$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/340d09f7-0957-310e-af53-3a0c0f2641b5.roa File: 340d09f7-0957-310e-af53-3a0c0f2641b5.roa (raw, json) Hash identifier: Xd1XnSWPXPOZMZBiKN9r4lxaUY9yhWt+0uiwUcMyRUg= Subject key identifier: 49:4C:85:DA:82:28:E9:62:51:10:AE:18:D1:3B:17:7A:1E:1A:B8:8D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B6AE02B860BAFB8986E00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/340d09f7-0957-310e-af53-3a0c0f2641b5.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6a:e0:2b:86:0b:af:b8:98:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ff36f47c-1d0b-43dd-9800-527d833de517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:15:39:6f:99:b6:53:ea:da:df:a2:68:12: 93:a1:61:54:f3:ae:05:0d:88:63:65:47:b7:c7:1b: 83:1f:98:c0:86:d9:09:37:db:b3:da:60:6a:de:fa: 75:88:af:31:30:23:ff:e9:bc:c2:7f:1f:60:ad:e9: fc:42:e0:98:94:21:34:54:d0:4f:e1:cb:68:83:d9: 34:8a:06:bc:00:a3:d4:ed:6c:3b:e0:81:0e:34:d2: 08:48:7a:ba:8b:8d:f3:0f:51:d1:a1:cc:89:0e:2e: 48:51:96:61:7d:15:33:6e:95:94:10:a8:95:a0:df: df:e6:aa:2d:fc:91:f6:f2:a1:3c:7c:a2:d6:dd:23: e9:e2:7d:ee:2f:6b:d2:a7:11:11:36:53:c0:fa:ba: 50:47:af:d6:67:40:f1:5d:bf:05:48:1d:22:d7:c7: 07:38:db:55:a1:c4:31:2e:40:7e:3a:e0:8a:ab:a4: 06:78:30:93:92:46:54:cf:19:4d:e0:96:37:c6:92: f8:4e:12:e4:56:a8:84:cf:ba:84:f1:2c:6c:67:5e: 30:c1:ec:ce:10:af:9e:c8:c7:e5:70:d3:1d:59:61: e3:92:24:84:40:47:12:b0:37:b6:2a:40:54:8f:f3: a5:cc:3b:df:fc:b9:05:e6:6c:94:cd:23:f6:66:26: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4C:85:DA:82:28:E9:62:51:10:AE:18:D1:3B:17:7A:1E:1A:B8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/340d09f7-0957-310e-af53-3a0c0f2641b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:98:b9:e8:25:78:5f:48:7f:4e:70:d3:3b:a4:36:05:a2:97: f7:5b:06:28:7c:d1:b2:c6:06:0d:c4:76:41:95:8c:d2:03:65: 20:8e:fa:bc:3f:b4:0b:ff:ec:1c:ff:2c:17:0d:75:a2:4f:46: 52:63:13:e2:04:4e:ea:47:59:8c:92:85:c3:f7:57:75:d9:af: 8a:8d:ae:89:26:f2:86:74:0a:a9:66:a5:d9:07:76:3a:21:83: 14:d5:f8:fc:19:21:fb:f9:ff:fc:ea:b3:f7:f0:ec:53:e0:7e: 16:2f:44:2b:3c:f1:b0:2b:ca:f7:1d:a7:50:2b:a8:a9:82:54: 01:90:10:e5:06:c3:8e:4e:ed:8e:c7:11:72:a9:76:18:4c:13: da:f8:0b:fb:8b:a7:17:56:5b:ae:0c:f0:bb:9a:4a:8b:0f:f8: c9:4a:1b:7a:b0:93:db:06:ef:a4:de:38:16:a7:f0:79:46:5a: 63:a5:fe:b2:05:5a:a0:7b:c5:bc:46:11:29:ce:93:ab:b8:53: 69:ff:90:a9:d6:6f:07:59:96:0b:22:9a:c3:cb:62:5c:ac:6d: fb:40:34:d6:7c:1c:be:02:fd:0b:6f:2d:8a:4c:cb:a4:7d:c3: e4:9d:6b:c6:d7:3c:42:c2:32:e0:87:cc:1b:26:79:25:d3:4b: d0:b9:45:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2rgK4YLr7iYbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmYzNmY0N2MtMWQwYi00M2RkLTk4MDAtNTI3ZDgzM2RlNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXsVOW+ZtlPq2t+iaBKToWFU864FDYhjZUe3 xxuDH5jAhtkJN9uz2mBq3vp1iK8xMCP/6bzCfx9gren8QuCYlCE0VNBP4ctog9k0 iga8AKPU7Ww74IEONNIISHq6i43zD1HRocyJDi5IUZZhfRUzbpWUEKiVoN/f5qot /JH28qE8fKLW3SPp4n3uL2vSpxERNlPA+rpQR6/WZ0DxXb8FSB0i18cHONtVocQx LkB+OuCKq6QGeDCTkkZUzxlN4JY3xpL4ThLkVqiEz7qE8SxsZ14wwezOEK+eyMfl cNMdWWHjkiSEQEcSsDe2KkBUj/OlzDvf/LkF5myUzSP2ZiYp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElMhdqCKOliURCuGNE7F3oeGriNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzQwZDA5ZjctMDk1Ny0z MTBlLWFmNTMtM2EwYzBmMjY0MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKYuegleF9If05w0zukNgWil/dbBih80bLGBg3EdkGVjNIDZSCO+rw/ tAv/7Bz/LBcNdaJPRlJjE+IETupHWYyShcP3V3XZr4qNrokm8oZ0CqlmpdkHdjoh gxTV+PwZIfv5//zqs/fw7FPgfhYvRCs88bAryvcdp1ArqKmCVAGQEOUGw45O7Y7H EXKpdhhME9r4C/uLpxdWW64M8LuaSosP+MlKG3qwk9sG76TeOBan8HlGWmOl/rIF WqB7xbxGESnOk6u4U2n/kKnWbwdZlgsimsPLYlysbftANNZ8HL4C/QtvLYpMy6R9 w+Sda8bXPELCMuCHzBsmeSXTS9C5RbY= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:26 2025 by rpki-client