$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa File: 454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa (raw, json) Hash identifier: lFVvlnNRMkJm2BULfeefThqbCoriIThXySX1zv04EqI= Subject key identifier: CC:08:1E:88:BB:BF:5F:51:D3:E5:32:3F:94:12:AF:B0:4E:FF:D7:CC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A6DBB52290389AE4B3022D340 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 41264 IP address blocks: 104.132.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:52:29:03:89:ae:4b:30:22:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=1e8c8e0b-277f-4953-8ff6-653827165ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:59:ea:f8:71:9a:46:53:64:94:2b:72:16: 30:2a:61:12:2b:b6:96:2e:cb:42:00:04:15:fe:96: 7c:1e:a2:0b:c9:29:5d:c0:d8:09:8a:02:65:2e:a3: d3:40:b5:c8:6e:7b:81:98:f1:78:3c:b8:b3:cc:ff: 5d:7b:4f:0d:77:13:18:6e:f9:05:46:4e:32:58:ef: 24:32:8c:11:b6:8d:4d:f2:b6:6d:3c:c8:e4:29:5a: 7f:71:6b:74:cc:3e:ab:63:d8:8e:af:c2:10:fa:df: 0a:9c:38:15:c3:80:4f:9a:db:f2:40:53:cc:9a:b5: 74:2a:b2:53:a1:69:6e:8d:ab:2b:0c:11:87:ac:09: 01:5f:3f:99:0e:80:59:e1:ae:70:41:b7:e8:ec:0c: 96:01:a8:9f:7f:58:95:05:cc:18:15:7c:4c:36:5f: 6a:bb:13:45:62:87:e5:bc:37:65:3b:28:64:e6:b7: 3e:1a:fc:58:45:2b:9d:12:41:92:31:fc:ac:8f:17: fe:d1:33:39:9b:08:15:41:e9:3c:48:82:d1:57:a8: 5b:d0:ce:dc:3d:d2:96:69:df:88:94:36:fe:cc:64: 26:b1:49:0b:8c:66:d4:35:9b:69:cb:ee:e6:b8:6a: 7b:9f:ab:23:75:53:74:06:24:f8:e4:b4:ba:0e:fa: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:08:1E:88:BB:BF:5F:51:D3:E5:32:3F:94:12:AF:B0:4E:FF:D7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/454dd9a3-9ce1-327f-b3d7-bada60d27e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:84:c7:df:8a:95:42:09:ab:58:6c:2d:de:03:fc:be:0f:5a: 8a:ea:cf:a3:9f:1d:78:72:63:35:4f:71:41:bb:f4:01:f0:df: 77:c0:f8:fe:20:28:12:fa:85:60:02:26:6c:8c:d4:c7:ad:c5: 68:81:e7:8a:14:c1:bb:8a:03:7e:6e:c2:45:ab:d2:22:b5:4a: 7a:fb:68:54:19:65:4e:f6:c5:0c:fe:c0:ad:d1:74:0c:3a:24: 76:c5:c0:d0:76:26:af:54:43:9b:2b:14:da:33:08:48:3a:56: bc:f5:b7:6b:8d:26:ff:3d:c0:62:32:b4:1f:5b:00:a1:e0:c7: 56:54:45:83:ed:7d:57:1f:6f:b2:cb:16:33:f7:33:02:81:f0: 6e:84:d8:14:4d:ee:35:1e:65:61:65:99:a1:a0:44:2f:a2:4a: 12:dc:d5:fc:11:05:cd:af:fa:92:2d:3a:91:d1:c1:95:5a:fc: b4:ca:e1:b3:03:63:4a:1f:b0:97:6c:40:2b:77:f5:64:5d:9c: e6:1d:b2:18:03:37:7d:9d:17:98:26:9f:c9:c2:4e:99:2e:3d: 9d:d2:38:03:19:3f:bc:fc:3f:e0:4c:de:6b:c6:2a:65:e0:ad: 32:63:82:49:34:37:68:ad:88:58:24:06:fe:ea:34:79:7c:10: 84:a4:e5:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1IpA4muSzAi00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MWU4YzhlMGItMjc3Zi00OTUzLThmZjYtNjUzODI3MTY1ZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/pZ6vhxmkZTZJQrchYwKmESK7aWLstCAAQV /pZ8HqILySldwNgJigJlLqPTQLXIbnuBmPF4PLizzP9de08NdxMYbvkFRk4yWO8k MowRto1N8rZtPMjkKVp/cWt0zD6rY9iOr8IQ+t8KnDgVw4BPmtvyQFPMmrV0KrJT oWlujasrDBGHrAkBXz+ZDoBZ4a5wQbfo7AyWAaiff1iVBcwYFXxMNl9quxNFYofl vDdlOyhk5rc+GvxYRSudEkGSMfysjxf+0TM5mwgVQek8SILRV6hb0M7cPdKWad+I lDb+zGQmsUkLjGbUNZtpy+7muGp7n6sjdVN0BiT45LS6DvqMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwIHoi7v19R0+UyP5QSr7BO/9fMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDU0ZGQ5YTMtOWNlMS0z MjdmLWIzZDctYmFkYTYwZDI3ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiEx9+KlUIJq1hsLd4D/L4PWorqz6OfHXhyYzVPcUG79AHw33fA+P4g KBL6hWACJmyM1MetxWiB54oUwbuKA35uwkWr0iK1Snr7aFQZZU72xQz+wK3RdAw6 JHbFwNB2Jq9UQ5srFNozCEg6Vrz1t2uNJv89wGIytB9bAKHgx1ZURYPtfVcfb7LL FjP3MwKB8G6E2BRN7jUeZWFlmaGgRC+iShLc1fwRBc2v+pItOpHRwZVa/LTK4bMD Y0ofsJdsQCt39WRdnOYdshgDN32dF5gmn8nCTpkuPZ3SOAMZP7z8P+BM3mvGKmXg rTJjgkk0N2itiFgkBv7qNHl8EISk5eQ= -----END CERTIFICATE-----Generated at Thu Jul 10 02:03:23 2025 by rpki-client