$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa File: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (raw, json) Hash identifier: dst+DtxPVsFgY4HaUQjuIT1fo+vSf8/5jwD3xKUMMDc= Subject key identifier: 29:88:AB:32:03:00:C5:29:C0:F6:0E:98:68:C0:1B:9F:EE:AF:26:B5 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584AE46118CF95119E2309BE1E80 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14860 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:18:cf:95:11:9e:23:09:be:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=2e710891-5d63-42e7-b5d6-82e7175d6f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:dc:ca:72:cd:13:3e:66:99:f3:3f:36:91: 91:8b:aa:d5:5c:9e:e4:db:c9:ea:d1:10:c9:4a:b0: 47:b4:11:59:59:6b:d7:9f:fe:9f:c1:59:ba:d5:2a: 2c:6f:14:e5:ab:b8:87:cb:30:61:4f:91:8b:1e:d9: c4:cd:94:37:58:db:24:6b:9f:21:60:a2:7d:10:63: 46:0a:fb:37:a5:56:39:8f:5b:ad:70:57:51:8d:9c: 16:14:ad:46:5c:e5:60:b6:df:64:d2:66:2f:6b:5b: a7:ca:26:f3:d2:f3:c9:d4:cb:89:7c:22:a5:62:de: 1e:d6:6d:ec:33:08:25:b2:af:8c:fb:20:36:e1:d1: dc:66:34:bb:8c:04:a6:09:d7:96:15:0d:fb:4f:9d: 91:e1:d1:75:33:c6:fc:22:d2:d7:7c:0d:14:cf:74: 7a:66:7e:12:19:c0:6d:aa:52:7b:d7:a4:46:3b:cb: 40:11:ad:3d:2d:5a:5a:4e:4d:83:d8:56:9c:bf:04: cc:99:69:4b:98:3a:8a:0c:94:e2:3f:9a:66:d3:95: 5d:75:9c:f3:10:f5:31:2d:4b:22:d9:d5:48:37:22: d8:41:1f:71:32:88:12:f7:c4:e5:c0:d8:8e:52:21: 2a:fc:e8:a6:85:e5:5c:0d:d2:46:cd:36:2c:01:32: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:88:AB:32:03:00:C5:29:C0:F6:0E:98:68:C0:1B:9F:EE:AF:26:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3a:41:01:c7:c7:48:df:65:c7:8c:2b:db:67:2e:2f:9b:8f: 8e:f0:1e:66:7d:8d:93:36:3a:a2:9c:e6:d8:e4:0c:15:64:c4: 98:af:a4:dd:04:51:69:f1:5f:83:20:8a:37:97:5d:5b:c7:81: de:9f:ba:12:98:18:92:11:08:ff:65:02:e7:88:c8:51:b1:a6: bf:62:59:26:a2:68:63:c7:9a:12:c7:8f:3f:a5:da:1f:ca:74: e4:39:8b:d4:84:31:aa:f1:86:8e:8a:5b:70:87:f2:d5:84:91: e5:bf:69:68:0b:97:ba:06:e5:33:a8:6b:d7:eb:ff:ec:d3:3a: d4:80:f6:fe:90:65:a4:86:96:5f:f3:46:d0:bf:ed:8b:e7:8b: bb:57:2b:9c:a7:85:ba:ad:4a:19:82:f5:56:0b:e3:c3:16:d3: be:7b:7c:07:df:6c:19:38:91:8e:1a:72:44:1e:40:67:d6:05: 3b:4d:5c:b0:d5:b2:96:1f:aa:b9:4c:d5:16:14:7c:58:cb:c5: e8:d7:cf:60:e5:67:a9:a5:79:aa:03:b2:65:41:5d:41:d0:f5: 67:c6:bf:7c:40:de:af:3a:9b:21:a4:6b:ea:7a:6e:7c:86:ad: e8:16:f6:59:3d:56:bf:cf:08:01:4d:56:20:8c:e6:9e:f0:99: 4b:5d:4e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRjPlRGeIwm+HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MmU3MTA4OTEtNWQ2My00MmU3LWI1ZDYtODJlNzE3NWQ2ZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRPcynLNEz5mmfM/NpGRi6rVXJ7k28nq0RDJ SrBHtBFZWWvXn/6fwVm61SosbxTlq7iHyzBhT5GLHtnEzZQ3WNska58hYKJ9EGNG Cvs3pVY5j1utcFdRjZwWFK1GXOVgtt9k0mYva1unyibz0vPJ1MuJfCKlYt4e1m3s Mwglsq+M+yA24dHcZjS7jASmCdeWFQ37T52R4dF1M8b8ItLXfA0Uz3R6Zn4SGcBt qlJ716RGO8tAEa09LVpaTk2D2FacvwTMmWlLmDqKDJTiP5pm05VddZzzEPUxLUsi 2dVINyLYQR9xMogS98TlwNiOUiEq/OimheVcDdJGzTYsATLWPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmIqzIDAMUpwPYOmGjAG5/urya1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvZjJhZDczZjMtMGY4MC0z Y2MyLTkzOTktODgxYTkxMDEwNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA6QQHHx0jfZceMK9tnLi+bj47wHmZ9jZM2OqKc5tjkDBVkxJivpN0E UWnxX4MgijeXXVvHgd6fuhKYGJIRCP9lAueIyFGxpr9iWSaiaGPHmhLHjz+l2h/K dOQ5i9SEMarxho6KW3CH8tWEkeW/aWgLl7oG5TOoa9fr/+zTOtSA9v6QZaSGll/z RtC/7Yvni7tXK5ynhbqtShmC9VYL48MW0757fAffbBk4kY4ackQeQGfWBTtNXLDV spYfqrlM1RYUfFjLxejXz2DlZ6mleaoDsmVBXUHQ9WfGv3xA3q86myGka+p6bnyG regW9lk9Vr/PCAFNViCM5p7wmUtdTvk= -----END CERTIFICATE-----Generated at Thu Aug 21 01:13:40 2025 by rpki-client