$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1faa37a2-0917-335e-bff3-14b3115f9f6a.roa File: 1faa37a2-0917-335e-bff3-14b3115f9f6a.roa (raw, json) Hash identifier: ttD3wxZCFC9dZIXIAbkRKgNuXNLn68PFULrs7wOmjA0= Subject key identifier: 5E:FC:BB:9C:07:A3:E9:36:45:BF:42:31:FC:06:87:31:72:52:CE:94 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C0EDF8C690C7B6A74700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1faa37a2-0917-335e-bff3-14b3115f9f6a.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c0:ed:f8:c6:90:c7:b6:a7:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=447ee00e-cf97-40da-963f-b71ca0dd5c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ab:5b:d0:3b:c9:50:1b:3e:2f:1f:90:99:17: ce:58:c4:05:8e:cf:75:12:c8:3f:66:01:ff:14:57: 9e:e8:61:2e:07:5b:3b:69:6c:20:d3:60:62:9f:9e: c0:d0:3d:cf:05:c2:50:ee:ad:22:bb:f1:37:a4:72: 8e:c5:2c:07:34:c1:92:d0:7c:04:13:ec:7b:9b:6c: 30:86:20:0d:10:54:11:c9:bd:ac:fa:4e:e2:8f:a3: a3:e2:d7:fb:05:ac:b4:62:b6:34:e6:89:ce:70:a5: 37:94:9e:e5:37:17:e4:22:fc:f2:ee:df:b0:e9:73: c8:ab:01:f6:d8:bd:d9:00:5f:73:70:f3:16:9d:e6: 73:be:a7:1f:e8:18:b8:88:1f:8c:6f:fe:cc:5c:9f: 7b:e1:99:75:8c:a3:c4:e8:7d:a8:18:ca:c1:53:34: cb:9c:93:ca:a2:81:3d:77:22:d1:95:19:6f:99:b8: 75:fc:cf:65:04:74:00:81:b9:e0:36:7e:0b:22:7a: 25:8a:d1:e5:2f:ba:ce:be:08:74:c9:bb:66:59:78: 31:60:ff:6a:a2:64:6a:2a:41:1d:24:94:af:03:30: cb:bb:73:02:e2:8c:95:f5:20:96:f9:f6:00:f6:b7: 2c:de:3a:d8:e8:c7:67:3f:a1:d2:21:63:8b:9c:88: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FC:BB:9C:07:A3:E9:36:45:BF:42:31:FC:06:87:31:72:52:CE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1faa37a2-0917-335e-bff3-14b3115f9f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:23:22:1b:f3:7d:4a:c8:6c:91:c8:e9:58:2d:89:74:b6:10: c8:af:46:2d:e5:b6:c4:8d:6f:3e:c2:87:88:00:37:54:86:bb: b0:0f:d1:7f:26:9f:2a:b3:6c:b8:6d:da:97:40:50:d1:be:0f: eb:77:4f:17:ad:86:74:63:7c:74:2d:91:d7:35:a5:5e:f0:37: e1:e7:2f:2a:16:be:ad:8e:9b:60:1e:79:0a:b9:3c:f5:12:ed: 73:0f:e3:b9:74:1f:a7:e4:bf:8e:6c:f9:0f:5c:46:93:5a:cd: 7f:d6:65:65:b1:76:1c:18:0b:62:ba:a7:01:03:84:60:eb:ee: 7c:59:51:13:21:29:19:bc:46:3f:0e:f3:7e:23:70:67:96:0d: b5:30:07:94:25:f6:cf:78:c2:45:99:9d:ca:0a:26:46:ee:2b: 5f:d2:c5:03:91:51:39:84:91:7a:10:df:97:68:d0:d0:ad:87: 70:d4:08:e9:a1:6e:7b:3a:90:c8:71:25:b1:7b:f7:bb:0e:7a: ae:9c:99:60:92:e3:52:1a:b2:18:68:f7:16:fe:93:fe:0c:fd: d0:a8:d7:b3:e9:58:3d:5a:a0:4e:5d:52:b2:3f:76:32:bd:86: 2b:89:d2:bc:af:da:60:e9:0f:9d:14:2f:ce:88:11:ee:c8:1d: 78:e5:82:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMDt+MaQx7anRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk NDQ3ZWUwMGUtY2Y5Ny00MGRhLTk2M2YtYjcxY2EwZGQ1YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKtb0DvJUBs+Lx+QmRfOWMQFjs91Esg/ZgH/ FFee6GEuB1s7aWwg02Bin57A0D3PBcJQ7q0iu/E3pHKOxSwHNMGS0HwEE+x7m2ww hiANEFQRyb2s+k7ij6Oj4tf7Bay0YrY05onOcKU3lJ7lNxfkIvzy7t+w6XPIqwH2 2L3ZAF9zcPMWneZzvqcf6Bi4iB+Mb/7MXJ974Zl1jKPE6H2oGMrBUzTLnJPKooE9 dyLRlRlvmbh1/M9lBHQAgbngNn4LInolitHlL7rOvgh0ybtmWXgxYP9qomRqKkEd JJSvAzDLu3MC4oyV9SCW+fYA9rcs3jrY6MdnP6HSIWOLnIh30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF78u5wHo+k2Rb9CMfwGhzFyUs6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWZhYTM3YTItMDkxNy0z MzVlLWJmZjMtMTRiMzExNWY5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0jIhvzfUrIbJHI6VgtiXS2EMivRi3ltsSNbz7Ch4gAN1SGu7AP0X8m nyqzbLht2pdAUNG+D+t3TxethnRjfHQtkdc1pV7wN+HnLyoWvq2Om2AeeQq5PPUS 7XMP47l0H6fkv45s+Q9cRpNazX/WZWWxdhwYC2K6pwEDhGDr7nxZURMhKRm8Rj8O 834jcGeWDbUwB5Ql9s94wkWZncoKJkbuK1/SxQORUTmEkXoQ35do0NCth3DUCOmh bns6kMhxJbF797sOeq6cmWCS41Iashho9xb+k/4M/dCo17PpWD1aoE5dUrI/djK9 hiuJ0ryv2mDpD50UL86IEe7IHXjlgsM= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:50 2025 by rpki-client