$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c3ffb47-1695-325b-bc74-6cd73bf736b2.roa File: 8c3ffb47-1695-325b-bc74-6cd73bf736b2.roa (raw, json) Hash identifier: ucZjZrSrgrB2wm3g9EdU2L8QEbJU62pnvWy045VTqP8= Subject key identifier: 7B:D6:DD:85:1E:12:5D:A9:2F:BA:E0:B5:CA:6F:31:82:17:45:D0:F7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B66E480D509B924317D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c3ffb47-1695-325b-bc74-6cd73bf736b2.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:66:e4:80:d5:09:b9:24:31:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=8a005fa3-0f05-4605-a870-d674ef2c443f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:39:85:0f:63:ce:c8:cc:bd:9e:0d:73:83:a8: 4a:d3:40:a1:7f:b2:80:cc:91:a5:38:df:99:c0:8a: 82:1b:15:ba:c3:ae:9b:b4:d6:dc:66:a0:62:c5:87: 4f:16:62:8e:5e:d0:20:d8:63:a8:61:55:be:88:7c: ed:96:d3:49:a4:77:32:01:fb:29:17:75:e2:d8:53: 0b:08:fb:db:0b:89:df:29:27:50:ce:36:30:35:9c: 37:06:8b:e1:94:5c:2c:40:ed:8c:9e:56:07:3e:f1: c1:55:52:1e:57:c4:64:a7:58:11:58:1d:77:cc:7e: d4:c4:c7:e8:2b:5d:7e:e9:21:3a:9d:90:25:a4:97: 8a:ea:75:b5:1d:19:01:0d:96:71:a2:df:34:6a:ca: 98:19:22:34:a9:50:d4:aa:6a:4c:74:47:26:d8:94: 08:7a:ea:6c:70:2d:f1:3a:fd:3c:66:18:80:a9:27: 0a:7f:84:63:f8:34:42:30:d3:56:5e:66:04:73:49: 89:6b:d2:b2:a2:56:c6:05:c1:28:75:1e:2d:99:bd: 94:7f:4b:45:4a:37:2e:d3:ef:3c:68:f3:07:fc:54: df:12:01:6d:30:4c:aa:b9:8c:ed:05:2a:41:42:86: e0:4f:d5:41:a6:f7:60:45:e0:28:19:72:ae:64:4d: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D6:DD:85:1E:12:5D:A9:2F:BA:E0:B5:CA:6F:31:82:17:45:D0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c3ffb47-1695-325b-bc74-6cd73bf736b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b3:27:43:87:b7:12:da:98:78:f8:0b:9b:c5:5f:6a:03:b8: 86:74:c6:6a:0f:86:80:e5:1a:fd:53:e7:f5:c1:be:e7:99:fa: 5f:b9:19:56:bf:91:62:4b:6b:21:0e:40:cd:92:97:4e:8c:ba: 8d:ca:d8:ed:37:ba:e0:90:da:56:ad:5e:19:c5:08:e0:d8:93: b1:db:ac:5c:e6:31:e6:44:9e:a5:0c:63:6b:f6:29:a4:eb:69: 16:73:48:f9:fc:84:1d:d0:97:ba:bd:d5:60:70:ba:f5:3d:d9: aa:e7:03:02:55:c8:c7:1f:49:3e:79:dd:1c:2c:8b:35:41:69: b8:7d:5c:07:03:8e:19:ad:84:fe:72:6e:ab:11:a7:8a:1e:d2: 81:21:fa:9b:0c:22:02:e9:4d:da:81:35:44:fa:d8:88:9a:07: fe:e9:aa:bf:7e:65:64:21:fc:8d:63:8e:6f:b1:eb:00:8e:fe: d7:f3:a9:fe:53:23:81:5c:df:49:c8:6d:cc:20:87:83:f2:54: 23:b3:aa:07:ff:12:52:b9:dc:8c:81:28:0e:84:2b:99:c3:83: bb:c9:2a:5f:45:ac:24:8a:7e:c7:b9:aa:db:ef:5b:04:dd:20: e2:b4:aa:eb:79:d3:83:45:9a:37:51:2a:a2:06:ad:ed:40:9a: a1:ff:27:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2bkgNUJuSQxfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OGEwMDVmYTMtMGYwNS00NjA1LWE4NzAtZDY3NGVmMmM0NDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizmFD2POyMy9ng1zg6hK00Chf7KAzJGlON+Z wIqCGxW6w66btNbcZqBixYdPFmKOXtAg2GOoYVW+iHztltNJpHcyAfspF3Xi2FML CPvbC4nfKSdQzjYwNZw3BovhlFwsQO2MnlYHPvHBVVIeV8Rkp1gRWB13zH7UxMfo K11+6SE6nZAlpJeK6nW1HRkBDZZxot80asqYGSI0qVDUqmpMdEcm2JQIeupscC3x Ov08ZhiAqScKf4Rj+DRCMNNWXmYEc0mJa9KyolbGBcEodR4tmb2Uf0tFSjcu0+88 aPMH/FTfEgFtMEyquYztBSpBQobgT9VBpvdgReAoGXKuZE11KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvW3YUeEl2pL7rgtcpvMYIXRdD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGMzZmZiNDctMTY5NS0z MjViLWJjNzQtNmNkNzNiZjczNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmzJ0OHtxLamHj4C5vFX2oDuIZ0xmoPhoDlGv1T5/XBvueZ+l+5GVa/ kWJLayEOQM2Sl06Muo3K2O03uuCQ2latXhnFCODYk7HbrFzmMeZEnqUMY2v2KaTr aRZzSPn8hB3Ql7q91WBwuvU92arnAwJVyMcfST553RwsizVBabh9XAcDjhmthP5y bqsRp4oe0oEh+psMIgLpTdqBNUT62IiaB/7pqr9+ZWQh/I1jjm+x6wCO/tfzqf5T I4Fc30nIbcwgh4PyVCOzqgf/ElK53IyBKA6EK5nDg7vJKl9FrCSKfse5qtvvWwTd IOK0qut504NFmjdRKqIGre1AmqH/J0Q= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:52 2025 by rpki-client