$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa File: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (raw, json) Hash identifier: +CpnyctAzKaetGxUqj9C0bemLxvpbuqyLvLGaVQwRJA= Subject key identifier: 02:3A:9B:23:FC:85:BC:D4:B5:40:3E:4D:EF:FB:F5:4D:9C:83:3A:00 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584A03A54B8FC6AA499E77D252C0 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14860 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4b:8f:c6:aa:49:9e:77:d2:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=ff7ed392-86a0-4067-9fce-772a8ecfd90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:7d:71:1c:50:6e:12:e7:1b:97:54:42:e3: f4:9e:9a:9e:e8:37:c3:82:db:bd:dd:9b:7a:ea:54: 34:e9:b2:44:03:65:79:07:90:c5:8a:f1:ed:eb:ea: 84:20:27:dc:a7:19:18:3f:01:34:d5:ef:31:e7:22: 3f:fa:98:65:9a:29:ea:97:eb:b9:3a:f2:fa:f1:ae: 46:a2:a8:56:ee:fe:d7:5f:c1:f8:29:45:64:75:36: 9f:20:73:b9:b5:38:b4:1b:6c:80:c4:d5:e4:43:7e: 6a:cf:08:b8:d0:9a:6c:30:b6:9b:ff:4b:0c:2f:e6: 4d:29:57:da:19:ed:ca:d5:33:68:94:2e:5a:7e:db: 89:ab:15:6c:98:ff:16:88:dc:7b:ec:3f:98:0d:47: 95:9d:22:4c:c4:e1:18:b8:bc:10:b0:ee:e6:74:e7: aa:5b:2b:36:91:15:2b:7c:00:c1:cb:50:d4:07:cc: 55:de:99:dc:57:f8:83:6f:5f:a8:f2:79:c6:a5:15: 53:99:c3:4e:e3:e8:fb:b7:61:f1:e2:79:bd:ec:6c: 8f:5f:2d:32:53:06:cf:5c:1d:c5:33:d4:6b:0d:72: c2:dd:9b:29:45:3b:4c:57:ee:77:15:10:1e:7b:cc: 36:7f:f1:de:c2:0e:f3:46:2f:a4:b9:ef:d7:68:34: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3A:9B:23:FC:85:BC:D4:B5:40:3E:4D:EF:FB:F5:4D:9C:83:3A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:64:56:4a:bc:a9:aa:85:a2:78:0b:d1:25:2f:7a:e2:c3:7f: 41:dd:90:aa:5a:e3:69:d9:18:f6:0a:67:fa:35:d1:47:3f:07: 96:44:88:8c:70:ad:87:bb:9a:8a:50:43:b2:eb:55:cb:cf:bf: 5e:c2:35:f8:cc:07:7a:33:01:4d:75:f2:8c:52:3e:a9:cd:8c: 74:33:a1:d4:b5:88:cd:36:d4:9a:da:ff:28:21:25:77:3a:4f: 69:13:b9:0c:0b:d5:ee:37:61:9c:0b:2b:24:a9:db:cd:71:9e: e1:6a:42:42:f7:f3:aa:cf:9c:2a:7a:aa:e1:e5:ca:36:97:d8: 79:46:92:99:69:3d:e9:f5:18:e2:23:4c:35:9b:55:b5:13:9b: 10:8c:db:45:83:46:7e:eb:e9:15:54:8e:d6:0b:fd:ea:8e:b6: b0:db:71:12:5a:c3:07:5e:0f:b2:14:7c:19:aa:85:54:37:ce: 5b:6e:d8:c0:00:c9:54:3f:95:f4:d8:df:3f:68:ab:e4:e1:a1: 4b:d7:93:51:1a:55:95:f4:73:c2:9d:92:7f:13:c2:4f:9f:61: d9:74:5f:8d:77:1c:31:ec:4f:f7:30:ea:e8:7f:3b:e1:11:32: da:1e:f7:9f:5b:04:93:9e:72:f8:ce:f8:1f:a4:d0:69:43:fd: e7:9e:9c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUuPxqpJnnfSUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZmY3ZWQzOTItODZhMC00MDY3LTlmY2UtNzcyYThlY2ZkOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktd9cRxQbhLnG5dUQuP0npqe6DfDgtu93Zt6 6lQ06bJEA2V5B5DFivHt6+qEICfcpxkYPwE01e8x5yI/+phlminql+u5OvL68a5G oqhW7v7XX8H4KUVkdTafIHO5tTi0G2yAxNXkQ35qzwi40JpsMLab/0sML+ZNKVfa Ge3K1TNolC5aftuJqxVsmP8WiNx77D+YDUeVnSJMxOEYuLwQsO7mdOeqWys2kRUr fADBy1DUB8xV3pncV/iDb1+o8nnGpRVTmcNO4+j7t2Hx4nm97GyPXy0yUwbPXB3F M9RrDXLC3ZspRTtMV+53FRAee8w2f/Hewg7zRi+kue/XaDSPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI6myP8hbzUtUA+Te/79U2cgzoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvZjJhZDczZjMtMGY4MC0z Y2MyLTkzOTktODgxYTkxMDEwNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5kVkq8qaqFongL0SUveuLDf0HdkKpa42nZGPYKZ/o10Uc/B5ZEiIxw rYe7mopQQ7LrVcvPv17CNfjMB3ozAU118oxSPqnNjHQzodS1iM021Jra/yghJXc6 T2kTuQwL1e43YZwLKySp281xnuFqQkL386rPnCp6quHlyjaX2HlGkplpPen1GOIj TDWbVbUTmxCM20WDRn7r6RVUjtYL/eqOtrDbcRJawwdeD7IUfBmqhVQ3zltu2MAA yVQ/lfTY3z9oq+ThoUvXk1EaVZX0c8Kdkn8Twk+fYdl0X413HDHsT/cw6uh/O+ER Mtoe959bBJOecvjO+B+k0GlD/eeenLc= -----END CERTIFICATE-----Generated at Mon Jun 16 13:28:27 2025 by rpki-client