$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa File: 2fa8ec23-64f5-30f3-8286-eea4d237e288.roa (raw, json) Hash identifier: c/Y2gqiu1yNvgzthXkVZCE4wTJnzP1r4xqAg+e2jYzY= Subject key identifier: AD:BB:FE:9F:C0:44:E3:02:AE:C3:9A:18:5B:F8:C5:43:21:28:FC:48 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350ABEBD411CC8126AEC900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:ab:eb:d4:11:cc:81:26:ae:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=09986b02-0df9-439d-8b1f-6a6774181cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:0a:13:33:41:77:72:9b:31:e9:a2:78:02: bf:89:a3:14:0b:ed:8b:10:04:d4:83:8e:4e:db:2d: d1:91:f5:f4:79:f1:3c:80:54:e5:ce:c3:28:56:a6: 90:8e:5c:8b:03:56:46:d6:8a:5f:d6:64:80:de:58: cb:57:0d:28:bb:d2:6e:c2:af:89:4e:5e:5c:0d:86: d5:a2:21:c8:c3:44:8d:89:29:19:8c:61:cb:9b:40: 7c:d8:55:07:a8:f4:45:cf:65:a7:52:b8:83:6c:17: d1:b2:3d:60:e5:14:1e:88:71:4e:c7:8d:7e:e3:b3: 40:cc:35:d6:ff:d1:24:db:55:e3:f4:46:c5:ef:90: 22:1c:d8:8d:c8:0f:a7:26:35:5a:93:51:76:4b:d8: d2:07:fc:e8:03:73:3b:2f:23:f8:4e:3d:5e:79:6a: 4f:42:68:5a:f4:98:b0:31:06:50:19:fe:43:f8:60: ef:bb:5f:6d:f2:27:c9:fe:ca:ea:b4:03:8b:43:fc: b1:bf:22:9c:50:b6:b0:46:84:26:3e:50:38:9a:f0: 2e:54:8e:8c:c2:0f:d7:56:2a:a7:78:77:a4:a2:c1: 65:b9:d0:e4:e7:77:d0:aa:01:51:de:b2:f0:f5:58: 45:d7:c0:db:ff:d0:fa:8f:46:d6:68:55:dc:bb:8f: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BB:FE:9F:C0:44:E3:02:AE:C3:9A:18:5B:F8:C5:43:21:28:FC:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:e8:f7:5a:fb:74:de:1d:7d:b0:e7:b3:ff:12:1a:d3:74:c4: c1:91:b8:9a:df:86:3f:3b:f0:9c:2b:c4:50:23:f3:5d:ca:a2: 6e:ec:8d:8e:37:06:97:91:84:ea:46:31:6a:4f:02:7b:9c:d3: 77:eb:b7:a4:c3:a9:f4:d0:3f:82:dc:e0:c7:9b:98:81:84:88: 8b:d5:3f:a2:cc:29:aa:cf:07:14:14:2e:d3:1e:ab:0f:13:57: 31:f5:c0:07:50:57:ea:34:c5:ca:e3:7c:22:b6:95:33:30:cd: e0:c7:d4:fe:fa:c8:83:f0:91:08:68:45:e4:5c:38:51:e6:fe: 61:7e:c5:10:82:1a:ed:7d:09:18:45:c5:17:f3:80:5b:ce:30: 1f:8e:a7:f7:af:fb:46:86:88:ac:48:8d:05:76:8b:d6:1a:56: 46:15:78:7e:f4:66:bd:a7:02:5b:6b:fa:ea:3c:ba:3d:51:03: ed:0b:7f:bb:8a:1f:a8:a5:16:86:0b:e8:77:ea:8e:b5:1d:2f: 77:d9:58:3a:8b:27:9e:ff:d8:27:30:a4:4b:3f:5d:60:c9:8b: e9:13:a8:c8:a4:e9:bf:ca:80:0e:38:b6:38:d1:08:6a:d6:72: 94:48:7f:2f:88:0c:86:da:68:8e:d8:9b:42:00:1b:9d:a0:e3: 6a:6a:d0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKvr1BHMgSauyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MDk5ODZiMDItMGRmOS00MzlkLThiMWYtNmE2Nzc0MTgxY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjsKEzNBd3KbMemieAK/iaMUC+2LEATUg45O 2y3RkfX0efE8gFTlzsMoVqaQjlyLA1ZG1opf1mSA3ljLVw0ou9Juwq+JTl5cDYbV oiHIw0SNiSkZjGHLm0B82FUHqPRFz2WnUriDbBfRsj1g5RQeiHFOx41+47NAzDXW /9Ek21Xj9EbF75AiHNiNyA+nJjVak1F2S9jSB/zoA3M7LyP4Tj1eeWpPQmha9Jiw MQZQGf5D+GDvu19t8ifJ/srqtAOLQ/yxvyKcULawRoQmPlA4mvAuVI6Mwg/XViqn eHekosFludDk53fQqgFR3rLw9VhF18Db/9D6j0bWaFXcu490EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK27/p/AROMCrsOaGFv4xUMhKPxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmZhOGVjMjMtNjRmNS0z MGYzLTgyODYtZWVhNGQyMzdlMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/o91r7dN4dfbDns/8SGtN0xMGRuJrfhj878JwrxFAj813Kom7sjY43 BpeRhOpGMWpPAnuc03frt6TDqfTQP4Lc4MebmIGEiIvVP6LMKarPBxQULtMeqw8T VzH1wAdQV+o0xcrjfCK2lTMwzeDH1P76yIPwkQhoReRcOFHm/mF+xRCCGu19CRhF xRfzgFvOMB+Op/ev+0aGiKxIjQV2i9YaVkYVeH70Zr2nAltr+uo8uj1RA+0Lf7uK H6ilFoYL6HfqjrUdL3fZWDqLJ57/2CcwpEs/XWDJi+kTqMik6b/KgA44tjjRCGrW cpRIfy+IDIbaaI7Ym0IAG52g42pq0Ck= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:43 2025 by rpki-client