$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa File: 04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa (raw, json) Hash identifier: nzsV4/w11VOssJlF2S7z49yVcB0TL9IAiIwErshr74s= Subject key identifier: 78:72:95:2B:68:FD:9B:CC:0F:5C:72:ED:82:46:29:68:5C:18:BB:BC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C5994E64F04EFB7BC0E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c5:99:4e:64:f0:4e:fb:7b:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=ab14e3f4-efc9-47a9-a33e-0698a1a3d4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:15:ec:6b:32:69:2a:f2:e7:3c:16:67:42: 4c:19:c2:a0:80:2b:19:96:30:16:0e:77:08:9d:10: 73:a1:be:a2:88:9c:d5:75:75:71:cb:dc:96:13:00: 47:d8:62:c0:ed:ec:bb:51:2d:9a:90:cd:8b:cc:12: 56:04:70:68:49:fc:17:1d:41:1b:77:c8:1d:7a:9a: df:4b:68:eb:05:fb:8d:6a:2a:bb:f4:2c:88:79:27: 06:64:ec:b3:b5:67:cf:70:da:c1:03:49:59:bb:13: 72:de:86:15:d8:99:31:44:75:dc:4b:e9:34:6a:11: e1:46:2f:16:95:33:2a:ba:92:04:c0:7b:f2:a0:4e: 79:ca:e9:f3:ea:6a:3d:e1:d1:ed:d5:d9:6a:cd:bc: f9:38:25:ff:86:bd:83:52:34:2a:34:3b:7c:9b:4d: b7:15:96:98:4f:80:33:5e:90:d4:66:2d:c8:01:7f: 10:72:cc:1e:89:fb:bc:d9:9d:fe:59:9a:73:4d:da: a4:3f:cd:e7:cf:e5:05:8a:a4:1f:e4:19:65:26:18: 5b:f1:f0:a5:d1:13:53:83:e4:e0:b4:43:a0:f1:9f: 5f:d7:e7:79:a2:df:97:0e:0c:60:b3:29:09:c3:de: 21:50:92:bf:07:fb:36:12:77:56:19:b4:5d:de:7d: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:95:2B:68:FD:9B:CC:0F:5C:72:ED:82:46:29:68:5C:18:BB:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fa:ef:fa:3a:1a:88:10:c2:9f:e2:a3:85:b8:1c:ac:e5:3c: 44:71:ab:21:91:bc:5a:60:9c:7b:b1:0c:56:b8:36:50:35:54: b5:d3:c8:1f:0b:32:36:61:bc:dd:89:7b:6d:00:11:de:a1:a8: 81:68:9f:f8:6e:b5:4f:1d:e0:03:f4:1a:23:dc:a6:cb:e0:aa: c0:fa:6f:4f:6a:f2:0a:b1:8d:ab:9c:2c:e5:ae:a6:af:1b:1b: df:ab:6a:83:b0:16:0e:4e:36:10:c7:e1:1c:53:69:fe:d1:7d: cb:1a:82:0b:02:64:80:02:1e:01:92:0f:d7:43:b8:b7:09:36: 09:d9:d3:27:84:10:5c:22:f8:96:ec:64:7e:ff:57:b4:43:80: 60:20:b2:48:ee:4d:56:9b:32:56:74:8d:f8:7a:98:33:67:2d: 60:bd:03:db:84:a2:1a:3d:ea:dc:24:82:b9:41:9c:e1:4f:ab: bb:62:1a:da:37:0a:79:fd:03:25:e0:e0:b0:43:62:e5:b3:75: ba:e0:d5:f2:a9:1c:34:99:3a:22:39:8b:33:ad:e6:aa:0b:8b: f1:2c:60:f9:89:51:72:b4:ab:ab:c2:b4:82:b2:c5:95:64:0e: af:32:15:8b:f7:96:2d:67:ae:dc:69:a1:07:45:ce:3c:c3:6f: 92:eb:6a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMWZTmTwTvt7wOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YWIxNGUzZjQtZWZjOS00N2E5LWEzM2UtMDY5OGExYTNkNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMV7GsyaSry5zwWZ0JMGcKggCsZljAWDncI nRBzob6iiJzVdXVxy9yWEwBH2GLA7ey7US2akM2LzBJWBHBoSfwXHUEbd8gdeprf S2jrBfuNaiq79CyIeScGZOyztWfPcNrBA0lZuxNy3oYV2JkxRHXcS+k0ahHhRi8W lTMqupIEwHvyoE55yunz6mo94dHt1dlqzbz5OCX/hr2DUjQqNDt8m023FZaYT4Az XpDUZi3IAX8Qcsweifu82Z3+WZpzTdqkP83nz+UFiqQf5BllJhhb8fCl0RNTg+Tg tEOg8Z9f1+d5ot+XDgxgsykJw94hUJK/B/s2EndWGbRd3n2LRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhylSto/ZvMD1xy7YJGKWhcGLu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRlNWE1ZGItM2ExOS0z MTYxLWIxODctN2FkNGNkODA4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/67/o6GogQwp/io4W4HKzlPERxqyGRvFpgnHuxDFa4NlA1VLXTyB8L MjZhvN2Je20AEd6hqIFon/hutU8d4AP0GiPcpsvgqsD6b09q8gqxjaucLOWupq8b G9+raoOwFg5ONhDH4RxTaf7RfcsaggsCZIACHgGSD9dDuLcJNgnZ0yeEEFwi+Jbs ZH7/V7RDgGAgskjuTVabMlZ0jfh6mDNnLWC9A9uEoho96twkgrlBnOFPq7tiGto3 Cnn9AyXg4LBDYuWzdbrg1fKpHDSZOiI5izOt5qoLi/EsYPmJUXK0q6vCtIKyxZVk Dq8yFYv3li1nrtxpoQdFzjzDb5LratQ= -----END CERTIFICATE-----Generated at Thu Jul 10 09:38:27 2025 by rpki-client