$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f3f6499-c4ca-38ba-b440-7c710b900f10.roa File: 7f3f6499-c4ca-38ba-b440-7c710b900f10.roa (raw, json) Hash identifier: dCYlpLYUegf0CAV3LadB9L2Wu7B201BaLH+hrWIADFM= Subject key identifier: CF:F6:97:71:08:E1:09:14:07:01:7B:2F:5D:2C:6A:FC:4A:27:C5:7A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A6DBB6E7EDFA2AE7AEB497440 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f3f6499-c4ca-38ba-b440-7c710b900f10.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 41264 IP address blocks: 104.132.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:6e:7e:df:a2:ae:7a:eb:49:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=9dd94b6f-f772-48db-a90a-0f91a050bb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:8c:0c:b1:63:b8:fb:4e:c4:96:34:80:d9: 01:05:b5:c9:7e:6a:24:f2:ca:fa:46:7e:12:75:b6: 61:f2:a5:c0:15:15:99:8b:58:ac:bb:a2:54:db:bc: 00:89:02:db:35:ed:92:bd:2c:f0:eb:99:03:a1:0f: d3:30:3e:b8:66:57:41:db:77:c3:ad:01:0b:df:a6: 2c:f9:8e:f0:7e:ff:c6:11:21:c9:bd:df:1f:a6:76: 4b:f0:d7:a5:9b:3a:e1:61:f2:0a:01:11:f8:97:ec: 7e:17:68:0b:d5:ee:e3:e3:4c:4f:93:39:54:74:ca: dd:67:5a:44:e5:53:3f:2f:90:cb:5f:66:c1:61:4d: a9:21:99:47:7a:e7:83:15:f8:45:8f:dc:98:4e:ea: ca:76:b2:55:ef:47:42:79:88:d7:ba:2e:ba:91:0e: 25:38:5f:81:00:5e:c5:4a:4a:ce:c0:95:73:47:67: ac:9a:a8:96:11:d7:e6:55:72:18:c2:cf:19:96:a4: a2:bb:a5:5f:aa:b5:71:ad:3b:12:b6:fc:a8:6b:3b: fc:65:28:0a:8c:43:9f:88:49:db:16:d1:27:ae:fe: b2:d5:24:41:7d:37:d7:16:ae:27:27:34:5b:81:b9: 97:df:31:eb:4a:e9:25:fe:c7:48:f1:0e:46:13:c2: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:97:71:08:E1:09:14:07:01:7B:2F:5D:2C:6A:FC:4A:27:C5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f3f6499-c4ca-38ba-b440-7c710b900f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8d:2d:04:b2:e7:05:e4:83:71:ba:30:cf:49:22:7e:73:1d: 70:11:7a:c6:32:08:62:66:3f:c8:a9:2f:6d:5b:c6:10:ed:3a: ac:f9:be:db:eb:07:c9:32:94:91:a5:d4:87:78:08:75:cd:74: d3:d8:7c:eb:2f:2d:30:8b:cc:50:a8:df:f9:61:cd:93:77:e5: 11:db:59:67:01:3e:49:5b:4e:5b:e1:b2:aa:7b:3a:f9:cb:20: 69:0a:48:f0:68:06:a5:9c:3f:30:05:03:cf:56:6c:9f:fc:78: 4b:1f:9a:83:a2:dc:7e:26:76:b3:58:cf:8c:fd:57:53:e2:84: fe:c6:3c:03:a6:8c:82:f3:0d:ee:ba:17:32:bd:9d:ef:f3:b9: bd:c7:b1:51:6a:4a:43:57:af:88:6a:27:54:e3:82:42:b8:8f: cf:3d:88:06:d1:5b:12:61:d3:b1:e2:39:3f:5b:3d:c8:0d:5e: bf:58:12:1c:ae:46:11:cf:bb:f9:be:66:82:7f:f5:14:32:c8: 25:aa:9e:d5:6c:e2:bf:f1:1e:f1:91:8d:56:58:b5:b7:c4:8b: 60:94:3a:f0:a3:7c:d1:3f:f0:17:b1:4c:f6:1f:96:b5:4c:a0: 13:56:af:ed:d2:77:6a:75:92:53:ca:19:21:0a:e5:5c:f4:70: 36:1f:2d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu25+36KueutJdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk OWRkOTRiNmYtZjc3Mi00OGRiLWE5MGEtMGY5MWEwNTBiYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1CMDLFjuPtOxJY0gNkBBbXJfmok8sr6Rn4S dbZh8qXAFRWZi1isu6JU27wAiQLbNe2SvSzw65kDoQ/TMD64ZldB23fDrQEL36Ys +Y7wfv/GESHJvd8fpnZL8NelmzrhYfIKARH4l+x+F2gL1e7j40xPkzlUdMrdZ1pE 5VM/L5DLX2bBYU2pIZlHeueDFfhFj9yYTurKdrJV70dCeYjXui66kQ4lOF+BAF7F SkrOwJVzR2esmqiWEdfmVXIYws8ZlqSiu6VfqrVxrTsStvyoazv8ZSgKjEOfiEnb FtEnrv6y1SRBfTfXFq4nJzRbgbmX3zHrSukl/sdI8Q5GE8LZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/2l3EI4QkUBwF7L10savxKJ8V6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvN2YzZjY0OTktYzRjYS0z OGJhLWI0NDAtN2M3MTBiOTAwZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSNLQSy5wXkg3G6MM9JIn5zHXAResYyCGJmP8ipL21bxhDtOqz5vtvr B8kylJGl1Id4CHXNdNPYfOsvLTCLzFCo3/lhzZN35RHbWWcBPklbTlvhsqp7OvnL IGkKSPBoBqWcPzAFA89WbJ/8eEsfmoOi3H4mdrNYz4z9V1PihP7GPAOmjILzDe66 FzK9ne/zub3HsVFqSkNXr4hqJ1TjgkK4j889iAbRWxJh07HiOT9bPcgNXr9YEhyu RhHPu/m+ZoJ/9RQyyCWqntVs4r/xHvGRjVZYtbfEi2CUOvCjfNE/8BexTPYflrVM oBNWr+3Sd2p1klPKGSEK5Vz0cDYfLQs= -----END CERTIFICATE-----Generated at Thu Jul 10 10:43:04 2025 by rpki-client