$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa File: 9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa (raw, json) Hash identifier: plKEODe8pcTtczkB+CjRbBaikOxk+Kbe4F27fKgL+3s= Subject key identifier: D4:DF:42:12:8B:AA:EC:55:B7:E7:CE:3A:F0:9C:CA:AB:A4:F5:0D:C7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B6E027B013B68A5AA6500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.134.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6e:02:7b:01:3b:68:a5:aa:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=f1e36712-035d-49cd-847f-3c007834b348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:b3:11:3e:07:c1:25:10:a8:10:2e:55:6c: a3:3a:e0:7b:d6:24:04:c0:58:e7:ec:d9:e4:7f:83: a2:f1:98:c6:58:e2:ab:5f:17:4c:cc:86:cc:5b:e2: 9f:fd:77:bf:cd:54:54:16:ec:60:1e:38:fd:28:fa: 34:5e:a6:11:84:75:4c:10:20:22:0b:d3:81:30:74: 2e:68:33:78:0c:c0:05:08:20:7c:92:84:da:69:df: 7d:3a:19:47:b0:c6:79:e5:8f:8a:b4:99:e9:34:15: a7:1e:49:8c:67:66:96:4b:02:10:95:b8:46:3c:2d: 20:18:df:8d:61:61:23:eb:9b:3e:a6:1d:ef:ee:63: 1b:f8:47:93:e3:59:aa:bd:e0:54:fe:f3:01:fa:cb: 60:44:bc:37:b4:0d:64:37:e6:72:b6:a2:b9:ed:45: 27:88:66:7c:fc:31:cc:31:a3:d9:71:b3:1b:70:0e: 05:fe:81:7e:81:44:2c:c4:55:d7:83:9f:b0:76:5e: 90:7c:34:d3:91:e2:f6:e5:13:b8:df:9a:98:0e:bc: 13:53:d4:28:45:bc:03:29:46:84:54:da:40:d6:f0: 20:12:19:74:32:bb:ff:11:cb:ff:da:4d:d0:b6:36: 88:b0:2a:2a:25:a8:0a:5d:bc:3a:e7:32:d5:bc:4c: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:42:12:8B:AA:EC:55:B7:E7:CE:3A:F0:9C:CA:AB:A4:F5:0D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:30:69:fc:d1:c9:5c:77:3c:c8:14:2c:ca:03:39:c0:bb:d9: 89:c0:cf:fa:2e:10:d6:4c:02:fe:27:76:d2:f7:55:5d:77:88: 8e:e0:e4:8e:b9:e0:74:5e:ed:8c:ef:57:a8:1e:68:93:4b:ce: 66:24:7f:ca:58:34:ba:03:b4:86:61:61:40:8b:ce:1c:6f:6f: 3c:01:75:52:ac:91:4f:48:4e:dd:6e:51:cd:31:9a:67:f5:1b: b6:83:ca:08:7f:34:b8:87:1b:f9:ef:d5:78:e6:5d:59:91:ed: 1e:c3:a5:f6:f6:5b:56:5b:90:9f:d4:4f:68:3a:a2:3f:49:fd: 37:8e:39:25:27:8d:b1:02:89:64:77:fb:ef:14:44:8d:c7:56: 45:72:3c:9f:7d:64:b4:bc:51:57:9e:b9:33:1c:11:89:3f:49: 92:76:9e:c6:82:05:d6:7a:7e:ee:91:15:58:61:41:6a:ff:04: b1:11:36:02:7c:24:00:0b:de:79:02:c8:2e:b0:81:63:46:cd: 16:ec:e4:15:da:52:b3:5c:04:12:61:37:41:ee:2a:31:bd:46: a1:49:5b:c1:85:e5:53:7f:8c:05:96:aa:50:a0:4c:b8:06:1e: 48:d2:18:b9:98:c9:51:25:e9:74:0c:3a:6c:63:f6:a1:29:56: 07:ce:66:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e24CewE7aKWqZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZjFlMzY3MTItMDM1ZC00OWNkLTg0N2YtM2MwMDc4MzRiMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBuzET4HwSUQqBAuVWyjOuB71iQEwFjn7Nnk f4Oi8ZjGWOKrXxdMzIbMW+Kf/Xe/zVRUFuxgHjj9KPo0XqYRhHVMECAiC9OBMHQu aDN4DMAFCCB8koTaad99OhlHsMZ55Y+KtJnpNBWnHkmMZ2aWSwIQlbhGPC0gGN+N YWEj65s+ph3v7mMb+EeT41mqveBU/vMB+stgRLw3tA1kN+ZytqK57UUniGZ8/DHM MaPZcbMbcA4F/oF+gUQsxFXXg5+wdl6QfDTTkeL25RO435qYDrwTU9QoRbwDKUaE VNpA1vAgEhl0Mrv/Ecv/2k3QtjaIsCoqJagKXbw65zLVvEzjRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTfQhKLquxVt+fOOvCcyquk9Q3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTMzMWMyNGYtZmIwNi0z YzFjLWFhYjgtODgzNjc4N2E3ZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4wafzRyVx3PMgULMoDOcC72YnAz/ouENZMAv4ndtL3VV13iI7g5I65 4HRe7YzvV6geaJNLzmYkf8pYNLoDtIZhYUCLzhxvbzwBdVKskU9ITt1uUc0xmmf1 G7aDygh/NLiHG/nv1XjmXVmR7R7Dpfb2W1ZbkJ/UT2g6oj9J/TeOOSUnjbECiWR3 ++8URI3HVkVyPJ99ZLS8UVeeuTMcEYk/SZJ2nsaCBdZ6fu6RFVhhQWr/BLERNgJ8 JAAL3nkCyC6wgWNGzRbs5BXaUrNcBBJhN0HuKjG9RqFJW8GF5VN/jAWWqlCgTLgG HkjSGLmYyVEl6XQMOmxj9qEpVgfOZvk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:46:34 2025 by rpki-client