$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa File: 5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa (raw, json) Hash identifier: 2xAIoGNnK3S2b1NdybomYbydzn96OONOscvB2zZOqPE= Subject key identifier: E9:58:22:8A:05:C1:1B:35:42:B8:FB:2E:A5:5E:20:75:41:2E:2B:06 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C5F23E7F99A8AB43DE00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c5:f2:3e:7f:99:a8:ab:43:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=f4c60d8b-6125-4903-a094-176b9f3bf5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:67:56:38:29:62:e1:c4:f1:a3:20:3a:ff: 57:4d:17:12:95:b3:34:c3:a4:59:00:50:35:de:59: 41:b8:68:14:00:58:75:b1:a5:b4:cc:6f:a2:24:98: d1:a5:8f:a2:9b:2e:b3:e2:32:d1:c2:fa:98:cd:f7: 13:13:64:46:3f:a4:ab:76:44:ac:08:e7:7d:84:9d: c0:b8:94:12:31:b1:db:81:12:3b:3d:14:ef:00:5f: 72:c3:fe:15:89:db:4f:ba:5c:aa:5e:d1:d9:bc:a3: 3e:be:5e:04:99:48:13:76:51:c2:72:ea:a5:f4:70: 12:45:b6:67:8f:d3:19:8b:0d:e1:29:7b:e2:c2:68: f9:d1:50:8b:c6:a8:f5:04:7f:18:3e:14:0d:3d:49: 40:13:28:ef:8f:40:f2:ce:fb:45:98:cd:76:df:6c: d8:e7:0f:ba:54:75:a9:7f:0d:58:f8:c9:09:05:c6: 5e:a2:12:ac:4b:af:84:02:2e:cb:cd:d7:24:f6:fa: 87:9e:63:1f:72:b4:67:e9:87:8a:5f:c3:07:72:4f: 56:e8:c3:c1:1d:6b:c8:1e:3b:bd:cb:ef:33:fb:f8: 60:3e:53:51:b3:e5:76:e8:1a:da:46:a1:36:c5:5f: 74:27:5f:5c:e7:bd:b7:00:c9:ce:32:5b:8a:1b:23: fb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:58:22:8A:05:C1:1B:35:42:B8:FB:2E:A5:5E:20:75:41:2E:2B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9b:f0:72:7e:0d:e6:22:3f:9d:f3:4d:a3:ce:ba:d7:98:f7: 23:3e:b0:b4:cb:b1:5c:65:98:2c:38:ca:06:be:08:2d:9f:01: 4a:0a:fd:f3:40:8f:b1:21:d0:d8:f9:82:06:f6:c3:f8:f9:ac: 2d:a3:cf:42:9e:59:3b:5f:b7:29:5e:3b:8d:95:9b:76:99:f1: eb:06:cb:e9:59:9c:ee:91:d3:96:aa:74:27:2a:ac:b4:76:c8: 24:18:47:96:88:e0:67:fc:d4:8c:3f:47:08:2b:12:b5:cb:83: 63:24:9a:16:53:9f:c6:dd:12:54:67:3e:9a:df:e6:d4:cc:7f: 36:9b:17:dc:68:72:81:0d:a9:a8:d4:3b:7b:41:29:6e:1f:0e: 81:d4:fd:10:22:77:59:55:67:61:b6:e1:f3:26:9c:e3:0f:e8: 13:c8:e1:ef:f7:83:9f:1e:e9:61:97:b2:78:b0:e8:0f:63:10: 1e:34:c8:32:37:35:f6:56:f7:31:e5:69:c2:b2:82:b0:71:83: 46:c0:7d:73:c9:d9:29:33:59:31:84:01:fe:9f:26:47:13:7f: 8b:b6:54:73:f7:48:29:60:2c:3c:34:72:7c:09:ca:05:c6:ff: b3:33:e4:a0:47:ba:d0:2f:c0:36:c7:3a:75:4f:da:62:cf:fe: fa:8d:6a:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMXyPn+ZqKtD3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZjRjNjBkOGItNjEyNS00OTAzLWEwOTQtMTc2YjlmM2JmNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv1nVjgpYuHE8aMgOv9XTRcSlbM0w6RZAFA1 3llBuGgUAFh1saW0zG+iJJjRpY+imy6z4jLRwvqYzfcTE2RGP6SrdkSsCOd9hJ3A uJQSMbHbgRI7PRTvAF9yw/4VidtPulyqXtHZvKM+vl4EmUgTdlHCcuql9HASRbZn j9MZiw3hKXviwmj50VCLxqj1BH8YPhQNPUlAEyjvj0DyzvtFmM1232zY5w+6VHWp fw1Y+MkJBcZeohKsS6+EAi7Lzdck9vqHnmMfcrRn6YeKX8MHck9W6MPBHWvIHju9 y+8z+/hgPlNRs+V26BraRqE2xV90J19c5723AMnOMluKGyP7xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlYIooFwRs1Qrj7LqVeIHVBLisGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWMwZjkxODUtNmUyOS0z MmI3LThlYzUtOTczNTE3OGI3YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6b8HJ+DeYiP53zTaPOuteY9yM+sLTLsVxlmCw4yga+CC2fAUoK/fNA j7Eh0Nj5ggb2w/j5rC2jz0KeWTtftyleO42Vm3aZ8esGy+lZnO6R05aqdCcqrLR2 yCQYR5aI4Gf81Iw/RwgrErXLg2MkmhZTn8bdElRnPprf5tTMfzabF9xocoENqajU O3tBKW4fDoHU/RAid1lVZ2G24fMmnOMP6BPI4e/3g58e6WGXsniw6A9jEB40yDI3 NfZW9zHlacKygrBxg0bAfXPJ2SkzWTGEAf6fJkcTf4u2VHP3SClgLDw0cnwJygXG /7Mz5KBHutAvwDbHOnVP2mLP/vqNauY= -----END CERTIFICATE-----Generated at Tue Aug 5 20:14:53 2025 by rpki-client