$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa File: 88e9fd55-47e4-358a-863a-d86afd17b3b0.roa (raw, json) Hash identifier: V5v+Jw4NcS/O6RhPoeRFcVaKaz7o/+M1398pBQlHTzc= Subject key identifier: E5:DC:5F:79:2C:7C:B8:91:25:7B:A1:98:3B:72:EA:ED:9D:81:2A:BB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350AC5609DE364C9FCAD820 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:ac:56:09:de:36:4c:9f:ca:d8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=60e283d7-393d-424b-81ef-c16e832efdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:ff:07:85:69:61:b8:26:23:ba:8e:c0:33: fe:17:11:c1:5d:7e:92:84:d8:91:d8:69:f2:a1:a8: b7:f0:b1:79:8a:7e:c0:02:11:35:87:fa:b6:a3:5c: e3:bc:aa:73:1f:fe:44:a6:dd:31:ef:29:04:fb:98: 1c:6b:7a:ad:61:4a:02:54:2f:92:b9:7b:53:09:bc: 78:17:59:bf:14:6f:4c:42:ad:5f:a1:19:8b:a0:a6: 6f:e7:b1:c7:bd:18:51:65:3b:0d:74:dc:0e:41:c4: 7d:90:3c:48:cd:3c:6d:df:e2:df:f6:43:fc:87:5e: 58:30:c1:b4:2d:3d:3e:8e:ab:92:79:1f:54:7b:b1: b3:47:98:bd:ed:5e:af:a3:a4:eb:73:c3:b9:ec:f8: 4d:e7:09:e6:eb:4c:5a:00:39:2b:49:bc:03:20:a5: 9b:69:61:39:1b:15:04:99:a2:d3:36:ca:1c:84:35: 88:08:50:be:93:68:9d:b9:17:72:d8:e9:3e:ee:f4: 2c:99:15:71:ac:40:14:3b:4f:e7:9a:b9:33:34:8c: 72:99:b6:c3:ed:af:d8:aa:2b:fa:05:6a:dd:0a:60: 21:16:f8:96:0c:a1:bc:35:28:d1:c6:df:3f:8e:04: e8:d4:6c:5e:cd:c4:50:87:1b:86:dc:ec:31:69:8c: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:5F:79:2C:7C:B8:91:25:7B:A1:98:3B:72:EA:ED:9D:81:2A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fb:03:be:20:f4:38:7d:30:85:01:f4:1b:03:3f:ae:e6:f1: 7b:ee:87:6b:ea:24:1f:96:d5:ba:31:35:2e:7a:ae:b2:bc:56: 5f:dd:8d:f2:32:33:fa:4b:75:8c:bb:16:2e:d7:f0:3a:48:87: 75:e3:d0:ad:44:cd:c2:7d:22:26:08:9b:9c:cc:e9:99:65:73: 7f:75:d9:a0:56:a1:35:bf:4a:7c:2e:af:c8:17:a5:ab:d4:06: b7:fc:cf:45:20:48:8f:2f:f1:58:8b:31:85:9f:db:d9:f3:f0: e8:3b:68:15:3a:8a:88:2d:dc:26:79:1f:e8:ae:79:55:f9:5f: e1:02:98:63:42:b1:94:b8:8d:4d:79:e1:86:6c:bc:56:8d:03: 7e:30:dd:11:f5:9e:ee:4b:54:f9:bd:b6:d2:c0:9b:6e:6b:35: 07:01:8c:d0:96:10:4c:7e:75:4c:3a:77:81:23:d1:19:ed:a9: 20:45:5e:3e:ad:18:35:d5:88:f1:5a:24:04:62:0e:d6:23:73: 64:7c:6c:3e:48:86:92:41:20:36:02:42:2c:3b:1c:d5:15:9a: d0:7a:b8:e7:d7:91:60:10:38:3e:ef:73:1c:5b:85:b2:d0:99: f3:45:de:54:eb:36:92:8d:38:9f:ef:fc:b0:d6:f6:55:6b:23: 34:b1:bd:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKxWCd42TJ/K2CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk NjBlMjgzZDctMzkzZC00MjRiLTgxZWYtYzE2ZTgzMmVmZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGH/B4VpYbgmI7qOwDP+FxHBXX6ShNiR2Gny oai38LF5in7AAhE1h/q2o1zjvKpzH/5Ept0x7ykE+5gca3qtYUoCVC+SuXtTCbx4 F1m/FG9MQq1foRmLoKZv57HHvRhRZTsNdNwOQcR9kDxIzTxt3+Lf9kP8h15YMMG0 LT0+jquSeR9Ue7GzR5i97V6vo6Trc8O57PhN5wnm60xaADkrSbwDIKWbaWE5GxUE maLTNsochDWICFC+k2iduRdy2Ok+7vQsmRVxrEAUO0/nmrkzNIxymbbD7a/Yqiv6 BWrdCmAhFviWDKG8NSjRxt8/jgTo1GxezcRQhxuG3OwxaYx6owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXcX3ksfLiRJXuhmDty6u2dgSq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODhlOWZkNTUtNDdlNC0z NThhLTg2M2EtZDg2YWZkMTdiM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn7A74g9Dh9MIUB9BsDP67m8Xvuh2vqJB+W1boxNS56rrK8Vl/djfIy M/pLdYy7Fi7X8DpIh3Xj0K1EzcJ9IiYIm5zM6Zllc3912aBWoTW/Snwur8gXpavU Brf8z0UgSI8v8ViLMYWf29nz8Og7aBU6iogt3CZ5H+iueVX5X+ECmGNCsZS4jU15 4YZsvFaNA34w3RH1nu5LVPm9ttLAm25rNQcBjNCWEEx+dUw6d4Ej0RntqSBFXj6t GDXViPFaJARiDtYjc2R8bD5IhpJBIDYCQiw7HNUVmtB6uOfXkWAQOD7vcxxbhbLQ mfNF3lTrNpKNOJ/v/LDW9lVrIzSxvfY= -----END CERTIFICATE-----Generated at Thu Jul 10 09:21:04 2025 by rpki-client