$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa File: a0b3e32c-e284-32e7-b3de-255155fd2f08.roa (raw, json) Hash identifier: WaTietVkwd2y95ynBEivdM3kVOeUC/knS1CxE3N1hE4= Subject key identifier: 1E:48:48:6A:3E:91:8C:3A:AD:9D:39:E8:29:3C:10:FE:5D:EA:CC:EA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A708619CC67905CC51D3B0380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 41264 IP address blocks: 104.133.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:19:cc:67:90:5c:c5:1d:3b:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=b6fb105f-bbaa-4c75-9aeb-368f5bdfa710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:67:00:83:c4:71:ae:d5:47:c1:10:a8:7c: 48:32:e3:2c:25:0e:ef:3b:54:a7:53:4c:25:ee:80: 5b:4d:c2:e9:f2:03:74:4f:d8:a9:7f:58:6e:59:81: e6:61:89:5e:53:a2:f4:d6:0a:d3:d5:bc:13:35:20: 97:7a:9c:52:83:1b:c7:a2:89:24:fc:37:39:94:1a: aa:9c:b5:69:4f:d6:e8:01:be:c8:91:bc:26:ef:89: e6:ad:59:6c:0b:20:01:36:31:1d:08:8d:a7:f2:a1: 56:f9:0d:82:48:f7:46:da:af:fa:64:5a:ed:32:59: 43:91:41:d9:8c:a2:bf:4f:e5:bc:7e:7c:80:51:b7: 77:2b:f4:99:af:29:41:e2:cf:3b:9e:36:20:2b:af: 0d:8b:49:1c:19:a4:a5:72:5b:cf:f6:e1:83:42:f0: 6c:84:21:be:28:90:3d:9b:e4:34:88:3d:6c:a5:3d: eb:02:2e:83:c1:c7:c6:02:9d:7b:0a:6f:7e:60:da: 91:0a:cb:86:33:ec:3c:74:f8:2f:fe:2c:ac:5c:57: 69:3f:8c:42:35:b1:b8:9d:dc:b6:33:36:13:ec:13: 23:51:c4:82:57:ff:31:e9:1f:46:b9:69:30:ab:11: 87:99:ea:1d:c0:02:53:48:03:2d:40:47:96:3e:07: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:48:48:6A:3E:91:8C:3A:AD:9D:39:E8:29:3C:10:FE:5D:EA:CC:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:82:95:34:61:13:9a:aa:ba:b9:a1:fa:50:ec:03:8a:aa:42: 6b:09:a0:97:b7:6c:1a:8a:72:fe:bb:db:4d:38:ae:0a:75:9a: ee:93:45:43:e3:2a:28:6d:60:94:21:82:e6:a7:99:50:6f:56: 32:c9:24:f3:1e:4c:3f:ba:59:c2:cd:59:86:8b:f0:dc:2b:48: 3e:f3:4f:a8:89:29:f8:68:3b:2f:38:91:11:9d:92:3f:b0:28: 5d:40:85:e9:65:46:33:86:b1:41:85:a3:f2:b9:6d:b2:a1:1e: 65:23:d0:01:d9:25:b5:87:b2:c8:ae:73:38:51:9f:cd:9d:f4: 65:30:aa:0c:12:28:63:61:2e:f4:0b:4f:80:51:82:cf:59:7b: 55:77:47:79:5e:51:e9:b1:ab:78:fd:24:eb:4e:04:cf:9f:d8: ca:2f:d2:8c:4b:bd:ad:44:bb:b5:59:27:d7:a1:83:c7:9c:e3: 9d:8f:15:d4:8e:16:1b:8c:6e:01:a3:d4:56:6a:69:c1:d8:b7: 03:3b:3e:03:c7:f5:64:9b:33:1d:41:c6:94:00:11:59:32:d9: 8a:b1:8c:19:b2:84:98:87:5d:fa:e6:ea:c5:5f:30:3f:0f:de: 55:fd:b5:fe:5e:fb:48:25:64:ed:27:d3:07:db:69:fc:b5:c0: 49:68:93:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhnMZ5BcxR07A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk YjZmYjEwNWYtYmJhYS00Yzc1LTlhZWItMzY4ZjViZGZhNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR1nAIPEca7VR8EQqHxIMuMsJQ7vO1SnU0wl 7oBbTcLp8gN0T9ipf1huWYHmYYleU6L01grT1bwTNSCXepxSgxvHookk/Dc5lBqq nLVpT9boAb7Ikbwm74nmrVlsCyABNjEdCI2n8qFW+Q2CSPdG2q/6ZFrtMllDkUHZ jKK/T+W8fnyAUbd3K/SZrylB4s87njYgK68Ni0kcGaSlclvP9uGDQvBshCG+KJA9 m+Q0iD1spT3rAi6DwcfGAp17Cm9+YNqRCsuGM+w8dPgv/iysXFdpP4xCNbG4ndy2 MzYT7BMjUcSCV/8x6R9GuWkwqxGHmeodwAJTSAMtQEeWPgdP4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5ISGo+kYw6rZ056Ck8EP5d6szqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTBiM2UzMmMtZTI4NC0z MmU3LWIzZGUtMjU1MTU1ZmQyZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiClTRhE5qqurmh+lDsA4qqQmsJoJe3bBqKcv672004rgp1mu6TRUPj KihtYJQhguanmVBvVjLJJPMeTD+6WcLNWYaL8NwrSD7zT6iJKfhoOy84kRGdkj+w KF1AhellRjOGsUGFo/K5bbKhHmUj0AHZJbWHssiuczhRn82d9GUwqgwSKGNhLvQL T4BRgs9Ze1V3R3leUemxq3j9JOtOBM+f2Mov0oxLva1Eu7VZJ9ehg8ec452PFdSO FhuMbgGj1FZqacHYtwM7PgPH9WSbMx1BxpQAEVky2YqxjBmyhJiHXfrm6sVfMD8P 3lX9tf5e+0glZO0n0wfbafy1wElok50= -----END CERTIFICATE-----Generated at Thu Jul 10 01:34:46 2025 by rpki-client