$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85c8a864-4287-31a5-901d-56acfec8a68f.roa File: 85c8a864-4287-31a5-901d-56acfec8a68f.roa (raw, json) Hash identifier: wPxlJu7IHF7l2+1FTvHQDA0g9lGuG+a6tatcoF1CqOw= Subject key identifier: B2:4A:0E:9E:8D:7F:B4:15:C8:68:DC:17:82:E1:CB:2D:1B:84:58:AB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350A7C65BC28E319FD0E920 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85c8a864-4287-31a5-901d-56acfec8a68f.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a7:c6:5b:c2:8e:31:9f:d0:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=113d9fca-a5c7-434d-a65b-ebc4155d7fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8b:ef:74:43:65:d2:8b:d7:4e:9f:38:89:31: 04:67:e1:a2:85:9f:8c:44:79:f6:25:2a:a9:c0:08: c1:f5:ee:d3:bc:2e:7d:49:bb:5e:21:27:e6:1c:b2: 37:5e:ba:62:16:57:2f:2e:f7:f2:40:ca:d6:d6:c6: 02:36:6e:ba:0d:e1:82:8c:70:3f:3e:c5:99:37:08: fc:af:79:2b:9b:67:c2:7f:f7:b0:8c:c0:76:db:f4: 4b:8b:84:2e:b6:6a:c9:3f:a3:66:c2:41:41:cd:91: 22:ff:86:86:6c:b4:23:68:75:14:fd:e7:77:b2:ae: fc:4d:24:92:49:ae:b4:eb:6f:32:da:c4:30:14:7a: 3b:88:cd:c5:31:8b:f7:21:98:78:f5:a8:97:e0:0e: cd:d2:95:fa:83:2f:1a:cb:dd:45:d1:11:9b:e3:ad: 36:41:19:47:87:d8:26:e8:c1:17:85:4f:89:77:ba: d7:10:d9:57:e3:71:ea:2f:7a:8f:8b:75:ab:dc:d7: c0:3f:c1:49:2d:13:f3:48:5e:14:6f:ca:c5:bd:55: b8:0e:91:bb:03:90:01:e5:a6:2b:ae:55:64:bc:b9: 3e:83:7c:c5:a3:93:66:b0:86:f1:ce:5d:ba:4f:4c: 0b:68:20:c0:e4:aa:1f:aa:99:fc:e4:4e:97:33:72: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4A:0E:9E:8D:7F:B4:15:C8:68:DC:17:82:E1:CB:2D:1B:84:58:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85c8a864-4287-31a5-901d-56acfec8a68f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:22:da:14:74:a7:70:e5:dc:cd:02:38:72:9d:5a:e5:04:18: 37:07:3e:3a:29:35:aa:e4:8a:e0:c8:fb:34:39:bc:1e:65:e9: 9d:35:1c:ff:4b:6e:be:9e:f1:9e:07:a1:31:52:db:aa:f2:3b: a4:3a:17:66:e7:8d:46:e6:6c:82:70:fa:2d:02:5c:19:fa:6d: 57:04:81:f1:bc:f6:25:2b:0b:05:55:4e:71:94:7f:98:01:99: 47:9f:26:47:f4:0c:70:49:da:c1:4f:7f:10:a5:20:f3:3d:b4: 43:32:00:81:f2:a8:c6:a0:de:9d:64:57:fe:aa:20:83:b1:2b: bd:c6:53:e9:c7:96:48:40:c1:9a:b7:5a:a7:25:8f:23:ff:88: 80:58:ae:be:65:ab:09:44:c3:ad:1d:60:5c:8f:fa:72:15:1f: 16:95:5c:ca:a6:5d:9a:77:af:5b:f5:a2:f2:25:67:92:99:fd: 18:9f:39:6d:40:3c:35:18:a4:ae:56:de:b2:a9:b3:9c:7f:7f: 07:2c:0f:0e:5b:41:ba:75:df:62:41:1a:21:b8:1e:ba:24:fa: 01:e6:fd:b7:24:63:97:45:98:1b:73:0a:2a:b2:b7:9a:aa:e3: c3:d7:fe:07:35:04:40:19:a9:08:c6:67:f4:60:21:1f:da:e8: 47:ea:84:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKfGW8KOMZ/Q6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MTEzZDlmY2EtYTVjNy00MzRkLWE2NWItZWJjNDE1NWQ3ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YvvdENl0ovXTp84iTEEZ+GihZ+MRHn2JSqp wAjB9e7TvC59SbteISfmHLI3XrpiFlcvLvfyQMrW1sYCNm66DeGCjHA/PsWZNwj8 r3krm2fCf/ewjMB22/RLi4QutmrJP6NmwkFBzZEi/4aGbLQjaHUU/ed3sq78TSSS Sa60628y2sQwFHo7iM3FMYv3IZh49aiX4A7N0pX6gy8ay91F0RGb4602QRlHh9gm 6MEXhU+Jd7rXENlX43HqL3qPi3Wr3NfAP8FJLRPzSF4Ub8rFvVW4DpG7A5AB5aYr rlVkvLk+g3zFo5NmsIbxzl26T0wLaCDA5Kofqpn85E6XM3IY2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJKDp6Nf7QVyGjcF4Lhyy0bhFirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODVjOGE4NjQtNDI4Ny0z MWE1LTkwMWQtNTZhY2ZlYzhhNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYi2hR0p3Dl3M0COHKdWuUEGDcHPjopNarkiuDI+zQ5vB5l6Z01HP9L br6e8Z4HoTFS26ryO6Q6F2bnjUbmbIJw+i0CXBn6bVcEgfG89iUrCwVVTnGUf5gB mUefJkf0DHBJ2sFPfxClIPM9tEMyAIHyqMag3p1kV/6qIIOxK73GU+nHlkhAwZq3 WqcljyP/iIBYrr5lqwlEw60dYFyP+nIVHxaVXMqmXZp3r1v1ovIlZ5KZ/RifOW1A PDUYpK5W3rKps5x/fwcsDw5bQbp132JBGiG4Hrok+gHm/bckY5dFmBtzCiqyt5qq 48PX/gc1BEAZqQjGZ/RgIR/a6EfqhGo= -----END CERTIFICATE-----Generated at Thu Jul 10 03:33:19 2025 by rpki-client