$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa File: 206860e2-e972-3b6c-a4c3-e144604e1ae9.roa (raw, json) Hash identifier: ZxSpftumz6PCu9+7aUhI/La0PZ8QyKhi02JML63jEHE= Subject key identifier: E6:07:AB:6E:EA:DC:C5:3D:4A:1F:47:21:6F:61:A4:E1:19:0A:75:CD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B8E74017E9100A7C37200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8e:74:01:7e:91:00:a7:c3:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=af2e5f44-2626-452c-8c62-ccecc1e46671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:b8:ac:9e:8f:d9:17:e3:81:d5:31:34:5a: cb:05:7c:82:a4:09:84:bd:df:13:18:36:4d:30:82: 5f:52:ae:04:2f:f7:d6:e0:d3:0d:dc:9b:bb:a7:3c: 13:fc:32:60:dc:5b:6f:eb:7a:34:cf:b0:f3:14:76: d4:28:fa:3e:65:57:e0:71:ac:23:85:b2:95:9f:d8: c4:4b:a4:3b:10:1d:5d:b2:ab:99:cd:db:03:e6:aa: 09:ae:d3:37:a8:5d:8c:3e:2d:e6:76:44:c0:53:59: f7:25:8a:5c:26:ad:f3:5f:a7:99:ad:df:89:43:9c: 72:f1:a6:a9:79:33:a3:fd:22:5b:4a:45:cc:dd:ed: bd:b1:32:0f:51:ed:95:fe:c2:c8:58:8e:d8:34:02: ed:be:86:2c:3a:e9:08:88:bc:d6:b9:fc:92:53:90: a6:b8:73:e0:09:19:b7:52:c8:b4:ef:28:4b:25:3f: 21:25:3b:13:74:da:01:ae:9a:d5:3f:3b:22:d7:a0: a6:f6:e8:7d:9b:61:e5:4e:aa:de:e0:1b:d1:d8:de: 1c:5c:7f:1a:7d:70:52:60:10:d3:28:06:eb:a7:df: 9a:f6:22:bc:76:80:ac:51:65:fe:1e:e5:84:b4:c5: 5d:6b:12:7c:f4:9e:ae:2c:7b:57:b1:34:68:9c:61: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:07:AB:6E:EA:DC:C5:3D:4A:1F:47:21:6F:61:A4:E1:19:0A:75:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:13:f2:65:9e:6a:ce:7f:f9:d5:e1:a0:16:fb:7e:a4:b1:b5: f1:eb:a2:19:a0:72:8b:eb:b2:50:29:9b:f2:4d:42:17:e4:22: 2e:02:f8:1f:d6:dd:3e:61:a7:48:68:8c:e3:a9:45:5d:50:57: 38:79:b3:7f:02:b6:65:73:34:ac:64:85:f5:4d:80:93:d5:a7: b5:95:6b:45:35:df:2f:74:ca:59:3d:df:1d:50:74:b2:d1:73: d9:e8:c2:95:c5:53:37:97:29:96:d6:df:bd:88:22:2f:5f:fd: ab:c1:a6:62:3d:2e:27:49:27:d5:a8:bf:36:7e:01:1e:fb:5d: dd:30:58:9a:28:f5:77:55:a1:a6:a2:d2:f2:ca:4a:e1:29:02: c2:fc:0d:f6:24:b9:3a:97:b6:32:56:8f:9d:70:dd:fc:72:c7: 44:20:91:53:5d:fe:1b:f7:4b:a1:f8:b9:5d:0a:63:5d:d6:82: ac:85:f6:98:e5:82:15:ef:ec:91:18:db:3f:d5:5f:4a:4b:9d: 98:d3:d0:75:7a:63:09:ba:23:29:a4:5e:be:f4:4c:69:64:12: e0:14:a8:e1:8a:0f:cb:a4:a2:1d:22:b5:4a:94:9f:0d:0c:98: ee:59:9f:19:88:b1:40:b5:ce:72:77:c3:d7:a0:54:61:dc:57: 12:8b:13:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e450AX6RAKfDcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YWYyZTVmNDQtMjYyNi00NTJjLThjNjItY2NlY2MxZTQ2NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ64rJ6P2RfjgdUxNFrLBXyCpAmEvd8TGDZN MIJfUq4EL/fW4NMN3Ju7pzwT/DJg3Ftv63o0z7DzFHbUKPo+ZVfgcawjhbKVn9jE S6Q7EB1dsquZzdsD5qoJrtM3qF2MPi3mdkTAU1n3JYpcJq3zX6eZrd+JQ5xy8aap eTOj/SJbSkXM3e29sTIPUe2V/sLIWI7YNALtvoYsOukIiLzWufySU5CmuHPgCRm3 Usi07yhLJT8hJTsTdNoBrprVPzsi16Cm9uh9m2HlTqre4BvR2N4cXH8afXBSYBDT KAbrp9+a9iK8doCsUWX+HuWEtMVdaxJ89J6uLHtXsTRonGFNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYHq27q3MU9Sh9HIW9hpOEZCnXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjA2ODYwZTItZTk3Mi0z YjZjLWE0YzMtZTE0NDYwNGUxYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwT8mWeas5/+dXhoBb7fqSxtfHrohmgcovrslApm/JNQhfkIi4C+B/W 3T5hp0hojOOpRV1QVzh5s38CtmVzNKxkhfVNgJPVp7WVa0U13y90ylk93x1QdLLR c9nowpXFUzeXKZbW372IIi9f/avBpmI9LidJJ9WovzZ+AR77Xd0wWJoo9XdVoaai 0vLKSuEpAsL8DfYkuTqXtjJWj51w3fxyx0QgkVNd/hv3S6H4uV0KY13WgqyF9pjl ghXv7JEY2z/VX0pLnZjT0HV6Ywm6IymkXr70TGlkEuAUqOGKD8ukoh0itUqUnw0M mO5ZnxmIsUC1znJ3w9egVGHcVxKLEx0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:54 2025 by rpki-client