$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49170b90-2f82-3a37-ae54-b933b33095dc.roa File: 49170b90-2f82-3a37-ae54-b933b33095dc.roa (raw, json) Hash identifier: J938bM+Afk9ZK/euGANa4857sYedHDFGYVIOT7HAUSM= Subject key identifier: 73:BD:DC:8A:6D:E1:E5:12:74:7F:5E:37:0C:91:C3:FD:AA:8D:14:75 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C5A7FAA793F7671BDF00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49170b90-2f82-3a37-ae54-b933b33095dc.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c5:a7:fa:a7:93:f7:67:1b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=7ff2413a-c405-427c-9f78-70fae1aa8221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:85:0d:36:11:12:78:4e:01:91:79:aa:d0: 64:8a:50:5b:3a:38:76:44:df:f7:c4:47:a4:f4:10: a3:39:63:0a:67:e0:72:ae:fa:2d:7e:d4:aa:51:58: 7d:ab:88:3c:6a:ee:5a:cd:da:c4:81:74:46:f5:49: f0:41:a4:27:46:de:f3:c2:0b:5c:d5:fc:5e:8e:65: ca:5f:ac:00:6a:04:06:cc:e0:b5:4f:df:b7:c9:19: a7:19:78:41:75:05:1b:72:47:5c:26:23:32:37:5c: ef:3c:75:2c:12:5e:4a:20:fc:a6:8c:17:c5:92:cc: 0c:06:f9:55:55:ad:ac:72:9a:aa:29:f4:6c:64:4a: d9:a6:f3:0a:44:9d:9c:c3:e1:cb:f0:fc:c1:75:f5: be:4f:e9:9a:5f:e0:2b:88:89:dc:1a:2e:07:61:c8: 3a:97:73:fd:7e:8a:d4:d6:f1:8f:e9:3a:a7:53:54: d3:7f:f5:22:b9:fe:fc:c8:4f:22:69:63:20:de:77: 7e:0e:3c:71:33:d6:7a:24:de:a8:b4:d5:ac:16:c8: f6:e4:e3:fc:2e:4b:ad:04:64:e8:89:7d:93:9c:6b: 13:82:04:fc:77:c2:56:b5:d3:a9:32:08:ec:5f:72: 00:f7:ea:31:f1:a0:4f:95:89:cc:a7:d4:34:1e:8c: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BD:DC:8A:6D:E1:E5:12:74:7F:5E:37:0C:91:C3:FD:AA:8D:14:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49170b90-2f82-3a37-ae54-b933b33095dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:dc:25:09:e0:81:f6:16:66:64:41:10:de:15:8b:34:ff:e3: 9a:e0:29:e5:76:00:60:81:9a:11:66:0c:85:11:6f:e2:de:2e: 49:d7:a8:f8:a8:96:a5:db:ad:05:44:00:80:e1:1a:f1:fd:00: 6b:88:b3:26:84:9e:4e:f1:3d:f4:59:e7:ff:de:1b:29:90:4f: 4c:a9:8c:54:a0:4c:c5:a9:f7:0b:da:46:cc:fd:4a:67:30:a0: ec:46:63:d8:0e:a6:d3:85:55:ad:5f:c2:9a:4d:cd:0b:2f:70: 17:04:84:4f:b3:26:d6:eb:42:e6:38:81:f8:f6:79:21:80:f0: a5:57:59:10:aa:e7:0f:2f:7e:97:6e:0c:82:62:f5:12:56:06: db:de:f4:c1:36:5d:4a:32:14:b3:c9:b9:47:05:62:55:2d:57: e2:e0:dc:09:72:92:b0:a1:c8:80:e3:67:69:25:fb:5c:cc:62: e2:68:a7:8f:b7:90:44:aa:62:79:d8:ba:d7:52:cc:24:cd:37: 30:e6:e6:1c:67:86:ea:66:a5:2f:28:3b:f6:76:5d:01:5d:a6: 83:ee:1f:f5:be:a0:3f:03:59:6e:e7:a7:39:be:8c:53:5c:f7: 31:5c:28:5a:ce:94:f2:5e:d6:fa:f6:4d:c2:24:38:92:84:0b: 6a:24:66:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMWn+qeT92cb3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk N2ZmMjQxM2EtYzQwNS00MjdjLTlmNzgtNzBmYWUxYWE4MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdaFDTYREnhOAZF5qtBkilBbOjh2RN/3xEek 9BCjOWMKZ+ByrvotftSqUVh9q4g8au5azdrEgXRG9UnwQaQnRt7zwgtc1fxejmXK X6wAagQGzOC1T9+3yRmnGXhBdQUbckdcJiMyN1zvPHUsEl5KIPymjBfFkswMBvlV Va2scpqqKfRsZErZpvMKRJ2cw+HL8PzBdfW+T+maX+AriIncGi4HYcg6l3P9forU 1vGP6TqnU1TTf/Uiuf78yE8iaWMg3nd+DjxxM9Z6JN6otNWsFsj25OP8LkutBGTo iX2TnGsTggT8d8JWtdOpMgjsX3IA9+ox8aBPlYnMp9Q0HoyZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO93Ipt4eUSdH9eNwyRw/2qjRR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDkxNzBiOTAtMmY4Mi0z YTM3LWFlNTQtYjkzM2IzMzA5NWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvcJQnggfYWZmRBEN4VizT/45rgKeV2AGCBmhFmDIURb+LeLknXqPio lqXbrQVEAIDhGvH9AGuIsyaEnk7xPfRZ5//eGymQT0ypjFSgTMWp9wvaRsz9Smcw oOxGY9gOptOFVa1fwppNzQsvcBcEhE+zJtbrQuY4gfj2eSGA8KVXWRCq5w8vfpdu DIJi9RJWBtve9ME2XUoyFLPJuUcFYlUtV+Lg3AlykrChyIDjZ2kl+1zMYuJop4+3 kESqYnnYutdSzCTNNzDm5hxnhupmpS8oO/Z2XQFdpoPuH/W+oD8DWW7npzm+jFNc 9zFcKFrOlPJe1vr2TcIkOJKEC2okZmE= -----END CERTIFICATE-----Generated at Thu Jul 10 10:38:44 2025 by rpki-client