$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa File: 61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa (raw, json) Hash identifier: xLrqjkNiCEmZZGRry2Frqb75XE2HvTbj5vwX9YokcyA= Subject key identifier: 8C:C2:1B:50:4C:B4:45:47:5F:5B:9C:22:31:2D:F8:CD:7D:C9:88:E6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C0A10354CA3F4ADD0600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c0:a1:03:54:ca:3f:4a:dd:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=df618984-23de-4500-b5c0-3dbd325a9c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a7:c9:2a:ff:4c:d6:25:f5:fd:62:80:15:a4: 46:44:4a:2e:10:6d:7f:17:3b:eb:0c:60:d2:f7:5e: 02:09:e5:56:84:74:21:bc:6e:70:43:2e:4c:ea:d0: 3d:4a:1c:34:c8:27:58:94:b5:57:9e:b4:fc:e2:2e: fc:e1:39:78:87:f0:ed:2e:6e:06:99:54:15:9c:0a: f5:33:ac:db:73:a2:0c:13:1e:25:61:d4:65:03:4a: 42:f5:58:75:6c:f5:6f:f9:0a:44:a7:7e:42:63:6e: f2:53:15:a4:20:ac:3f:65:a7:1c:e9:f0:07:a1:b8: 94:d6:2b:00:5a:8f:85:4c:94:aa:13:9c:b8:36:12: 1b:fa:77:c2:64:92:94:c3:98:46:f0:57:e0:d6:67: 16:c2:cc:ee:fb:e4:aa:b0:b6:bf:ea:64:58:ad:22: f2:1c:20:68:b7:db:bf:70:6c:7f:18:31:c7:bc:ea: 40:93:c9:5c:ce:8e:34:fa:3c:e9:5d:1f:52:9b:93: e9:e7:fc:43:e2:8f:1b:90:21:c2:d6:e6:24:a2:c3: 74:11:09:44:c9:5a:ec:6c:16:45:4b:7e:60:7a:f9: 4b:91:9f:0b:73:17:08:a6:02:ba:9a:85:db:1c:3c: 87:03:57:9f:18:cd:68:a7:93:1a:26:1f:f5:ea:ec: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:1B:50:4C:B4:45:47:5F:5B:9C:22:31:2D:F8:CD:7D:C9:88:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:dc:de:b3:9c:f7:b1:cc:33:8c:b7:90:ac:f2:14:08:d9:ba: 6e:d1:1a:68:16:52:38:71:4e:45:7e:97:77:27:be:40:96:09: 99:43:c9:fa:5c:15:48:08:1b:95:2b:dc:8d:1f:a1:a3:0e:c3: a2:3c:20:30:26:51:eb:b1:b0:4a:d5:bd:c6:ff:4c:8a:24:b7: 9c:eb:17:d5:62:3b:42:a0:88:25:b3:18:80:69:d4:5c:16:c8: 32:7f:76:ca:9d:e7:7e:ab:c0:c1:65:6a:36:aa:06:5f:e3:9c: d0:b5:4a:2b:74:cb:04:47:e7:43:0b:90:67:0b:6e:99:9f:09: 48:8c:77:51:27:6b:e6:15:bb:9c:6f:04:2c:41:66:30:86:88: b2:ba:b4:05:6a:c0:bd:39:5d:80:49:aa:a1:a9:23:16:73:a7: 46:39:8c:23:c5:a9:a3:75:79:a2:09:27:d0:8a:a4:49:d2:a7: d3:9a:83:a4:1b:ac:53:90:88:54:b2:5a:de:70:33:d6:aa:23: 0c:12:06:16:e8:03:90:11:02:d9:26:68:ff:c9:89:03:13:49: 27:5f:68:3c:de:ce:9a:d8:73:be:08:0a:fa:e0:90:cc:a3:87: 70:30:ac:4e:05:a0:27:2d:e6:69:4e:8d:08:32:07:9e:c4:3a: f7:84:56:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMChA1TKP0rdBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZGY2MTg5ODQtMjNkZS00NTAwLWI1YzAtM2RiZDMyNWE5YzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKfJKv9M1iX1/WKAFaRGREouEG1/FzvrDGDS 914CCeVWhHQhvG5wQy5M6tA9Shw0yCdYlLVXnrT84i784Tl4h/DtLm4GmVQVnAr1 M6zbc6IMEx4lYdRlA0pC9Vh1bPVv+QpEp35CY27yUxWkIKw/Zacc6fAHobiU1isA Wo+FTJSqE5y4NhIb+nfCZJKUw5hG8Ffg1mcWwszu++SqsLa/6mRYrSLyHCBot9u/ cGx/GDHHvOpAk8lczo40+jzpXR9Sm5Pp5/xD4o8bkCHC1uYkosN0EQlEyVrsbBZF S35gevlLkZ8LcxcIpgK6moXbHDyHA1efGM1op5MaJh/16uz74wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzCG1BMtEVHX1ucIjEt+M19yYjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjE5MzhjYTgtOGFhNi0z MGQ0LThhMmItZmIzMTUyNzkwOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzc3rOc97HMM4y3kKzyFAjZum7RGmgWUjhxTkV+l3cnvkCWCZlDyfpc FUgIG5Ur3I0foaMOw6I8IDAmUeuxsErVvcb/TIokt5zrF9ViO0KgiCWzGIBp1FwW yDJ/dsqd536rwMFlajaqBl/jnNC1Sit0ywRH50MLkGcLbpmfCUiMd1Ena+YVu5xv BCxBZjCGiLK6tAVqwL05XYBJqqGpIxZzp0Y5jCPFqaN1eaIJJ9CKpEnSp9Oag6Qb rFOQiFSyWt5wM9aqIwwSBhboA5ARAtkmaP/JiQMTSSdfaDzezprYc74ICvrgkMyj h3AwrE4FoCct5mlOjQgyB57EOveEVlE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:07 2025 by rpki-client