60:42:14:71: e6:46:ca:1e:d9:c4:a3:6c:0e:7b:3b:0d:0d:02:eb: 55:a0:24:ea:f3:83:3a:b4:11:a9:0f:da:20:26:5e: c9:7f:1b:86:a4:d5:87:81:c2:13:b1:75:df:e2:af: 16:bc:02:fe:c6:b0:a8:e5:28:22:76:3b:6e:dc:a8: d0:41:db:a5:2e:71:d0:86:45:04:d1:8f:7b:6e:58: c3:bd:74:18:88:48:4a:8b:31:86:e1:51:bb:7e:4b: 9a:23:03:e1:60:df:ae:53:e4:62:ca:c8:07:8e:93: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:00:43:45:39:D3:E3:F6:2A:DA:41:AC:BE:B5:86:35:5B:AD:D0:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.198.0/24 104.251.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7d:13:01:86:d7:dd:6e:24:3c:db:29:59:b9:6a:61:d8:06: 86:7b:5f:3c:88:c8:47:21:ff:19:c0:6c:c3:5f:c7:66:a4:e7: af:78:d1:13:38:1a:f8:2e:39:82:83:80:a9:aa:4b:1a:d0:de: ec:fa:93:58:4c:36:7b:59:4b:de:87:a1:9d:d3:6d:5e:e0:4e: 69:fc:42:3d:ab:7b:17:5f:3a:6b:66:f3:09:d9:1c:77:c8:28: fe:48:bb:ae:30:b1:12:e4:47:6d:f2:75:96:3e:85:60:6f:a2: 06:dc:3b:d8:49:86:17:dc:db:6f:3a:87:8a:a7:fe:0b:e0:b9: f4:6f:f8:7c:33:20:e0:9a:68:22:03:41:75:74:2d:6a:dc:4c: 64:d7:75:24:1c:9b:17:6f:19:40:3f:d8:85:9f:d8:bc:1d:24: 9b:99:97:4a:5d:0a:0e:6e:a9:a1:5d:8f:e4:bf:bf:2c:8d:50: 86:4b:4d:61:dc:3a:f5:22:a5:f4:e4:44:b8:dc:88:af:78:f7: 63:57:6a:76:26:85:ae:69:7a:50:f8:91:2e:ae:fb:51:6f:3d: e7:43:23:4c:f5:9a:e2:d8:ea:99:a3:41:2d:94:23:31:b5:9b: 42:88:1c:94:b7:8d:7c:b9:d6:69:a7:50:63:1a:6a:96:a2:6e: c5:ac:df:6f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE64Rz3UYeMXHq8NF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTI3MjIyOGEtZGQwMC00OTA2LWJjNWMtZjE5NzZhMmVmMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/1/V0Uzg9k34u7oRcrpSKv8dqWNhqVsRHxN ilO+QlH/OMCuzH0iu570coVw/YCEVQCMN+/7SnPdYmU59zgca9Svcj6UptiBwKx0 RHQOYMuOuV4GGiSS6oDBwoAScheW/tB8ltDI1o6QlgBv91x6THucGEFXJQcXdceW SWuJj28hqt57slqRGlBfnRgigYMR0WBCFHHmRsoe2cSjbA57Ow0NAutVoCTq84M6 tBGpD9ogJl7JfxuGpNWHgcITsXXf4q8WvAL+xrCo5Sgidjtu3KjQQdulLnHQhkUE 0Y97bljDvXQYiEhKizGG4VG7fkuaIwPhYN+uU+RiysgHjpO9cwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJkAQ0U50+P2KtpBrL61hjVbrdB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmZjNDdjYzctMTI5Yi0z MDY4LTg1ZGYtNmRlZDJkYmUyZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrGAwQA aPteMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFR9EwGG191uJDzbKVm5amHYBoZ7XzyIyEch/xnAbMNfx2ak 56940RM4GvguOYKDgKmqSxrQ3uz6k1hMNntZS96HoZ3TbV7gTmn8Qj2rexdfOmtm 8wnZHHfIKP5Iu64wsRLkR23ydZY+hWBvogbcO9hJhhfc2286h4qn/gvgufRv+Hwz IOCaaCIDQXV0LWrcTGTXdSQcmxdvGUA/2IWf2LwdJJuZl0pdCg5uqaFdj+S/vyyN UIZLTWHcOvUipfTkRLjciK9492NXanYmha5pelD4kS6u+1FvPedDI0z1muLY6pmj QS2UIzG1m0KIHJS3jXy51mmnUGMaapaibsWs328= -----END CERTIFICATE-----Generated at Tue Sep 1 02:09:39 2026 by rpki-client