$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa File: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (raw, json) Hash identifier: InxyJtjxOYeetZ1lqzas46vXur5f4MySnaq3ODHazsc= Subject key identifier: 68:ED:54:55:E8:FD:0A:AF:7C:FB:89:AA:1B:F8:C4:6C:2B:28:FA:CF Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584F093CDEA970A4A50A70740900 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 400287 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:de:a9:70:a4:a5:0a:70:74:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=6ab8e48f-d555-4a94-a8d6-f0521e9536c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:7f:32:e2:87:09:af:ef:9c:d9:4e:0a:ab: df:bc:2d:04:c1:69:f5:17:99:95:f8:5c:23:23:70: ef:d2:5f:c6:f9:ec:9f:f7:a3:d4:ff:d9:52:16:b3: a3:99:b1:13:6f:15:bd:75:6a:b2:ad:71:7b:d0:bc: 86:c0:49:7b:76:0e:90:92:ef:a3:4b:61:44:78:b3: ad:7f:ca:8f:f9:35:73:9f:69:5a:be:99:b0:e4:9b: 9f:14:ce:c2:a7:3a:14:7f:b5:7e:0c:88:0c:f0:36: 58:f1:e3:37:47:ff:02:f0:f1:5d:f6:2f:20:46:25: 25:fe:39:ac:f5:c4:b3:ce:16:02:70:0d:47:c5:21: 4d:92:41:c1:e8:c3:cc:91:b0:6c:16:9c:37:e0:85: 03:d1:c9:cf:ce:ca:9e:bd:81:86:d1:05:82:8e:51: 3f:25:a9:23:8e:48:d1:28:0d:3f:8a:ce:bc:8a:d7: ae:a9:47:c0:96:78:2d:91:ba:c4:72:16:0b:5c:76: fe:da:a5:85:d9:d7:b9:c4:27:d3:32:10:4d:9f:24: 98:95:b7:fe:47:5e:6b:a8:a6:f0:04:29:ed:03:c4: 3b:e5:7e:1e:e6:d6:7c:95:46:ae:17:f5:b8:f8:f3: 84:72:77:dc:22:ea:56:b6:4d:e1:58:c6:37:54:99: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:ED:54:55:E8:FD:0A:AF:7C:FB:89:AA:1B:F8:C4:6C:2B:28:FA:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:11:bd:24:4f:f8:e2:34:10:f4:c3:4b:c1:81:1b:dc:9f:d5: 63:1f:ec:07:f2:d6:27:72:10:f0:b0:cf:a9:d1:f5:b7:5d:f5: e3:b6:e6:58:15:95:bc:fc:8f:71:b8:b8:f5:63:fc:85:d0:fb: f4:ad:2e:eb:ab:89:33:12:6e:e4:ac:7b:e5:37:0b:93:a5:28: 0a:85:cb:8a:f7:6e:61:2b:11:84:06:05:ca:07:e4:61:d2:96: 3d:e0:b6:4c:c3:0c:d8:e7:af:4b:66:c7:96:9c:a7:bd:33:cc: df:dd:1e:e8:89:f1:56:a2:1c:3e:3e:86:fb:54:a6:86:e0:01: 01:e8:76:26:7c:8f:6b:c5:84:05:e0:b1:a5:94:21:da:84:07: 53:67:45:23:68:be:96:72:92:f5:b6:41:ea:b6:bd:cb:3f:8c: e0:b4:9f:6a:a4:a2:7d:09:48:b0:31:38:10:ed:fb:c2:4d:c5: 07:40:e6:f5:ac:1f:41:b5:c1:6c:bc:4f:ed:de:7b:2c:ab:f2: cc:f3:e4:a4:bc:9a:1f:68:73:23:d5:c9:29:88:a0:e4:ea:47: 92:49:f3:22:9c:d8:c2:3f:7d:2c:be:5c:6b:77:0b:7e:f0:07: 53:b0:85:29:cc:fc:8a:35:26:01:b1:80:d7:96:76:16:03:99: bb:7b:d1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN6pcKSlCnB0CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NmFiOGU0OGYtZDU1NS00YTk0LWE4ZDYtZjA1MjFlOTUzNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw85/MuKHCa/vnNlOCqvfvC0EwWn1F5mV+Fwj I3Dv0l/G+eyf96PU/9lSFrOjmbETbxW9dWqyrXF70LyGwEl7dg6Qku+jS2FEeLOt f8qP+TVzn2lavpmw5JufFM7CpzoUf7V+DIgM8DZY8eM3R/8C8PFd9i8gRiUl/jms 9cSzzhYCcA1HxSFNkkHB6MPMkbBsFpw34IUD0cnPzsqevYGG0QWCjlE/JakjjkjR KA0/is68iteuqUfAlngtkbrEchYLXHb+2qWF2de5xCfTMhBNnySYlbf+R15rqKbw BCntA8Q75X4e5tZ8lUauF/W4+POEcnfcIupWtk3hWMY3VJnj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjtVFXo/QqvfPuJqhv4xGwrKPrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvNGEzNGNkOWYtMWU2Ni0z NmI5LWFlNDMtZTdhOTM5ZWY0Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMRvSRP+OI0EPTDS8GBG9yf1WMf7Afy1idyEPCwz6nR9bdd9eO25lgV lbz8j3G4uPVj/IXQ+/StLuuriTMSbuSse+U3C5OlKAqFy4r3bmErEYQGBcoH5GHS lj3gtkzDDNjnr0tmx5acp70zzN/dHuiJ8VaiHD4+hvtUpobgAQHodiZ8j2vFhAXg saWUIdqEB1NnRSNovpZykvW2Qeq2vcs/jOC0n2qkon0JSLAxOBDt+8JNxQdA5vWs H0G1wWy8T+3eeyyr8szz5KS8mh9ocyPVySmIoOTqR5JJ8yKc2MI/fSy+XGt3C37w B1OwhSnM/Io1JgGxgNeWdhYDmbt70eg= -----END CERTIFICATE-----Generated at Fri Sep 25 22:20:15 2026 by rpki-client