$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa File: cf005a1e-cc33-32b3-8191-49c75f69f07b.roa (raw, json) Hash identifier: 02qj1g+C1OltLrgIgfYEmEWiKYxdfhdMajjgFkmy2v4= Subject key identifier: B2:C0:6E:4A:F1:54:21:6D:75:47:6E:A5:76:AC:03:F7:C3:9E:A1:0B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B0D3DDE86AB502C3AC00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b0:d3:dd:e8:6a:b5:02:c3:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=a98dc187-e910-43e7-89e2-6b1fdffa145b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:29:9a:2c:46:89:15:7b:40:1a:8e:23:37: 3d:e9:76:e5:94:f3:f8:6f:17:05:02:39:11:9f:a3: 00:ac:c8:57:59:7e:b7:80:f5:2b:b5:d2:f3:e8:21: 04:4b:89:83:13:91:f6:e0:dd:f9:32:93:f3:bc:71: 50:89:3d:d3:a8:fb:1e:a2:f2:cb:75:2e:ef:e8:5b: cf:7f:a6:87:4a:29:35:c8:f6:5b:9f:93:13:6e:b7: 9d:50:31:77:30:9e:2f:d2:a1:7c:fd:79:9b:40:e6: b8:7b:af:53:1e:b7:0f:68:ea:51:1b:5e:49:3b:02: 32:4b:00:c7:7f:66:57:16:bf:6d:99:17:a4:36:fb: bd:bb:eb:ba:92:cd:00:73:ba:3f:4b:e4:4d:ab:f8: 71:83:a6:d1:26:f3:3c:2d:dc:f9:da:7d:8d:c6:a1: 21:80:93:67:1f:cd:7b:e4:da:54:bd:0d:77:9b:18: 00:f2:1f:67:d8:19:ca:a6:23:fd:a5:66:3d:56:ce: 2f:bd:b6:6e:1c:8a:93:e2:c1:d7:cc:90:d1:b4:78: 60:6d:e5:69:be:51:a8:55:cc:8e:90:00:65:80:bd: 09:29:52:fa:9a:65:f7:af:2d:fc:5e:77:9e:1c:8e: 70:19:79:19:ef:8c:05:c2:22:44:96:43:bc:01:cc: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C0:6E:4A:F1:54:21:6D:75:47:6E:A5:76:AC:03:F7:C3:9E:A1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a6:33:16:de:f3:8d:9a:80:e2:f3:bd:2c:c6:a8:47:a9:e3: fa:e4:d9:9e:bb:fe:46:49:45:13:6d:b1:2f:fa:13:b6:d3:45: 11:84:d6:64:d7:8b:be:1a:f6:fb:6e:4a:14:5a:fd:36:ed:dd: 14:70:76:35:37:3d:dd:ef:6f:ee:68:4a:d3:1f:3a:47:55:9c: c9:22:86:23:34:c8:b2:7f:7b:aa:b6:82:28:00:77:cb:5f:c6: c8:76:d2:77:31:aa:d1:5a:42:ea:71:84:d4:17:37:b3:20:9e: 8f:15:7e:e7:bf:bd:57:94:0e:2e:c8:76:7e:e7:b0:c3:81:e1: e6:74:82:dc:c4:2d:22:9b:27:66:57:9a:6d:b6:db:78:24:7c: 5d:b5:e9:74:9f:ac:a1:7f:be:02:8e:f8:95:c8:ef:ed:ac:84: 58:f1:7f:cc:ee:13:c5:9f:e3:cc:07:6d:a8:e1:44:2b:99:0c: e3:d2:0f:b5:4f:30:37:bc:68:54:0a:be:44:f4:d4:d1:ad:d9: 41:9c:8a:09:e0:20:db:e7:a8:81:f9:4f:ac:ef:e8:94:43:19: 72:90:bb:8f:31:a3:e7:a4:0f:b4:93:c7:1a:4f:91:f7:8f:30: b3:ca:63:d0:a0:bd:11:85:ac:73:68:39:c9:b8:f4:f1:91:39: 5a:63:f9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULDT3ehqtQLDrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YTk4ZGMxODctZTkxMC00M2U3LTg5ZTItNmIxZmRmZmExNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+wpmixGiRV7QBqOIzc96XbllPP4bxcFAjkR n6MArMhXWX63gPUrtdLz6CEES4mDE5H24N35MpPzvHFQiT3TqPseovLLdS7v6FvP f6aHSik1yPZbn5MTbredUDF3MJ4v0qF8/XmbQOa4e69THrcPaOpRG15JOwIySwDH f2ZXFr9tmRekNvu9u+u6ks0Ac7o/S+RNq/hxg6bRJvM8Ldz52n2NxqEhgJNnH817 5NpUvQ13mxgA8h9n2BnKpiP9pWY9Vs4vvbZuHIqT4sHXzJDRtHhgbeVpvlGoVcyO kABlgL0JKVL6mmX3ry38XneeHI5wGXkZ74wFwiJElkO8AczfdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLAbkrxVCFtdUdupXasA/fDnqELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YwMDVhMWUtY2MzMy0z MmIzLTgxOTEtNDljNzVmNjlmMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICmMxbe842agOLzvSzGqEep4/rk2Z67/kZJRRNtsS/6E7bTRRGE1mTX i74a9vtuShRa/Tbt3RRwdjU3Pd3vb+5oStMfOkdVnMkihiM0yLJ/e6q2gigAd8tf xsh20ncxqtFaQupxhNQXN7Mgno8Vfue/vVeUDi7Idn7nsMOB4eZ0gtzELSKbJ2ZX mm2223gkfF216XSfrKF/vgKO+JXI7+2shFjxf8zuE8Wf48wHbajhRCuZDOPSD7VP MDe8aFQKvkT01NGt2UGcigngINvnqIH5T6zv6JRDGXKQu48xo+ekD7STxxpPkfeP MLPKY9CgvRGFrHNoOcm49PGROVpj+d0= -----END CERTIFICATE-----Generated at Thu Jul 10 01:24:32 2025 by rpki-client