$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa File: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (raw, json) Hash identifier: otMSTkQWiG9WG/NpBPUnVAc9dDbXzImaHtPNojI9BZQ= Subject key identifier: C3:8D:E3:8E:F8:90:E8:EA:94:18:5A:19:8E:FC:A6:B0:55:F2:C2:B9 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584AE46118BC9D4932CCE5173580 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 400287 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:18:bc:9d:49:32:cc:e5:17:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=cbdc356e-d46f-47ef-a211-37aba991deb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:f3:fa:58:ac:71:e0:7f:f8:29:f7:24:ad: bc:56:ce:0b:a5:dd:72:6c:ce:be:ec:19:74:c0:4f: 55:81:af:20:fe:32:78:97:55:9a:a7:47:b4:d3:cb: 6c:6b:94:45:55:7a:e4:65:ed:d9:e4:c4:76:d4:42: 21:1c:88:81:8f:3a:b5:bf:f9:47:25:63:bf:b5:6f: bf:a8:02:6b:41:b7:37:ed:b7:29:7e:42:28:c7:d2: 7d:e6:94:b7:62:74:ef:f0:7c:fa:3a:0d:0a:7d:28: 2e:19:fa:eb:b3:28:49:0f:48:ed:00:6b:f0:2c:13: b0:2a:32:f8:ae:81:6f:88:62:0a:cc:a5:b0:a1:cf: 88:b1:6e:3c:83:07:1a:18:4e:93:bc:bf:34:4f:cb: 37:b8:97:d6:db:21:ae:94:ca:ad:11:57:71:45:98: 83:67:c1:ca:c5:c4:97:fc:61:02:17:df:69:1c:db: e1:03:80:af:ea:7b:41:b2:2f:74:b3:f0:9b:c7:95: e7:1f:40:80:cb:eb:95:c8:94:3c:81:35:98:3d:a3: 1f:c7:78:18:55:0b:0e:5d:4e:8c:e7:64:1b:9a:6c: b0:ee:6e:1e:21:89:f8:11:14:92:ff:3b:16:87:44: 0b:a0:93:2d:86:e7:28:ab:15:bd:dd:f5:2b:3e:b8: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:E3:8E:F8:90:E8:EA:94:18:5A:19:8E:FC:A6:B0:55:F2:C2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fd:f3:23:9b:6e:59:71:f9:54:c5:60:e5:e7:f8:f5:44:72: 0b:cd:e1:73:d5:00:22:7c:90:dd:20:fb:b6:d3:81:28:ba:d4: d1:98:e8:e3:9e:87:cb:ff:f7:be:c2:38:fa:aa:7c:37:13:a9: 00:08:e4:b8:52:c0:87:2c:77:10:e2:44:9e:76:af:47:e3:cb: c9:02:92:e0:f2:dd:6e:fb:90:af:a1:57:7f:87:9d:1d:5c:66: a8:e1:0f:f3:93:70:21:0c:d5:6b:0f:24:f5:33:92:93:b1:c7: e6:bb:7c:b3:a6:b4:b2:ab:da:91:16:43:ce:6d:c6:fd:62:6c: 27:6c:fb:8d:a2:af:19:9d:f4:b2:b8:de:46:fa:64:5b:80:2c: 81:3b:68:47:aa:17:06:33:e3:91:0a:06:21:57:56:23:68:1f: 47:f2:75:28:21:76:31:a6:51:75:00:62:4d:87:bb:bb:40:73: 99:ec:e2:84:d4:62:b4:d8:79:55:ee:2f:3b:75:85:9e:58:b4: ed:f5:7e:e5:ff:f7:80:23:aa:a8:3e:6b:df:68:b0:a6:fd:93: db:be:45:49:82:d1:ce:a2:5c:37:ae:85:ee:f6:a0:e8:8d:d0: b8:ce:3b:76:ec:13:f9:4f:ae:d0:b4:c2:f7:45:35:97:f4:e8: c0:68:b7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRi8nUkyzOUXNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2JkYzM1NmUtZDQ2Zi00N2VmLWEyMTEtMzdhYmE5OTFkZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF3z+lisceB/+Cn3JK28Vs4Lpd1ybM6+7Bl0 wE9Vga8g/jJ4l1Wap0e008tsa5RFVXrkZe3Z5MR21EIhHIiBjzq1v/lHJWO/tW+/ qAJrQbc37bcpfkIox9J95pS3YnTv8Hz6Og0KfSguGfrrsyhJD0jtAGvwLBOwKjL4 roFviGIKzKWwoc+IsW48gwcaGE6TvL80T8s3uJfW2yGulMqtEVdxRZiDZ8HKxcSX /GECF99pHNvhA4Cv6ntBsi90s/Cbx5XnH0CAy+uVyJQ8gTWYPaMfx3gYVQsOXU6M 52Qbmmyw7m4eIYn4ERSS/zsWh0QLoJMthucoqxW93fUrPrgnywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMON4474kOjqlBhaGY78prBV8sK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvNGEzNGNkOWYtMWU2Ni0z NmI5LWFlNDMtZTdhOTM5ZWY0Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG798yObbllx+VTFYOXn+PVEcgvN4XPVACJ8kN0g+7bTgSi61NGY6OOe h8v/977COPqqfDcTqQAI5LhSwIcsdxDiRJ52r0fjy8kCkuDy3W77kK+hV3+HnR1c ZqjhD/OTcCEM1WsPJPUzkpOxx+a7fLOmtLKr2pEWQ85txv1ibCds+42irxmd9LK4 3kb6ZFuALIE7aEeqFwYz45EKBiFXViNoH0fydSghdjGmUXUAYk2Hu7tAc5ns4oTU YrTYeVXuLzt1hZ5YtO31fuX/94Ajqqg+a99osKb9k9u+RUmC0c6iXDeuhe72oOiN 0LjOO3bsE/lPrtC0wvdFNZf06MBot6c= -----END CERTIFICATE-----Generated at Thu Aug 21 01:13:33 2025 by rpki-client