$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa File: 8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa (raw, json) Hash identifier: oQM7rvPeiIzkYJDb/9tLpw6qgkpC5SvwlT3vhAP8nNc= Subject key identifier: 49:87:39:A6:CB:D0:0E:E6:6C:0B:55:38:19:34:21:87:09:0F:43:09 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350A8B4556DA71937F3E800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a8:b4:55:6d:a7:19:37:f3:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=822a4b93-0b31-42f9-ac5f-3cced5862d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:34:27:bd:49:b1:ef:21:b3:27:3d:04:da: 57:ea:23:b4:4c:64:a6:cc:12:7d:b1:8a:04:e1:ce: c8:e4:01:0b:a4:bc:a2:c4:ee:af:67:f8:e2:c8:31: b1:68:12:f9:c7:1f:6c:a5:a3:45:81:78:74:94:e2: 55:e9:de:29:86:48:76:30:aa:7c:f6:2b:8c:59:45: da:8f:fe:0b:91:2f:2f:f2:ab:5c:cc:a3:01:b2:80: 59:da:6b:4d:30:38:10:27:a1:bf:3f:0d:e9:ca:17: 8f:ba:f1:1f:1a:ee:d3:97:60:d9:36:be:f0:37:70: cf:e1:f1:06:9c:24:f9:cf:c7:9d:de:2e:7b:26:50: e1:9b:de:76:2a:ed:3b:bf:e4:c2:25:28:65:0a:4c: d8:c2:5d:31:8c:45:53:f8:ef:83:96:af:5c:7f:89: 40:89:92:1f:51:16:83:d6:03:17:b7:8a:ed:2d:e5: 71:40:eb:66:6b:05:52:e0:8c:a9:00:a4:ed:97:ad: 4c:aa:41:24:ed:98:68:3c:3d:16:4e:f3:1c:7d:5d: fa:ab:a0:31:6c:79:0d:d6:e3:6d:2e:17:ad:8f:6f: 04:1f:a9:38:5e:45:f2:60:9d:a7:d7:d3:1b:ef:ba: 34:81:95:f2:14:a3:c2:f0:2b:70:c9:7b:35:ff:35: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:87:39:A6:CB:D0:0E:E6:6C:0B:55:38:19:34:21:87:09:0F:43:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:83:db:b7:c3:ff:b1:a1:6a:c3:5d:d6:c9:9c:9b:d1:45:93: e2:27:7b:f2:f9:26:03:fa:42:27:39:d9:45:bb:3d:ec:e7:a1: 37:5f:91:95:b0:f4:65:15:3f:8e:b5:66:2c:96:22:4a:b6:07: 3c:cd:0a:db:23:54:73:45:48:2a:b7:f8:b6:c0:ca:96:07:ca: 72:8e:f5:79:d2:7a:53:0c:d2:c4:1a:29:b4:c6:28:e2:d8:62: e9:c0:61:40:49:56:2a:43:47:4f:60:d6:ee:1d:3c:cd:85:bc: 3b:e0:2e:44:da:fb:33:b1:fc:d0:51:5d:cc:90:43:e0:82:17: 46:a1:2c:15:9e:58:d5:40:e3:32:d7:89:6a:fe:94:c6:71:d7: c0:2f:3a:24:e9:5c:5d:ab:25:6e:5c:20:43:0b:24:0c:a2:0f: c2:46:44:18:0e:7d:92:d7:dc:0e:66:22:53:fe:b4:41:a2:c1: 77:d1:46:e8:f3:f4:c3:6e:ee:e6:91:35:64:53:e2:9b:d8:31: 76:94:34:e6:eb:14:c7:42:85:39:8f:4b:50:8b:88:5a:e5:92: 9f:ec:7b:9f:17:cb:46:7f:f3:0b:75:4d:14:4a:80:6e:e3:1a: 50:b6:2b:29:ab:4d:ef:84:b3:ff:88:4d:47:fe:ed:a6:8a:56: c2:ab:a9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKi0VW2nGTfz6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ODIyYTRiOTMtMGIzMS00MmY5LWFjNWYtM2NjZWQ1ODYyZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgs0J71Jse8hsyc9BNpX6iO0TGSmzBJ9sYoE 4c7I5AELpLyixO6vZ/jiyDGxaBL5xx9spaNFgXh0lOJV6d4phkh2MKp89iuMWUXa j/4LkS8v8qtczKMBsoBZ2mtNMDgQJ6G/Pw3pyhePuvEfGu7Tl2DZNr7wN3DP4fEG nCT5z8ed3i57JlDhm952Ku07v+TCJShlCkzYwl0xjEVT+O+Dlq9cf4lAiZIfURaD 1gMXt4rtLeVxQOtmawVS4IypAKTtl61MqkEk7ZhoPD0WTvMcfV36q6AxbHkN1uNt Lhetj28EH6k4XkXyYJ2n19Mb77o0gZXyFKPC8CtwyXs1/zU/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmHOabL0A7mbAtVOBk0IYcJD0MJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGEyZDZhNTctMzVkNS0z MmIyLWI3MWQtNzMxM2UxOTM5YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2D27fD/7GhasNd1smcm9FFk+Ine/L5JgP6Qic52UW7PeznoTdfkZWw 9GUVP461ZiyWIkq2BzzNCtsjVHNFSCq3+LbAypYHynKO9XnSelMM0sQaKbTGKOLY YunAYUBJVipDR09g1u4dPM2FvDvgLkTa+zOx/NBRXcyQQ+CCF0ahLBWeWNVA4zLX iWr+lMZx18AvOiTpXF2rJW5cIEMLJAyiD8JGRBgOfZLX3A5mIlP+tEGiwXfRRujz 9MNu7uaRNWRT4pvYMXaUNObrFMdChTmPS1CLiFrlkp/se58Xy0Z/8wt1TRRKgG7j GlC2KymrTe+Es/+ITUf+7aaKVsKrqak= -----END CERTIFICATE-----Generated at Thu Jul 10 09:44:17 2025 by rpki-client