$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa File: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (raw, json) Hash identifier: WYYIWXugoqhgBEULJ02R2kD3//rvEdrHXji2RsDNHGw= Subject key identifier: 96:E2:0E:D8:69:DB:15:36:98:0D:5E:55:90:A7:19:96:D5:C0:30:14 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584E66DA0E8E7E5035F70C984250 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 400287 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0e:8e:7e:50:35:f7:0c:98:42:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=d7cd6414-719b-4c5d-a49b-31a750a3a315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:fc:f8:df:66:44:76:32:64:dc:cf:07:7a: 79:1e:08:80:ad:6b:9c:76:05:69:d7:37:06:39:5e: 22:8c:0f:55:6b:a5:91:e9:40:10:9a:9d:c1:02:46: 88:55:26:44:1c:84:c0:45:67:42:f8:05:65:e0:f5: c3:e0:d3:c7:c8:ac:e6:65:25:81:9d:62:c2:13:60: 29:33:66:e6:c4:3d:60:b4:4e:d2:d4:54:31:66:b7: d2:4b:4e:f0:04:5e:6b:33:52:e7:11:02:41:ea:a8: ee:95:40:1f:7c:e9:cc:71:85:36:9b:53:0b:80:ab: 1b:0b:c2:fe:db:08:df:a5:cd:36:3b:a7:3d:b3:93: ac:55:c5:1e:cd:ba:3c:83:2f:d1:85:7c:fc:5d:ae: df:86:cb:92:a1:ad:a0:f3:ce:aa:39:17:d7:c0:18: 36:9a:8d:24:ba:68:c5:f5:cd:a8:90:de:57:8b:47: ff:15:7b:41:1e:58:08:03:be:03:fc:f9:0e:28:f2: a2:14:ef:47:67:3b:ae:d6:28:9d:c5:4b:7c:c5:ee: 1e:39:ae:8b:41:97:8e:c5:52:7d:a1:fa:59:13:9e: c9:6a:fc:4f:55:dc:e8:76:cf:2f:57:d3:5d:cf:72: d7:fd:e0:ec:cf:db:0d:19:fc:3c:57:a1:6f:e7:23: 25:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E2:0E:D8:69:DB:15:36:98:0D:5E:55:90:A7:19:96:D5:C0:30:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:58:4d:b8:ef:bc:e6:45:4c:0f:53:a7:b5:56:8e:de:18:2b: c1:d0:f9:6a:58:dd:17:1c:f4:28:4b:a0:21:31:0d:ac:a5:68: 4d:19:52:f5:45:96:72:1f:a5:3f:e1:77:e0:51:b6:46:03:18: 5a:ce:3c:55:d8:37:27:03:c2:9a:6e:33:cc:50:3f:ab:fe:89: 14:01:cd:28:10:40:9f:94:5c:c4:38:64:06:81:9c:b0:72:5d: 32:ff:00:0e:6b:e9:92:04:7b:aa:7f:9d:3b:2e:e8:7e:44:d6: 02:3a:4e:04:0a:eb:c2:01:1c:35:f1:54:42:38:b2:10:b5:67: b0:fb:0e:d6:27:48:0a:52:cf:c6:56:b4:14:25:31:c8:5b:aa: 82:a8:1d:69:fe:e1:aa:22:5e:ab:b7:ce:b9:aa:31:fd:fb:80: 2a:74:01:2b:18:a7:22:72:45:77:43:36:2e:c3:30:d3:fa:41: 96:01:03:cd:a8:c5:1e:86:80:b0:c7:eb:a1:ff:46:6b:6e:91: 68:aa:89:5a:35:56:25:69:f9:0d:c4:ff:92:ae:0f:68:9b:ab: 2b:53:8e:16:36:5d:b2:6d:56:17:e7:2e:ea:20:09:da:e4:4c: b9:be:62:e4:9b:d5:0a:23:c2:20:6f:08:23:3f:b7:13:92:0d: 10:dc:65:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2g6OflA19wyYQlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZDdjZDY0MTQtNzE5Yi00YzVkLWE0OWItMzFhNzUwYTNhMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6z8+N9mRHYyZNzPB3p5HgiArWucdgVp1zcG OV4ijA9Va6WR6UAQmp3BAkaIVSZEHITARWdC+AVl4PXD4NPHyKzmZSWBnWLCE2Ap M2bmxD1gtE7S1FQxZrfSS07wBF5rM1LnEQJB6qjulUAffOnMcYU2m1MLgKsbC8L+ 2wjfpc02O6c9s5OsVcUezbo8gy/RhXz8Xa7fhsuSoa2g886qORfXwBg2mo0kumjF 9c2okN5Xi0f/FXtBHlgIA74D/PkOKPKiFO9HZzuu1iidxUt8xe4eOa6LQZeOxVJ9 ofpZE57JavxPVdzods8vV9Ndz3LX/eDsz9sNGfw8V6Fv5yMlPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbiDthp2xU2mA1eVZCnGZbVwDAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvNGEzNGNkOWYtMWU2Ni0z NmI5LWFlNDMtZTdhOTM5ZWY0Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpYTbjvvOZFTA9Tp7VWjt4YK8HQ+WpY3Rcc9ChLoCExDaylaE0ZUvVF lnIfpT/hd+BRtkYDGFrOPFXYNycDwppuM8xQP6v+iRQBzSgQQJ+UXMQ4ZAaBnLBy XTL/AA5r6ZIEe6p/nTsu6H5E1gI6TgQK68IBHDXxVEI4shC1Z7D7DtYnSApSz8ZW tBQlMchbqoKoHWn+4aoiXqu3zrmqMf37gCp0ASsYpyJyRXdDNi7DMNP6QZYBA82o xR6GgLDH66H/RmtukWiqiVo1ViVp+Q3E/5KuD2ibqytTjhY2XbJtVhfnLuogCdrk TLm+YuSb1QojwiBvCCM/txOSDRDcZTE= -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:04 2026 by rpki-client