$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa File: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (raw, json) Hash identifier: 9NO8sWbIULrt5ee0NIsfZ9eojYi3xDsBsyxqCwh8McE= Subject key identifier: 6C:FB:9D:F7:E9:59:F8:44:EC:BA:DB:46:83:FB:9A:0E:F7:15:7A:7B Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584A03A54B81277C431CC9969280 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 400287 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4b:81:27:7c:43:1c:c9:96:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=130aae4c-25a7-4cef-b364-bf0b9526c143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:42:06:25:f2:38:32:4a:85:7b:6a:83:1d:3b: db:d3:f5:9b:e8:21:1a:5e:35:c9:dd:f2:c8:d9:76: a0:ed:11:e1:37:23:e0:bf:6d:f1:ff:d9:cd:d4:0f: 6d:44:37:5a:d6:37:28:36:03:14:0a:b6:84:5c:d5: e1:4e:4f:17:b3:f1:8f:d3:7d:fd:06:6d:f1:b7:64: 1b:48:96:69:40:3e:10:44:e0:7f:24:eb:eb:47:e3: e7:c8:18:ad:41:c5:73:48:f9:37:bf:9d:74:9b:26: 22:86:64:18:48:50:08:e7:97:4c:a2:34:b6:56:e8: fe:ea:7a:32:80:0b:1d:07:51:fa:52:f7:fd:59:24: 1b:26:3d:ea:5a:3f:1f:09:36:61:a8:c3:36:25:69: 5b:96:7f:b4:3d:76:15:0b:e8:58:45:64:65:bb:13: 3e:05:6b:13:bd:3d:04:30:7e:fb:75:7a:b7:9f:8b: 9c:44:43:79:b7:be:3f:58:ad:6e:5b:e3:7c:81:03: e6:98:36:8d:91:f5:f1:c2:8f:38:bd:c7:31:3f:64: 6a:86:cc:3d:7b:a7:60:e2:84:4b:8d:c6:ac:e9:db: 95:7b:e8:bc:56:0a:92:c3:c9:7b:f8:11:ed:15:5b: 59:73:6b:e2:5a:7e:5d:b6:23:47:c2:25:f7:3e:c6: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FB:9D:F7:E9:59:F8:44:EC:BA:DB:46:83:FB:9A:0E:F7:15:7A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a4:d1:33:6b:69:ec:c9:f3:ff:5e:58:c6:b6:24:f5:0c:71: c9:d2:34:31:9f:d3:18:58:9b:23:ac:76:d4:81:49:f9:05:98: a7:83:22:29:39:bb:a4:19:7d:df:c0:99:33:5a:39:ff:07:3d: 5b:7a:81:d4:76:27:55:c1:92:f9:53:8d:e7:85:87:7f:e3:aa: b5:d2:79:3d:ad:d5:76:d9:ae:49:bf:c0:6d:50:a0:64:ce:89: 0a:39:cd:83:dc:b1:33:ed:e8:42:e7:bb:6f:57:b7:3d:d8:d7: b3:22:a3:2a:bb:a8:4f:9a:82:bf:19:8e:37:ea:f3:2a:84:a7: b7:d5:40:26:7a:b4:81:b6:93:e5:13:40:29:78:7f:fa:c6:6a: 78:b6:e9:ef:41:d2:37:75:f1:9c:be:44:e4:5f:08:3e:0d:5f: 21:fb:f7:bb:43:4a:b8:d4:56:91:1d:b7:48:fd:52:95:a1:ab: 32:b4:88:fc:60:a8:cf:34:39:f7:b7:61:fe:99:11:7b:a9:f9: 98:df:b3:41:15:46:4c:55:9e:de:49:39:30:7d:4d:6d:a9:34: 01:6f:df:27:69:a8:b1:31:6c:72:fe:dd:a0:5f:4a:06:65:1c: 33:1a:da:26:f8:c3:5a:ad:c0:2e:89:a3:57:78:7f:5f:fb:12: b4:ce:d9:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUuBJ3xDHMmWkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTMwYWFlNGMtMjVhNy00Y2VmLWIzNjQtYmYwYjk1MjZjMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UIGJfI4MkqFe2qDHTvb0/Wb6CEaXjXJ3fLI 2Xag7RHhNyPgv23x/9nN1A9tRDda1jcoNgMUCraEXNXhTk8Xs/GP0339Bm3xt2Qb SJZpQD4QROB/JOvrR+PnyBitQcVzSPk3v510myYihmQYSFAI55dMojS2Vuj+6noy gAsdB1H6Uvf9WSQbJj3qWj8fCTZhqMM2JWlbln+0PXYVC+hYRWRluxM+BWsTvT0E MH77dXq3n4ucREN5t74/WK1uW+N8gQPmmDaNkfXxwo84vccxP2Rqhsw9e6dg4oRL jcas6duVe+i8VgqSw8l7+BHtFVtZc2viWn5dtiNHwiX3PsZ5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz7nffpWfhE7LrbRoP7mg73FXp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvNGEzNGNkOWYtMWU2Ni0z NmI5LWFlNDMtZTdhOTM5ZWY0Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImk0TNraezJ8/9eWMa2JPUMccnSNDGf0xhYmyOsdtSBSfkFmKeDIik5 u6QZfd/AmTNaOf8HPVt6gdR2J1XBkvlTjeeFh3/jqrXSeT2t1XbZrkm/wG1QoGTO iQo5zYPcsTPt6ELnu29Xtz3Y17Mioyq7qE+agr8Zjjfq8yqEp7fVQCZ6tIG2k+UT QCl4f/rGani26e9B0jd18Zy+RORfCD4NXyH797tDSrjUVpEdt0j9UpWhqzK0iPxg qM80Ofe3Yf6ZEXup+Zjfs0EVRkxVnt5JOTB9TW2pNAFv3ydpqLExbHL+3aBfSgZl HDMa2ib4w1qtwC6Jo1d4f1/7ErTO2bg= -----END CERTIFICATE-----Generated at Tue Jul 1 08:40:10 2025 by rpki-client