$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa File: 348bd322-b2ad-3bdd-8570-245f1a6574e0.roa (raw, json) Hash identifier: YDrbi+/5UoRKX176N27U4mb6nIO0scBdtrde27G9Xao= Subject key identifier: 44:3E:9D:C6:FE:07:D3:47:BE:B8:41:6D:19:05:AE:57:95:D3:4D:1D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A6DBB52C0CF91FFD8A10BAE00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 41264 IP address blocks: 104.132.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:52:c0:cf:91:ff:d8:a1:0b:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=8ae764c5-f310-4d85-a124-eb6e55ad0eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fb:74:6a:88:f6:76:0d:18:b0:f0:7a:2a:8e: 84:37:11:ab:5c:73:8c:09:66:da:07:00:18:94:15: c5:f4:af:b9:ec:66:c0:db:49:3f:53:65:4b:69:b4: c0:42:1f:00:ad:3d:ec:f6:d4:ed:47:75:09:2b:26: fe:94:93:3c:e3:48:42:60:86:27:e0:86:49:fb:0d: a8:3f:d7:f9:bc:43:35:61:92:d7:27:b2:05:67:15: dd:98:e1:1c:41:1e:3a:8b:d0:b2:5c:f8:25:93:2d: 09:de:78:de:a6:f9:95:cb:1a:27:bf:6b:d5:b5:84: 9b:23:57:e2:bd:bb:f3:97:be:61:7f:99:c7:30:cd: 8c:ab:2d:bb:32:18:bf:e6:a0:52:7a:b7:23:9d:74: d0:ac:5b:6a:73:9d:c4:7a:79:09:29:57:72:c8:13: 7e:46:36:b5:46:2d:6c:f7:18:b3:12:ac:30:d8:2c: e6:43:5b:3b:96:55:d6:d8:8e:84:eb:49:3f:a0:bc: a9:f3:ef:1a:fe:64:28:84:c4:da:3e:a1:6b:5d:e6: a5:fd:89:9b:b3:86:a8:d2:25:ae:be:28:db:50:ba: 7d:d5:4b:75:d8:ae:19:44:4d:1c:22:98:ff:dd:bd: 6c:84:a5:41:8f:02:52:05:03:cc:91:2f:69:c9:e9: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3E:9D:C6:FE:07:D3:47:BE:B8:41:6D:19:05:AE:57:95:D3:4D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:d8:ce:ee:77:7a:0a:d2:40:e7:c0:fc:23:60:58:7d:80: 7b:a2:12:1a:fa:d6:14:c9:e6:d7:47:d6:a4:20:82:02:b9:cf: 1c:66:00:cf:ab:64:f7:1b:ec:f8:1d:ba:8b:ec:5f:9a:65:88: 8b:c2:cb:b4:24:00:ae:1d:a1:a8:c2:a0:4c:13:66:db:9e:dc: dd:ba:d0:4a:8b:5f:26:01:46:8f:40:e9:0a:ef:dd:54:9c:79: c4:77:ff:44:e9:8e:26:86:7b:80:6c:d7:9a:04:62:e6:61:ee: 56:8e:8d:4c:fd:83:04:95:a4:d3:15:b4:e8:b7:3c:56:68:eb: 45:10:d3:a1:00:4e:b8:68:4b:a2:18:99:73:b2:00:51:eb:f5: 9f:30:cd:b8:4d:b1:37:7c:04:ed:d8:04:a0:fa:ad:9e:43:a3: 63:20:e9:e4:c6:6a:9b:95:fc:64:1a:75:ce:05:f4:ac:f9:70: b3:f5:5e:1f:f4:0e:1d:20:83:4f:51:ed:19:b8:ed:7a:6f:3a: f9:a2:4a:c2:a9:f2:8b:ef:d5:b3:0a:51:56:a2:12:7b:02:74: 90:1d:a9:37:30:97:2e:33:9e:3f:4c:68:2a:d6:3b:2a:a9:78: 36:e5:67:f4:b6:81:52:57:b1:8c:21:bb:c1:10:f8:61:34:c8: 67:fd:8d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1LAz5H/2KELrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk OGFlNzY0YzUtZjMxMC00ZDg1LWExMjQtZWI2ZTU1YWQwZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhft0aoj2dg0YsPB6Ko6ENxGrXHOMCWbaBwAY lBXF9K+57GbA20k/U2VLabTAQh8ArT3s9tTtR3UJKyb+lJM840hCYIYn4IZJ+w2o P9f5vEM1YZLXJ7IFZxXdmOEcQR46i9CyXPglky0J3njepvmVyxonv2vVtYSbI1fi vbvzl75hf5nHMM2Mqy27Mhi/5qBSercjnXTQrFtqc53EenkJKVdyyBN+Rja1Ri1s 9xizEqww2CzmQ1s7llXW2I6E60k/oLyp8+8a/mQohMTaPqFrXeal/Ymbs4ao0iWu vijbULp91Ut12K4ZRE0cIpj/3b1shKVBjwJSBQPMkS9pyenQ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ+ncb+B9NHvrhBbRkFrleV000dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzQ4YmQzMjItYjJhZC0z YmRkLTg1NzAtMjQ1ZjFhNjU3NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB312M7ud3oK0kDnwPwjYFh9gHuiEhr61hTJ5tdH1qQgggK5zxxmAM+r ZPcb7PgduovsX5pliIvCy7QkAK4doajCoEwTZtue3N260EqLXyYBRo9A6Qrv3VSc ecR3/0TpjiaGe4Bs15oEYuZh7laOjUz9gwSVpNMVtOi3PFZo60UQ06EATrhoS6IY mXOyAFHr9Z8wzbhNsTd8BO3YBKD6rZ5Do2Mg6eTGapuV/GQadc4F9Kz5cLP1Xh/0 Dh0gg09R7Rm47XpvOvmiSsKp8ovv1bMKUVaiEnsCdJAdqTcwly4znj9MaCrWOyqp eDblZ/S2gVJXsYwhu8EQ+GE0yGf9jQ0= -----END CERTIFICATE-----Generated at Thu Jul 10 03:01:47 2025 by rpki-client