$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa File: bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa (raw, json) Hash identifier: ARokytKuJy1EWDdlCI66+0bdiW1A4xQgi6hpmmW5BwI= Subject key identifier: 87:00:A1:07:BC:EF:C5:CB:62:AF:E2:25:A7:99:A8:7D:23:4A:08:AB Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D359FD6F43028FB043A798A80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 9009 IP address blocks: 104.218.198.0/24 maxlen: 24 104.251.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d6:f4:30:28:fb:04:3a:79:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=8f6688be-ec93-40b7-a290-be3090d304ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:37:fe:e7:d8:ee:07:37:68:a1:40:1f:28:d9: 2d:6d:a7:38:cc:35:70:b8:77:33:8f:eb:df:12:a0: da:bb:7f:69:21:40:27:2a:77:fe:4d:fa:1f:18:16: 72:ef:79:68:92:c5:e6:a0:21:32:1d:82:b6:ed:7b: d1:30:ff:5a:5f:00:cf:70:d9:9b:0e:62:a7:79:e3: 38:54:61:da:eb:38:22:40:32:9a:07:bd:6b:b7:7e: 7b:cf:25:d3:a9:08:ba:22:01:54:c7:94:9b:12:99: 2d:b8:b9:dd:69:ac:07:85:ae:22:fa:f8:ef:14:5c: 35:8b:34:3b:5e:9e:8f:87:6f:55:ed:da:ea:f3:7f: 80:59:c5:a7:3f:10:cb:53:c8:bf:62:a2:c7:2e:42: 90:4c:b6:87:09:bc:96:56:76:3f:b0:87:7f:0d:62: a4:60:4c:b5:c9:be:14:1d:9f:25:1e:c0:62:1e:0f: c8:ce:62:21:78:17:c5:1d:20:5d:87:32:34:9d:ca: ef:02:5a:53:90:93:7c:46:c8:d5:f5:cd:bf:9a:4e: 58:f6:ae:cf:49:c2:f5:63:56:b3:e7:de:c8:5c:4a: 26:cb:0f:0c:99:0d:95:e0:6c:4d:c8:10:e1:ee:01: d2:1d:04:f0:57:b4:cd:f4:53:7a:85:61:10:28:4d: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:00:A1:07:BC:EF:C5:CB:62:AF:E2:25:A7:99:A8:7D:23:4A:08:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.218.198.0/24 104.251.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5f:a3:a8:0b:01:69:66:ad:65:10:29:ae:9d:b1:3f:9a:89: cf:f4:51:22:ab:02:42:f3:05:20:cd:c2:c2:40:c8:d8:97:df: 3b:34:14:d4:bf:d2:52:f0:69:ad:ee:bf:b7:1c:9b:5f:c2:1e: cf:d5:2e:38:35:d9:b1:2f:e1:ac:70:a6:d0:8d:14:2c:3e:56: ba:f9:84:8c:de:e6:2c:61:26:4e:30:c1:1e:64:29:ba:36:d7: 0b:e4:cc:23:f8:d0:5f:c2:0b:cc:f4:7c:90:f2:99:95:59:61: 73:8a:2d:05:90:d2:90:bb:6b:40:b5:a9:36:b1:33:f0:05:8b: 31:96:87:78:e8:81:22:3b:fe:5d:9d:23:32:04:4b:ca:5a:a8: 5e:50:e3:10:69:0c:6d:31:d7:a8:93:4d:14:ee:6e:ce:10:6f: ff:2e:07:9e:d4:e9:76:0f:c1:e4:18:47:08:af:51:46:48:7b: cf:1a:3a:b3:2d:51:2a:fe:84:29:f9:fb:d9:93:d6:88:fc:e3: 5e:59:ea:be:85:7d:70:a0:a1:2d:c9:81:49:f7:8d:24:83:b9: 03:30:95:9e:49:0b:d7:ac:96:ce:b6:dc:19:45:b6:fb:ff:4d: 8f:1a:86:f9:6a:f1:b2:85:5d:a9:9b:93:1b:fb:0a:33:06:6d: 2b:0e:27:55 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE01n9b0MCj7BDp5ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OGY2Njg4YmUtZWM5My00MGI3LWEyOTAtYmUzMDkwZDMwNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTf+59juBzdooUAfKNktbac4zDVwuHczj+vf EqDau39pIUAnKnf+TfofGBZy73loksXmoCEyHYK27XvRMP9aXwDPcNmbDmKneeM4 VGHa6zgiQDKaB71rt357zyXTqQi6IgFUx5SbEpktuLndaawHha4i+vjvFFw1izQ7 Xp6Ph29V7drq83+AWcWnPxDLU8i/YqLHLkKQTLaHCbyWVnY/sId/DWKkYEy1yb4U HZ8lHsBiHg/IzmIheBfFHSBdhzI0ncrvAlpTkJN8RsjV9c2/mk5Y9q7PScL1Y1az 597IXEomyw8MmQ2V4GxNyBDh7gHSHQTwV7TN9FN6hWEQKE3O1QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIcAoQe878XLYq/iJaeZqH0jSgirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmZjNDdjYzctMTI5Yi0z MDY4LTg1ZGYtNmRlZDJkYmUyZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrGAwQA aPteMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE1fo6gLAWlmrWUQKa6dsT+aic/0USKrAkLzBSDNwsJAyNiX 3zs0FNS/0lLwaa3uv7ccm1/CHs/VLjg12bEv4axwptCNFCw+Vrr5hIze5ixhJk4w wR5kKbo21wvkzCP40F/CC8z0fJDymZVZYXOKLQWQ0pC7a0C1qTaxM/AFizGWh3jo gSI7/l2dIzIES8paqF5Q4xBpDG0x16iTTRTubs4Qb/8uB57U6XYPweQYRwivUUZI e88aOrMtUSr+hCn5+9mT1oj8415Z6r6FfXCgoS3JgUn3jSSDuQMwlZ5JC9esls62 3BlFtvv/TY8ahvlq8bKFXambkxv7CjMGbSsOJ1U= -----END CERTIFICATE-----Generated at Thu Mar 26 09:20:54 2026 by rpki-client