$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d404b699-69bd-3b43-80a4-1c880f9b2258.roa File: d404b699-69bd-3b43-80a4-1c880f9b2258.roa (raw, json) Hash identifier: mZAwBmrzei0d6uQHJwdLV4rlqpvyvDTzLX7LYpG7Kgs= Subject key identifier: 06:34:0C:BA:25:59:BF:29:63:06:E5:E8:99:0C:B8:46:B9:53:3A:F4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C0925B57EDF3FECCD6E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d404b699-69bd-3b43-80a4-1c880f9b2258.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c0:92:5b:57:ed:f3:fe:cc:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=8673494f-52bd-4ab9-91e6-591c7ba23d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:25:2f:fa:99:26:8a:79:73:46:b2:e8:e0:b4: 48:07:20:50:ba:d3:ac:e7:60:8c:eb:9c:9d:b0:60: 5d:c9:61:7c:20:1e:dd:6e:04:5e:80:bb:f8:a5:ad: af:f9:44:0a:7a:95:6b:16:6a:61:75:32:07:98:a4: ef:61:bb:83:d8:52:b0:c3:d2:c1:23:af:76:0e:95: 90:94:d4:b3:1f:d5:27:da:a7:37:2b:e8:70:68:ae: 85:c8:c3:c9:48:ec:69:c3:be:c4:18:e4:8f:7b:6e: 8b:e2:13:1f:86:66:14:e2:cc:e2:60:ab:c7:0c:f7: cc:73:79:ec:20:76:d3:f9:a7:53:72:f5:44:64:07: 3f:60:05:26:e5:35:c7:ff:34:16:30:39:6d:da:ff: d4:9e:09:ed:59:08:e2:1f:0c:81:e1:25:eb:64:3d: ab:b9:df:cf:ea:76:1c:b8:52:8b:d9:c0:19:b7:98: 6b:50:01:f0:3a:fe:89:67:da:e9:61:a5:82:ac:70: 18:ef:8d:f1:04:ac:f5:d0:86:9f:9a:f0:91:4b:d6: eb:d8:c6:54:9c:ea:56:99:89:a5:68:c4:3e:9a:ac: 8f:0f:2a:f2:46:78:ee:77:c1:b0:cc:5d:91:79:e0: 7e:8a:81:0b:a8:ea:9b:1c:ac:42:60:1c:fe:e4:02: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:34:0C:BA:25:59:BF:29:63:06:E5:E8:99:0C:B8:46:B9:53:3A:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d404b699-69bd-3b43-80a4-1c880f9b2258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9b:db:c6:4c:f8:b8:49:08:96:a1:be:0e:04:86:9c:db:42: 1f:50:53:b7:cd:7b:a4:12:57:d3:7a:b1:a0:de:5c:04:f8:32: 9f:5a:31:39:10:d4:07:8f:89:ab:f1:c1:dd:b0:a8:f8:89:a7: ca:31:f1:7d:53:5f:e5:fb:56:3d:31:72:5b:ea:5b:f8:ad:6e: 3a:75:6a:fa:a7:95:92:09:45:7a:4a:4c:ab:ef:fa:11:6d:94: df:26:f1:0f:df:f2:74:6e:1e:42:35:fd:c5:81:5b:96:94:fd: 3b:bb:8b:ed:dd:e7:d1:8a:62:a6:05:c0:cd:8b:92:e2:de:08: 98:e1:84:db:ae:c5:71:59:39:cb:f2:e5:16:ce:dd:4b:ef:5c: ac:45:d9:43:18:d8:5e:60:2a:60:fa:54:37:10:b9:d3:95:6e: 46:49:79:4c:d2:49:57:67:b8:9d:42:fa:f7:df:bc:5f:20:18: 1b:ad:20:39:c6:cb:4f:76:1a:79:72:a2:d4:be:81:fd:b6:18: 77:c3:5e:69:df:fc:35:bf:91:f2:d9:ff:67:7c:00:86:86:bf: f9:ee:da:c1:62:93:c7:0b:fa:61:9b:1b:8c:31:92:6a:06:1c: 33:d5:3e:90:37:ee:4d:a3:b7:9d:b7:d1:70:34:89:91:31:bd: 77:9a:b2:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMCSW1ft8/7M1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ODY3MzQ5NGYtNTJiZC00YWI5LTkxZTYtNTkxYzdiYTIzZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyUv+pkminlzRrLo4LRIByBQutOs52CM65yd sGBdyWF8IB7dbgRegLv4pa2v+UQKepVrFmphdTIHmKTvYbuD2FKww9LBI692DpWQ lNSzH9Un2qc3K+hwaK6FyMPJSOxpw77EGOSPe26L4hMfhmYU4sziYKvHDPfMc3ns IHbT+adTcvVEZAc/YAUm5TXH/zQWMDlt2v/UngntWQjiHwyB4SXrZD2rud/P6nYc uFKL2cAZt5hrUAHwOv6JZ9rpYaWCrHAY743xBKz10IafmvCRS9br2MZUnOpWmYml aMQ+mqyPDyryRnjud8GwzF2ReeB+ioELqOqbHKxCYBz+5AICCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY0DLolWb8pYwbl6JkMuEa5Uzr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDQwNGI2OTktNjliZC0z YjQzLTgwYTQtMWM4ODBmOWIyMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeb28ZM+LhJCJahvg4EhpzbQh9QU7fNe6QSV9N6saDeXAT4Mp9aMTkQ 1AePiavxwd2wqPiJp8ox8X1TX+X7Vj0xclvqW/itbjp1avqnlZIJRXpKTKvv+hFt lN8m8Q/f8nRuHkI1/cWBW5aU/Tu7i+3d59GKYqYFwM2LkuLeCJjhhNuuxXFZOcvy 5RbO3UvvXKxF2UMY2F5gKmD6VDcQudOVbkZJeUzSSVdnuJ1C+vffvF8gGButIDnG y092GnlyotS+gf22GHfDXmnf/DW/kfLZ/2d8AIaGv/nu2sFik8cL+mGbG4wxkmoG HDPVPpA37k2jt5230XA0iZExvXeasrc= -----END CERTIFICATE-----Generated at Thu Jul 10 10:44:54 2025 by rpki-client