$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa File: 1a5f887f-53ef-3852-8ecd-31eb4511b635.roa (raw, json) Hash identifier: IoaBQRAFbmweLl2VXF2tOxARECr4HNGayWPhtysgZLA= Subject key identifier: BD:4F:FB:DA:6C:62:FC:63:06:BB:0C:15:B1:17:80:BC:F5:0D:F7:DC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B6484CDAFA4C19A5A380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b6:48:4c:da:fa:4c:19:a5:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=4ed408fc-1d4b-4c7f-b1c1-f6ddfe5a034b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:74:3b:d7:1a:b4:1e:d2:e0:ff:db:88:a5: 9f:33:4b:50:22:6a:ce:b9:a0:f2:ab:74:b2:9a:5d: 3f:1b:75:c5:38:48:82:3e:89:bc:b7:56:bb:80:3c: 4e:fc:ab:04:46:27:e5:34:46:a3:43:39:6c:9f:e5: 37:ae:bd:e3:e7:8b:e1:fd:3a:6e:af:6a:cb:e2:6b: 92:9b:53:cc:13:ac:11:50:c9:2e:fc:3d:92:2d:a0: e3:f7:8b:b4:bd:9e:a5:bb:3d:2a:df:44:e7:b8:1a: 2d:eb:3c:fe:19:99:82:64:1d:05:37:7f:4c:3d:d3: 93:22:02:37:ca:d0:af:a0:f2:4d:bf:27:b6:7c:f4: 82:55:69:4e:a0:19:f1:6b:37:f2:b5:0f:77:f1:88: 15:b7:0a:b3:2d:09:2e:6c:34:a9:d1:07:2f:f9:44: bc:f0:ca:66:c4:2c:94:da:5b:92:90:74:a0:65:77: c1:04:39:aa:59:35:3a:61:59:fa:9b:2d:9a:05:f8: 60:ab:55:6f:c6:b9:c9:e1:01:de:dc:83:5d:00:c0: 94:61:e9:9a:33:df:de:46:b2:03:31:bd:44:5b:b9: 36:21:e5:11:ea:37:96:fb:cb:7f:ba:3f:77:4e:4d: 9e:b4:ee:7b:7a:b4:b0:d8:d5:94:97:7c:a5:44:18: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4F:FB:DA:6C:62:FC:63:06:BB:0C:15:B1:17:80:BC:F5:0D:F7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:be:a8:15:00:3c:26:e8:44:f7:49:9c:5c:d4:c2:17:fd:78: 82:47:bb:64:fa:25:8f:0f:5d:68:c7:bf:7c:b1:88:dd:56:5d: e7:87:7d:34:f5:66:20:74:9e:32:be:59:db:bd:d8:24:f4:7a: 43:03:a3:fb:1e:48:d2:7f:dc:87:46:57:1a:c7:f3:53:2c:ac: 64:02:bc:e2:8e:e9:57:d9:7b:d1:16:95:43:93:ee:41:45:bd: bb:49:9b:ac:b9:63:02:65:3a:a6:b7:ca:f4:63:11:17:ce:73: a5:dd:b4:87:7d:98:a2:69:e5:ac:33:e1:d8:d5:4b:15:2e:1a: da:80:cb:8d:ac:26:9c:57:15:70:87:cb:43:40:fc:9c:6a:c5: db:86:1f:2a:81:10:db:0a:80:f4:65:6a:ee:a3:0f:fa:f0:12: 66:a4:a9:e4:5d:80:1e:0a:41:4f:24:1a:49:71:07:f5:94:e3: 71:de:d7:b7:45:f8:4a:d2:af:13:ed:c0:67:d9:30:0f:20:6f: f9:b1:c1:20:d1:49:51:d9:7f:43:36:1c:33:2b:e1:b2:ec:4b: b0:5b:b6:4e:a3:d9:31:dd:48:14:96:7d:fe:e8:1f:90:a0:35: 8b:1f:90:1d:43:d6:c4:98:ec:33:c6:5e:d2:16:a4:99:9d:04: 29:4a:7a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULZITNr6TBmlo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk NGVkNDA4ZmMtMWQ0Yi00YzdmLWIxYzEtZjZkZGZlNWEwMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzt0O9catB7S4P/biKWfM0tQImrOuaDyq3Sy ml0/G3XFOEiCPom8t1a7gDxO/KsERiflNEajQzlsn+U3rr3j54vh/Tpur2rL4muS m1PME6wRUMku/D2SLaDj94u0vZ6luz0q30TnuBot6zz+GZmCZB0FN39MPdOTIgI3 ytCvoPJNvye2fPSCVWlOoBnxazfytQ938YgVtwqzLQkubDSp0Qcv+US88MpmxCyU 2luSkHSgZXfBBDmqWTU6YVn6my2aBfhgq1VvxrnJ4QHe3INdAMCUYemaM9/eRrID Mb1EW7k2IeUR6jeW+8t/uj93Tk2etO57erSw2NWUl3ylRBhzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1P+9psYvxjBrsMFbEXgLz1DffcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWE1Zjg4N2YtNTNlZi0z ODUyLThlY2QtMzFlYjQ1MTFiNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq+qBUAPCboRPdJnFzUwhf9eIJHu2T6JY8PXWjHv3yxiN1WXeeHfTT1 ZiB0njK+Wdu92CT0ekMDo/seSNJ/3IdGVxrH81MsrGQCvOKO6VfZe9EWlUOT7kFF vbtJm6y5YwJlOqa3yvRjERfOc6XdtId9mKJp5awz4djVSxUuGtqAy42sJpxXFXCH y0NA/JxqxduGHyqBENsKgPRlau6jD/rwEmakqeRdgB4KQU8kGklxB/WU43He17dF +ErSrxPtwGfZMA8gb/mxwSDRSVHZf0M2HDMr4bLsS7Bbtk6j2THdSBSWff7oH5Cg NYsfkB1D1sSY7DPGXtIWpJmdBClKemQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:44 2025 by rpki-client