$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa File: 5afeb378-224a-3c24-b822-69b5d1a03f18.roa (raw, json) Hash identifier: ex0L3VFrMLAj8XWSvoHjIUQNaGuDWdYT5Azm+r7ayp0= Subject key identifier: 67:B3:E4:24:D9:FF:76:E6:23:80:99:55:87:94:B7:84:8A:28:F1:EE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B4ADF1D64142222AC180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b4:ad:f1:d6:41:42:22:2a:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=b6c385d4-9524-45e9-94c5-6e36febcbe4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:69:a4:5e:f1:27:8c:bd:31:d7:98:b3:8f:84: 10:d3:cc:5c:82:dc:d0:17:16:61:35:49:db:3a:e8: d5:8d:90:74:a4:bb:2b:23:11:c5:7f:a2:3f:bc:9f: 0a:69:03:e2:f4:51:a0:75:6d:8e:2c:f2:96:8c:17: 1f:46:3d:37:3b:a9:15:75:7b:78:11:f1:27:51:b1: 99:49:ee:7b:f0:94:ab:b3:46:c2:85:bc:7d:4e:05: c4:4b:36:f5:d1:f1:d2:18:1d:c4:d5:9b:cf:b8:4e: 27:f9:53:ce:7b:32:3f:2f:85:b2:23:34:f0:f5:d4: e2:12:c5:7b:39:0e:36:c5:26:30:78:62:6b:c6:e9: 80:b8:82:d3:75:d6:df:f4:4e:56:f8:bf:30:c0:5e: aa:10:a9:42:ae:7d:1c:6d:94:54:62:05:a4:e4:ac: 1c:a5:d2:d7:a5:b9:62:d7:94:5f:8e:78:50:ff:0f: 2b:44:7a:90:7d:38:b9:17:4a:c4:1b:58:58:99:71: eb:d1:03:01:22:1a:1b:d6:29:44:e4:e3:b9:53:24: a2:41:bb:99:b3:16:d5:f2:d4:5a:aa:48:55:d3:8b: 2c:e3:1c:fc:1c:1d:e3:5a:45:cb:98:50:96:40:23: cc:87:cb:08:e0:21:f5:98:16:b3:2c:61:c1:21:76: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:E4:24:D9:FF:76:E6:23:80:99:55:87:94:B7:84:8A:28:F1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1a:55:ec:ef:8c:51:ee:b0:dd:d4:81:b5:2b:19:81:bc:fd: 83:ae:69:14:b0:bc:10:b4:d1:9b:c0:cc:6f:4b:17:65:f2:83: b8:22:24:84:f0:ad:e6:64:e8:66:c6:5c:eb:8e:8d:e2:9b:a9: 12:a1:db:cd:fc:53:a0:30:28:43:f8:10:4f:a7:2f:89:0c:7a: e7:23:8c:6e:c5:96:84:a6:7e:85:40:c4:61:a1:a4:7a:b4:89: b6:4b:40:5c:98:28:b3:fa:bd:a1:d2:71:21:3d:2d:be:bf:d4: 67:3e:0b:b2:d8:eb:d2:07:6c:fd:60:4e:19:64:2a:2a:f2:bc: 1e:48:26:be:2f:21:e2:9a:21:f5:7f:2b:a2:db:28:51:ab:5b: 96:0e:b9:e2:c7:54:ca:be:22:09:de:1d:b4:b7:3a:b3:c8:84: 19:0a:29:03:0b:0d:73:c3:05:8a:c0:9a:70:e3:1d:dc:1f:3c: 1e:1b:27:ef:63:49:d0:97:53:c7:d1:c5:99:85:ec:c8:ca:85: 4f:6f:8b:67:68:d7:46:ed:98:4a:bf:14:6e:a3:58:d2:ef:5b: 0a:85:20:e5:2f:4e:b2:21:73:ec:c3:d6:cc:1b:83:e2:e9:82: 93:12:08:78:5f:c0:16:b1:98:58:3a:4d:05:8e:f0:43:c3:be: e4:af:7b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULSt8dZBQiIqwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YjZjMzg1ZDQtOTUyNC00NWU5LTk0YzUtNmUzNmZlYmNiZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22mkXvEnjL0x15izj4QQ08xcgtzQFxZhNUnb OujVjZB0pLsrIxHFf6I/vJ8KaQPi9FGgdW2OLPKWjBcfRj03O6kVdXt4EfEnUbGZ Se578JSrs0bChbx9TgXESzb10fHSGB3E1ZvPuE4n+VPOezI/L4WyIzTw9dTiEsV7 OQ42xSYweGJrxumAuILTddbf9E5W+L8wwF6qEKlCrn0cbZRUYgWk5KwcpdLXpbli 15RfjnhQ/w8rRHqQfTi5F0rEG1hYmXHr0QMBIhob1ilE5OO5UySiQbuZsxbV8tRa qkhV04ss4xz8HB3jWkXLmFCWQCPMh8sI4CH1mBazLGHBIXZmhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGez5CTZ/3bmI4CZVYeUt4SKKPHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWFmZWIzNzgtMjI0YS0z YzI0LWI4MjItNjliNWQxYTAzZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIaVezvjFHusN3UgbUrGYG8/YOuaRSwvBC00ZvAzG9LF2Xyg7giJITw reZk6GbGXOuOjeKbqRKh2838U6AwKEP4EE+nL4kMeucjjG7FloSmfoVAxGGhpHq0 ibZLQFyYKLP6vaHScSE9Lb6/1Gc+C7LY69IHbP1gThlkKiryvB5IJr4vIeKaIfV/ K6LbKFGrW5YOueLHVMq+IgneHbS3OrPIhBkKKQMLDXPDBYrAmnDjHdwfPB4bJ+9j SdCXU8fRxZmF7MjKhU9vi2do10btmEq/FG6jWNLvWwqFIOUvTrIhc+zD1swbg+Lp gpMSCHhfwBaxmFg6TQWO8EPDvuSve9c= -----END CERTIFICATE-----Generated at Wed Aug 6 12:37:57 2025 by rpki-client